Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3CFE1B6E9F5A11EFB82A711EC4F9AE02.roa
File: 3CFE1B6E9F5A11EFB82A711EC4F9AE02.roa (raw, json)
Hash identifier: 5gFMWOGf003x4GyS5GgNvEVmQPedGEN1R7UdKdHtrKA=
Subject key identifier: 3C:F6:B4:CD:88:9C:D0:13:AB:48:35:87:99:6A:5E:7C:19:BD:B0:38
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1C65
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3CFE1B6E9F5A11EFB82A711EC4F9AE02.roa
Signing time: Wed 13 Nov 2024 10:27:23 +0000
ROA not before: Wed 13 Nov 2024 10:27:23 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.12.0/22 maxlen: 22
115.167.28.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.52.0/24 maxlen: 24
115.167.53.0/24 maxlen: 24
115.167.54.0/24 maxlen: 24
115.167.55.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 08:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7269 (0x1c65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 13 10:27:23 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67347f0a-a701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:59:07:57:e4:15:13:e5:ef:7c:78:cf:47:45:
26:b8:92:e0:d0:22:27:9e:ae:ad:eb:0c:5c:95:cb:
1f:71:63:a3:10:c0:6f:84:fb:4f:63:bd:14:99:da:
6f:fd:df:06:af:57:ff:b0:3b:19:d9:88:4c:40:d7:
b2:da:b3:1d:41:2f:54:23:e8:47:04:63:36:48:1f:
56:77:32:01:f4:41:ed:97:f0:b3:76:83:7b:fd:8f:
50:f9:91:e1:6b:62:eb:69:a4:dc:98:af:ea:77:c3:
46:e3:bd:37:8a:98:6b:b8:a7:f1:7b:ea:2f:6a:ce:
d5:4a:05:bb:72:4e:73:27:04:e1:3d:13:ab:1c:b4:
5e:2d:85:55:f1:d1:9d:e7:3e:82:ae:82:17:c6:62:
27:d3:92:cd:00:24:60:d4:df:02:1d:a1:2d:35:32:
3d:a6:a5:90:de:e0:02:e0:e1:f6:e5:57:c5:b9:fa:
dc:8f:5d:86:cc:ba:ed:51:84:98:ad:a5:d1:b2:85:
41:11:81:54:9c:ee:9c:f5:8a:df:13:9c:7a:f3:c3:
df:5b:61:1b:6f:5d:83:b9:b5:01:64:2f:b8:26:61:
b6:68:07:85:38:71:8b:6f:25:80:55:3a:c1:68:df:
8f:f3:8d:b8:41:6d:7c:b3:f4:6c:19:6f:02:b0:70:
54:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F6:B4:CD:88:9C:D0:13:AB:48:35:87:99:6A:5E:7C:19:BD:B0:38
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/3CFE1B6E9F5A11EFB82A711EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.211.0/24
113.203.213.0-113.203.214.255
113.203.224.0/23
113.203.227.0/24
113.203.231.0/24
113.203.243.0/24
113.203.248.0/24
115.167.3.0/24
115.167.5.0/24
115.167.9.0/24
115.167.12.0/22
115.167.28.0/22
115.167.48.0/24
115.167.52.0/22
115.167.76.0/24
115.167.101.0/24
115.167.103.0/24
175.110.97.0/24
175.110.104.0/24
175.110.106.0/24
180.178.147.0-180.178.149.255
180.178.160.0/23
180.178.163.0/24
180.178.166.0/24
180.178.168.0/22
180.178.188.0/23
180.178.191.0/24
223.29.229.0/24
223.29.231.0/24
223.29.237.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
13:fd:04:02:5b:53:e4:09:ed:99:5e:c4:7c:cb:05:9e:f0:55:
24:c8:ca:4b:06:47:f5:da:5a:73:50:ea:62:c1:c5:c8:04:05:
95:6c:a5:20:30:3d:33:50:05:38:97:f9:9f:8c:18:fe:59:b0:
3f:81:83:e1:e2:0a:09:64:d6:c5:a6:d1:a4:fd:e7:ad:cf:89:
b5:47:cc:17:64:c5:71:23:65:8b:2b:2f:70:4a:9a:14:b7:34:
cf:41:a8:4f:f7:13:80:c5:5f:c4:fb:88:e9:38:05:ed:5f:ec:
d5:23:13:c9:d2:7a:25:21:7a:9c:3f:4b:18:f5:20:55:40:e6:
ca:6d:04:ff:f9:5b:fd:18:76:f1:06:be:cd:a5:3f:a3:e5:e5:
12:f8:30:dd:2c:fb:18:fa:ad:e8:17:aa:ab:2c:c2:01:24:38:
bc:27:71:67:16:e7:59:46:57:5a:79:04:93:f2:8e:11:50:87:
8c:f1:7f:a5:20:75:b4:7a:b6:d2:fb:06:0f:dd:a9:e1:2e:5f:
9d:70:72:62:77:a0:89:c1:bf:9c:f3:51:63:06:d9:79:1e:e5:
f7:0d:a1:67:34:0c:57:9d:b7:12:e9:bf:c4:58:d8:2a:84:5c:
e4:c7:bf:70:86:64:74:a3:3d:84:e2:6c:5a:56:6f:f8:ea:f9:
ea:44:13:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:41:14 2025 by rpki-client