Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/12927C3287C511EFB2E0882BC4F9AE02.roa
File: 12927C3287C511EFB2E0882BC4F9AE02.roa (raw, json)
Hash identifier: Irw/N1lQDy6PTiTIKdwgXVLmcpGM7C9c/iRgtGiEQcc=
Subject key identifier: 16:9B:76:A4:1F:6B:F7:CD:61:7F:23:E9:01:D5:7C:A9:DD:9C:A0:CD
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 17DC
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/12927C3287C511EFB2E0882BC4F9AE02.roa
Signing time: Fri 11 Oct 2024 11:39:11 +0000
ROA not before: Fri 11 Oct 2024 11:39:11 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 205220
IP address blocks: 113.203.212.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.228.0/22 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
115.167.116.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
175.110.90.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6108 (0x17dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 11 11:39:11 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67090e5f-b15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:b0:ac:04:fe:55:a1:aa:92:e1:e7:aa:96:
ba:82:9e:d7:5f:c4:4d:70:a2:7a:58:64:63:74:ff:
bb:17:4d:b4:e7:96:58:eb:05:d2:2d:4e:87:c5:4e:
69:43:59:59:63:d0:ef:ff:6a:44:b8:b0:ca:50:a9:
5c:2a:a1:5a:ff:6d:75:89:83:f1:5a:32:ff:9d:81:
b0:c9:2a:b5:60:b1:94:3f:15:bd:39:d2:62:4c:1e:
14:ae:7c:8e:ac:cc:07:b4:33:67:d5:3e:1d:92:a1:
15:19:7b:bb:26:e7:af:b2:bc:b5:ba:3f:48:c7:43:
74:8e:fd:19:d2:59:ba:11:fa:12:c5:4c:b2:56:39:
fb:29:ac:9f:67:9b:70:f8:d4:83:7f:6f:6f:cd:05:
ae:51:37:74:13:05:48:f4:f7:e8:ac:a5:3f:97:7f:
4c:9d:b0:13:eb:3b:8e:43:49:1c:e7:53:96:d2:d6:
31:32:d8:41:a6:28:c9:16:e1:ab:81:7e:80:71:f5:
68:9e:f7:b3:5b:dc:f2:4b:8a:bd:06:45:3a:99:29:
da:b0:4d:7f:ae:ed:d7:2a:30:d5:02:e9:41:c9:9e:
88:7b:c8:c8:89:82:32:8a:b2:ee:da:d7:e0:22:37:
de:32:e0:9f:31:ff:a7:08:50:61:c7:26:63:e8:04:
bb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9B:76:A4:1F:6B:F7:CD:61:7F:23:E9:01:D5:7C:A9:DD:9C:A0:CD
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/12927C3287C511EFB2E0882BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.212.0/24
113.203.216.0/24
113.203.218.0/24
113.203.223.0/24
113.203.226.0/24
113.203.228.0/22
113.203.233.0/24
113.203.242.0/24
113.203.244.0/23
115.167.116.0/22
115.167.122.0/23
175.110.90.0/23
175.110.107.0/24
175.110.109.0-175.110.111.255
180.178.144.0/24
180.178.146.0/24
180.178.165.0/24
180.178.167.0/24
202.92.18.0/24
202.92.20.0/24
223.29.231.0/24
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
75:62:59:ca:43:e1:f7:ae:14:64:b1:fc:ea:75:59:7e:5e:7c:
54:7f:06:02:b0:d8:5c:83:f0:4f:52:10:30:3a:53:f7:9e:b0:
9d:c1:5b:38:58:7a:c2:e4:70:da:95:30:0c:f4:a2:d5:3f:68:
4e:36:84:1c:ea:b0:e1:5f:79:cc:e5:54:8e:12:fe:7e:6f:ec:
b3:a7:31:76:08:f0:df:e9:86:6c:7b:c1:fe:6f:7c:2e:38:62:
50:d0:fb:84:0f:24:98:10:77:58:41:67:6a:e3:e1:ea:cb:71:
63:dd:e0:a2:95:2b:fa:4b:1c:59:ee:94:89:ba:93:be:48:7c:
23:50:1a:e1:63:b6:8b:f9:0f:39:44:3d:3b:02:39:5e:74:91:
cd:0f:d1:38:4f:93:a5:e9:e8:d5:d3:b2:93:6c:9d:f7:26:98:
7e:03:ca:be:a2:57:e3:f5:cb:c1:a9:ac:e1:57:2f:ec:a4:f1:
58:93:50:82:87:8e:be:e5:47:27:af:7a:e9:01:f4:fc:74:52:
fb:e2:2c:08:72:e8:e6:49:63:55:13:74:fc:00:c0:30:e5:10:
ce:21:ce:d7:57:53:ad:78:c6:53:b4:4c:88:a7:a0:a8:82:46:
fa:eb:41:f7:94:cb:0c:a2:e9:b2:79:0a:e0:eb:0a:07:70:e9:
db:77:de:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:00:22 2025 by rpki-client