Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2C29F0244E3811EFB2756E36C4F9AE02.roa
File: 2C29F0244E3811EFB2756E36C4F9AE02.roa (raw, json)
Hash identifier: JSlhAgwSaFM+RLZxzpg25a9b5R6F5T6baymDi2Etc+U=
Subject key identifier: 79:49:98:27:88:98:3A:D9:9A:A3:F4:E1:29:6A:19:2E:C7:AB:6C:89
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 14B6
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2C29F0244E3811EFB2756E36C4F9AE02.roa
Signing time: Fri 16 Aug 2024 10:09:48 +0000
ROA not before: Fri 16 Aug 2024 10:09:48 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
115.167.52.0/22 maxlen: 24
115.167.60.0/22 maxlen: 22
115.167.64.0/24 maxlen: 24
115.167.65.0/24 maxlen: 24
115.167.67.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Aug 2024 07:08:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5302 (0x14b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 16 10:09:48 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66bf256c-6684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:78:47:59:a2:33:04:d5:00:16:c2:6e:40:
9d:80:4a:58:c0:09:a2:b3:17:4c:a2:c2:a7:08:06:
06:2c:78:bf:8b:b7:73:cd:43:ba:57:54:60:38:33:
cb:72:3c:f8:7a:50:8f:7e:56:12:dc:1e:e4:31:56:
5e:1a:a0:c2:74:43:d9:80:75:49:87:e4:14:21:a7:
12:e1:de:50:6e:3f:a3:09:79:4d:3b:2b:ff:67:98:
c8:83:17:8b:73:0b:6b:1f:ec:a9:1b:1d:d9:53:59:
02:18:6f:3d:b6:aa:c9:73:78:a3:35:ae:62:22:b1:
38:76:c5:14:17:4d:2d:1d:24:3d:60:e7:3b:2d:03:
41:03:2f:b2:1d:d0:44:8c:66:24:da:1e:c4:a1:2f:
b3:04:7a:f5:8c:5e:84:ab:51:0a:1c:98:87:d3:2e:
ac:60:83:42:16:96:08:1c:3b:58:72:ef:e7:58:7d:
2b:a7:b9:28:03:68:af:43:22:36:68:05:05:4b:17:
2f:64:e7:91:f5:02:70:8d:10:7a:27:fa:fe:9a:c7:
ee:57:c0:b5:e7:85:b8:18:21:03:b9:06:10:b8:e1:
8a:23:59:de:3c:50:31:ee:93:b5:a0:c9:e4:82:86:
f3:3c:68:00:81:a5:85:a7:4e:38:54:94:65:7a:d7:
33:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:49:98:27:88:98:3A:D9:9A:A3:F4:E1:29:6A:19:2E:C7:AB:6C:89
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2C29F0244E3811EFB2756E36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
113.203.209.0/24
113.203.211.0/24
113.203.214.0/23
113.203.219.0/24
113.203.222.0/24
113.203.227.0/24
113.203.241.0/24
113.203.243.0/24
113.203.246.0/24
115.167.52.0/22
115.167.60.0-115.167.65.255
115.167.67.0/24
115.167.76.0/24
115.167.124.0/23
180.178.142.0/24
180.178.151.0/24
180.178.161.0-180.178.162.255
180.178.164.0/24
180.178.188.0/24
180.178.190.0/24
223.29.225.0/24
223.29.227.0/24
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:d0:8a:dd:f6:73:9d:c1:06:96:b3:f0:5a:71:ab:fa:16:00:
a8:e9:74:3d:1f:07:95:02:7e:66:08:0b:80:17:76:ab:de:b3:
98:39:3a:04:b9:1b:e1:ef:1e:79:26:20:4c:14:34:66:10:63:
f7:eb:21:86:fc:5a:1e:a7:54:db:ba:33:16:c5:ec:06:94:23:
c9:1f:81:c3:a9:fd:e9:ee:b3:56:6b:29:b7:26:c3:d6:21:82:
e4:8e:35:0d:cb:7b:c1:0f:12:3c:57:20:ce:90:c8:a2:53:27:
25:3f:c1:87:8b:de:76:0d:61:b8:04:6e:05:be:bc:fa:f9:f7:
c2:0a:10:13:8e:16:b5:3b:f3:78:e4:b9:f4:9d:7e:3e:9b:ea:
83:f3:74:d1:58:59:d2:05:6f:c8:a0:bf:17:79:2e:7b:f9:11:
4b:89:70:5f:19:7f:6a:77:f2:46:48:86:4e:7c:03:ca:af:0f:
50:6e:ec:3e:d3:58:88:1f:42:1a:14:a4:fa:6c:c0:bf:42:c9:
41:c2:2a:c8:5c:d9:ca:a1:50:5b:5a:e5:de:1a:e1:2a:a9:6c:
19:80:30:ec:0b:34:50:04:dd:db:00:6d:7d:c0:0d:10:da:b6:
1c:85:a6:10:f7:f9:83:10:40:99:14:e3:8c:08:ce:c7:02:04:
d2:e3:f0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:21:48 2025 by rpki-client