Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/28D08A7EA65711EFB971313BC4F9AE02.roa
File: 28D08A7EA65711EFB971313BC4F9AE02.roa (raw, json)
Hash identifier: jOHx6AGAiW7uD8mCUen2F606TeqnEYU8lK2U8dS5hzU=
Subject key identifier: 61:29:48:33:67:09:24:12:AB:C1:FB:63:CD:72:D4:D2:2D:59:B6:59
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1D4A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/28D08A7EA65711EFB971313BC4F9AE02.roa
Signing time: Tue 19 Nov 2024 16:24:40 +0000
ROA not before: Tue 19 Nov 2024 16:24:40 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.12.0/22 maxlen: 22
115.167.28.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.52.0/24 maxlen: 24
115.167.53.0/24 maxlen: 24
115.167.54.0/24 maxlen: 24
115.167.55.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Nov 2024 08:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7498 (0x1d4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 19 16:24:40 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=673cbbc8-1487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:08:57:8c:77:65:45:2f:f9:ab:ff:6c:ee:
de:8c:6c:10:10:e1:33:c6:69:0c:07:ee:c5:f4:65:
64:2b:59:ed:52:15:e8:9b:a5:01:70:93:6d:64:26:
82:bd:64:ca:b6:bb:b6:e3:17:cf:c7:1a:97:30:35:
b2:29:5e:73:18:ad:a6:9c:5e:55:b8:11:c5:66:9c:
3f:bd:17:8c:bd:c3:44:38:b4:41:6b:74:7b:12:fb:
93:6f:e2:c2:60:a3:d4:1b:a3:b3:97:6e:18:ce:88:
9b:64:b7:7d:22:0e:ec:9d:75:c0:5d:51:d6:a4:de:
f1:25:e4:c8:d8:f5:51:82:ac:78:5b:ec:3d:a8:27:
db:14:ad:97:16:7b:f1:53:b2:d6:d9:3c:d5:30:ac:
7d:33:7a:d9:16:91:24:a3:74:d8:c4:89:59:ec:0d:
76:42:94:9d:f1:16:f9:c4:14:91:cb:e0:d7:e7:4d:
05:aa:87:7f:83:bb:a2:f7:d3:1d:42:91:0d:c5:de:
2d:a6:0e:f1:9e:ce:00:4a:c7:a4:78:8b:7e:07:7a:
88:31:cd:7f:94:8b:87:31:92:b1:57:1a:ba:be:e1:
23:77:ac:91:8b:22:d8:55:b5:cd:ad:9d:14:2a:50:
67:67:50:5b:53:48:5a:e8:ce:c5:2e:eb:d3:b2:b7:
40:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:29:48:33:67:09:24:12:AB:C1:FB:63:CD:72:D4:D2:2D:59:B6:59
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/28D08A7EA65711EFB971313BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.211.0/24
113.203.213.0-113.203.215.255
113.203.219.0/24
113.203.222.0/24
113.203.224.0/23
113.203.227.0/24
113.203.243.0/24
113.203.248.0/24
115.167.3.0/24
115.167.5.0/24
115.167.9.0/24
115.167.12.0/22
115.167.28.0/24
115.167.50.0/24
115.167.52.0/22
115.167.76.0/24
115.167.101.0/24
115.167.103.0/24
115.167.124.0/24
175.110.97.0/24
175.110.104.0/24
175.110.106.0/24
175.110.111.0/24
180.178.144.0/24
180.178.147.0-180.178.151.255
180.178.160.0/24
180.178.162.0/23
180.178.165.0-180.178.171.255
180.178.189.0/24
223.29.228.0/24
223.29.230.0/23
223.29.236.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
54:0c:ba:30:8c:bf:50:24:61:58:b2:6f:0d:3f:79:45:65:67:
29:52:00:9c:96:a6:7b:47:e4:f5:78:84:0d:f4:db:53:55:a9:
2e:4a:97:50:da:ee:a9:71:a4:36:d4:e3:36:4b:fc:6c:8b:5a:
f7:d9:4c:72:36:8f:14:61:79:d2:14:f6:bd:33:01:6b:6c:a3:
27:e3:57:39:14:5d:ed:09:5c:e3:24:a1:ad:6d:f6:41:23:86:
78:8b:0a:a0:f3:bf:59:25:55:c3:40:8e:90:19:1b:f9:81:46:
53:ef:aa:c0:4a:20:e5:1b:43:b1:a4:19:cd:f9:0e:9b:99:b6:
5b:5d:33:19:36:87:c0:22:e3:46:25:e0:c0:5d:61:82:93:59:
fc:c9:a9:07:19:3d:80:67:47:9b:80:5c:f0:aa:c8:02:0c:c6:
81:19:52:aa:39:72:8e:97:e4:d2:84:76:68:2b:22:f1:25:9d:
8f:24:83:e8:f4:55:bd:d5:bf:e5:ec:fb:71:c2:42:10:73:e6:
32:db:93:79:ee:f0:95:40:de:45:e4:d7:2e:88:5d:ef:3e:20:
83:80:af:c4:f4:e2:b0:07:14:43:ed:8e:83:0c:ba:12:83:80:
bc:c0:23:44:f0:27:02:64:76:a0:53:34:8a:0a:69:f8:21:99:
19:50:e6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:14:28 2025 by rpki-client