Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2DE42808701611EFA671D864C4F9AE02.roa
File: 2DE42808701611EFA671D864C4F9AE02.roa (raw, json)
Hash identifier: RWv5aGa7wkH7O4tQ1JEcB8Hej7oKltOVhQiWXw2szIE=
Subject key identifier: C9:47:AA:37:E3:AE:C8:F8:21:0E:27:7B:82:84:1A:83:76:4A:F5:92
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 15EA
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2DE42808701611EFA671D864C4F9AE02.roa
Signing time: Thu 12 Sep 2024 05:23:16 +0000
ROA not before: Thu 12 Sep 2024 05:23:16 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.228.0/22 maxlen: 22
113.203.248.0/22 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.152.0/21 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/22 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 10:45:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5610 (0x15ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 12 05:23:16 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66e27ac4-7b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:d0:0b:a9:00:f4:bc:08:dc:23:b2:2d:f4:
8c:ab:0a:a8:d7:31:fd:ac:08:1e:57:46:59:c6:ba:
79:74:24:61:68:0c:7e:4e:02:95:22:d3:3a:00:40:
5b:eb:d0:7e:a9:b6:8c:88:03:57:62:08:cd:32:47:
26:5a:8e:57:15:c5:b2:ba:f6:25:ab:ca:eb:76:d0:
2d:11:8a:5b:8d:31:22:2d:09:b4:5d:39:c1:ca:ab:
96:fa:2a:9e:4a:d5:c3:c7:63:19:73:ad:70:1a:33:
e7:63:24:a5:5c:8b:81:7d:d0:4e:1b:37:dc:79:74:
a1:22:8d:dc:82:bc:c6:ea:68:82:eb:c2:b5:87:62:
1f:a6:3e:50:15:7a:ae:d9:dc:a1:99:b8:35:2c:04:
c0:79:29:fa:a7:78:8d:99:1a:9e:14:5f:c3:31:ac:
bc:fc:12:8f:00:cc:85:67:1e:6c:5d:a4:37:29:8e:
15:2e:e1:5c:e5:6d:4c:fe:2d:63:71:1f:5d:5d:3a:
d8:d5:3a:16:36:3a:fb:e6:a8:34:ce:d6:97:f8:8a:
40:5f:e1:0c:ed:0e:c4:5a:46:ee:2f:13:91:a2:55:
2f:f3:be:ab:7c:3a:cb:ef:82:73:32:37:79:62:f3:
3f:d3:82:d8:b9:ea:78:30:58:6e:68:6a:3e:5e:9f:
ee:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:47:AA:37:E3:AE:C8:F8:21:0E:27:7B:82:84:1A:83:76:4A:F5:92
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/2DE42808701611EFA671D864C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/24
113.203.210.0/24
113.203.212.0/23
113.203.216.0-113.203.218.255
113.203.223.0-113.203.226.255
113.203.228.0/22
113.203.248.0/22
180.178.144.0/24
180.178.146.0/24
180.178.148.0-180.178.150.255
180.178.152.0-180.178.160.255
180.178.163.0/24
180.178.165.0-180.178.171.255
180.178.176.0-180.178.187.255
180.178.189.0/24
180.178.191.0/24
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
58:0c:cf:17:80:f3:8e:73:23:bb:e7:26:f1:b6:37:7f:3e:d0:
0d:dd:66:53:d2:6b:a2:5d:56:50:68:3a:33:8c:09:16:19:3f:
5c:fa:b7:97:dc:37:3a:53:cc:f3:03:cf:9b:9a:aa:d6:65:06:
a4:c7:5f:b3:5a:12:8c:2d:b3:52:af:b1:ff:18:54:b9:c4:ed:
b3:dd:d8:9c:1c:ae:4d:d4:47:cb:6f:c8:94:34:2c:78:59:26:
b5:37:27:82:da:6f:d3:ad:ff:e8:f0:e4:71:31:de:14:06:c6:
f8:8e:50:2a:64:30:bd:46:32:d5:37:f6:08:25:03:00:c5:33:
4f:94:b6:c9:ed:f3:cc:ca:a9:3d:88:b9:4a:ff:cb:66:53:37:
d8:0e:67:80:a3:51:46:67:70:1d:84:3d:63:00:91:88:de:1e:
f3:b6:06:60:1b:b3:95:93:c8:69:76:0b:b3:c2:30:71:d9:7d:
27:65:44:3d:b6:a4:52:9c:4c:77:d4:60:e4:72:39:69:2f:07:
e0:6f:58:d0:51:ee:ab:a5:ab:d0:77:de:cf:73:6f:3d:0c:bc:
9f:17:fd:3d:d6:13:49:7f:d2:fb:44:0e:60:6e:38:01:31:d8:
76:0c:e1:5e:32:3f:76:32:c1:aa:c3:fb:55:54:4b:d7:46:5b:
d6:5d:25:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:14 2025 by rpki-client