Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2BA157B0048A11F0BDB3210BC4F9AE02.roa
File: 2BA157B0048A11F0BDB3210BC4F9AE02.roa (raw, json)
Hash identifier: 4Z7e/I/7OZ68CmE35WCAVou7FbdjtWZk7tARUZWS9rU=
Subject key identifier: A7:23:06:9D:68:31:E7:48:96:7D:32:FA:E4:8B:9E:B8:B2:D4:78:8C
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 24CC
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2BA157B0048A11F0BDB3210BC4F9AE02.roa
Signing time: Wed 19 Mar 2025 06:19:53 +0000
ROA not before: Wed 19 Mar 2025 06:19:53 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
103.151.26.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.15.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 22
115.167.28.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/23 maxlen: 24
115.167.62.0/23 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.80.0/24 maxlen: 24
175.110.81.0/24 maxlen: 24
175.110.82.0/24 maxlen: 24
175.110.83.0/24 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.90.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.101.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.108.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.180.0/24 maxlen: 24
180.178.181.0/24 maxlen: 24
180.178.182.0/24 maxlen: 24
180.178.183.0/24 maxlen: 24
180.178.184.0/22 maxlen: 22
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Mar 2025 07:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9420 (0x24cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Mar 19 06:19:53 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67da6209-9cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fe:1a:0a:2f:ee:54:63:60:97:0b:34:71:78:
89:a7:e9:46:35:a0:21:7a:dd:2d:d6:34:d6:24:cc:
ca:d7:22:47:77:d5:30:d9:84:60:b1:b7:9a:9e:5c:
d2:96:0d:c2:99:d9:5a:4f:73:42:09:f0:33:01:6d:
7d:ed:26:e9:fb:b0:65:1a:64:3b:24:90:eb:7b:d1:
89:32:4e:fb:58:23:f9:d3:99:ea:de:ab:6a:38:15:
b3:80:55:74:e7:9f:e1:38:70:e5:da:1c:2e:ed:38:
e1:cd:fb:ca:51:49:6f:68:32:15:5c:71:fb:92:6c:
27:c5:b4:8c:76:f8:d2:3c:a1:a0:fb:44:15:8a:b3:
4c:fd:ae:f5:a1:ed:e0:c1:8a:69:e0:39:78:38:19:
70:de:59:a2:20:f0:31:b5:3a:ee:d3:b6:7e:28:89:
92:e2:17:11:84:8c:d7:33:19:14:11:6b:ec:42:d7:
8d:de:de:b7:fe:ee:76:15:58:f4:d3:12:cc:17:b3:
63:83:88:31:e9:47:ef:b8:79:3b:11:61:b1:97:94:
0d:c6:d1:00:78:0b:0a:ca:be:5c:7a:24:df:6d:29:
e2:2d:2a:cd:52:31:48:8c:0e:d1:fe:35:d9:0c:14:
d4:35:c0:2d:0f:3c:bf:d7:87:c6:c1:cd:1e:cd:be:
bc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:23:06:9D:68:31:E7:48:96:7D:32:FA:E4:8B:9E:B8:B2:D4:78:8C
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2BA157B0048A11F0BDB3210BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.225.0-43.226.227.255
103.11.63.0/24
103.151.26.0/24
113.203.208.0-113.203.220.255
113.203.222.0-113.203.227.255
113.203.229.0-113.203.231.255
113.203.233.0/24
113.203.241.0-113.203.246.255
113.203.248.0/24
113.203.252.0/22
115.167.6.0/24
115.167.15.0-115.167.23.255
115.167.28.0/22
115.167.48.0/24
115.167.50.0/24
115.167.56.0-115.167.64.255
115.167.73.0/24
115.167.78.0/24
115.167.101.0-115.167.103.255
115.167.117.0-115.167.119.255
115.167.123.0-115.167.125.255
175.110.64.0/22
175.110.80.0/22
175.110.89.0-175.110.91.255
175.110.97.0-175.110.98.255
175.110.101.0/24
175.110.104.0/21
180.178.142.0/24
180.178.144.0/24
180.178.146.0-180.178.150.255
180.178.160.0-180.178.171.255
180.178.176.0/20
202.92.20.0/24
202.92.26.0/24
223.29.225.0-223.29.226.255
223.29.228.0/22
223.29.237.0/24
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
12:dc:80:78:d6:c2:0f:9f:e8:bb:bb:ca:d2:67:63:4b:71:f7:
5a:b7:7f:62:b5:6b:1e:d6:b6:56:1c:29:51:d8:82:54:94:8b:
51:d8:e5:ae:55:4c:ef:55:61:26:ec:d5:05:2d:86:69:4b:ad:
57:84:d8:4b:e7:5e:f3:50:3d:ce:f6:c1:98:cb:c9:ef:4d:bd:
d4:0f:e9:a8:72:ab:fb:cf:84:f7:c9:d1:59:cc:71:13:1d:01:
04:68:34:76:5c:b4:4a:6a:c0:53:a4:c0:f2:93:5c:b8:73:a8:
6d:e3:3d:6b:58:fa:07:af:d2:4d:dd:cd:27:74:6b:59:4a:4a:
37:94:c7:ed:8c:62:8e:27:6f:c7:4c:86:36:96:c8:40:3d:eb:
13:5c:8b:08:1d:4f:44:88:1d:1a:ca:21:1a:9e:f9:27:70:68:
7f:31:68:95:54:09:ae:01:cf:4d:ba:c3:5b:94:89:dc:99:a1:
12:c7:f6:90:14:96:22:2e:10:7d:c5:53:7f:de:90:40:f2:94:
69:75:7e:88:b5:c6:54:04:1f:f9:59:58:e6:75:97:c9:55:41:
09:72:37:66:e8:ac:77:0e:e3:f4:13:1e:cd:5e:0e:81:4c:47:
8c:fe:cc:ee:5b:f7:8a:64:d8:18:2b:7a:3f:70:7a:dc:69:12:
2c:e0:27:9a
-----BEGIN CERTIFICATE-----
MIIG0TCCBbmgAwIBAgICJMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjUwMzE5MDYxOTUzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2RhNjIwOS05Y2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy/4aCi/uVGNglws0cXiJp+lGNaAhet0t1jTWJMzK1yJHd9Uw2YRgsbeanlzS
lg3CmdlaT3NCCfAzAW197Sbp+7BlGmQ7JJDre9GJMk77WCP505nq3qtqOBWzgFV0
55/hOHDl2hwu7TjhzfvKUUlvaDIVXHH7kmwnxbSMdvjSPKGg+0QVirNM/a71oe3g
wYpp4Dl4OBlw3lmiIPAxtTru07Z+KImS4hcRhIzXMxkUEWvsQteN3t63/u52FVj0
0xLMF7Njg4gx6UfvuHk7EWGxl5QNxtEAeAsKyr5ceiTfbSniLSrNUjFIjA7R/jXZ
DBTUNcAtDzy/14fGwc0ezb68OwIDAQABo4ID9TCCA/EwHQYDVR0OBBYEFKcjBp1o
MedIln0y+uSLnriy1HiMMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMkJBMTU3QjAw
NDhBMTFGMEJEQjMyMTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggF9BggrBgEFBQcBBwEB
/wSCAWwwggFoMIIBZAQCAAEwggFcMAwDBAAr4uEDBAIr4uADBABnCz8DBABnlxow
DAMEBHHL0AMEAHHL3DAMAwQBccveAwQCccvgMAwDBABxy+UDBANxy+ADBABxy+kw
DAMEAHHL8QMEAHHL9gMEAHHL+AMEAnHL/AMEAHOnBjAMAwQAc6cPAwQDc6cQAwQC
c6ccAwQAc6cwAwQAc6cyMAwDBANzpzgDBABzp0ADBABzp0kDBABzp04wDAMEAHOn
ZQMEA3OnYDAMAwQAc6d1AwQDc6dwMAwDBABzp3sDBAFzp3wDBAKvbkADBAKvblAw
DAMEAK9uWQMEAq9uWDAMAwQAr25hAwQAr25iAwQAr25lAwQDr25oAwQAtLKOAwQA
tLKQMAwDBAG0spIDBAC0spYwDAMEBbSyoAMEArSyqAMEBLSysAMEAMpcFAMEAMpc
GjAMAwQA3x3hAwQA3x3iAwQC3x3kAwQA3x3tAwQA3x3vMA0GCSqGSIb3DQEBCwUA
A4IBAQAS3IB41sIPn+i7u8rSZ2NLcfdat39itWse1rZWHClR2IJUlItR2OWuVUzv
VWEm7NUFLYZpS61XhNhL517zUD3O9sGYy8nvTb3UD+mocqv7z4T3ydFZzHETHQEE
aDR2XLRKasBTpMDyk1y4c6ht4z1rWPoHr9JN3c0ndGtZSko3lMftjGKOJ2/HTIY2
lshAPesTXIsIHU9EiB0ayiEanvkncGh/MWiVVAmuAc9NusNblIncmaESx/aQFJYi
LhB9xVN/3pBA8pRpdX6ItcZUBB/5WVjmdZfJVUEJcjdm6Kx3DuP0Ex7NXg6BTEeM
/szuW/eKZNgYK3o/cHrcaRIs4Cea
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:00:24 2025 by rpki-client