Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/450EDC3CD30611EFBA07D020C4F9AE02.roa
File: 450EDC3CD30611EFBA07D020C4F9AE02.roa (raw, json)
Hash identifier: cUr9SdNoU776Tg3A9g+6HJ6sb4koDh/sGpm06VovNEM=
Subject key identifier: 60:D9:C7:4A:9B:CA:99:CE:7F:75:D5:2D:A6:02:FF:5A:36:EF:0E:41
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 21D4
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/450EDC3CD30611EFBA07D020C4F9AE02.roa
Signing time: Wed 15 Jan 2025 06:38:56 +0000
ROA not before: Wed 15 Jan 2025 06:38:56 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 16589
IP address blocks: 43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.15.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 05:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8660 (0x21d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 15 06:38:56 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67875800-6376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:db:5f:f8:7e:09:1a:c3:21:4a:1f:3d:fe:
d9:65:c5:15:9a:97:98:07:96:67:00:e8:d3:b4:40:
aa:84:3e:d7:d3:06:c9:1c:63:ea:37:c2:45:36:6f:
01:42:43:6b:e6:5c:86:75:df:62:6c:39:2d:0c:7f:
5b:39:1b:62:d8:aa:20:a7:ec:87:63:ba:77:cd:6f:
45:57:e8:5a:e6:2c:91:9f:08:17:88:f4:56:b7:13:
66:28:57:b8:aa:da:72:bb:91:37:05:9f:e2:c9:1f:
ba:fd:c2:e5:9e:31:50:b3:69:5d:46:ff:bd:9d:95:
e8:33:c5:c4:c7:75:1e:4b:40:8b:e2:f6:1e:c0:06:
b5:21:50:2b:f3:39:23:e4:4b:d3:51:51:f3:84:ad:
0a:67:7e:ae:4c:23:95:dc:ae:ff:84:bc:f5:39:15:
04:6b:87:28:3d:02:5e:cc:04:30:6d:5c:3d:83:15:
af:15:2f:6b:0e:4a:02:23:1c:9b:a9:6b:93:a8:dc:
f2:07:f2:5c:3c:93:48:17:fc:3d:0b:71:ca:34:94:
f1:7b:9c:6d:7b:59:7d:03:49:9f:d6:aa:51:ff:72:
74:69:20:c3:d5:35:a7:29:19:0a:fa:d6:13:61:21:
48:4a:7e:73:ab:c3:53:ac:a6:d2:19:57:f9:33:de:
0d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D9:C7:4A:9B:CA:99:CE:7F:75:D5:2D:A6:02:FF:5A:36:EF:0E:41
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/450EDC3CD30611EFBA07D020C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.225.0-43.226.227.255
113.203.224.0-113.203.230.255
113.203.241.0-113.203.244.255
113.203.248.0/24
113.203.252.0-113.203.254.255
115.167.6.0/24
115.167.15.0-115.167.19.255
115.167.29.0-115.167.31.255
115.167.64.0/24
115.167.66.0/24
115.167.73.0/24
115.167.76.0/24
115.167.78.0/24
115.167.102.0/24
115.167.118.0/23
115.167.122.0-115.167.124.255
175.110.64.0/22
175.110.89.0/24
175.110.97.0-175.110.98.255
175.110.104.0/22
175.110.109.0-175.110.111.255
202.92.18.0/24
202.92.20.0/24
223.29.228.0/22
223.29.235.0-223.29.239.255
Signature Algorithm: sha256WithRSAEncryption
2a:42:37:db:8f:a8:d7:9e:18:f4:12:81:1c:8a:57:90:e9:c6:
1d:29:57:dd:9e:68:ed:5a:fe:d4:ff:50:dc:1b:c8:aa:34:a9:
98:12:38:ee:91:05:a0:40:b8:42:9b:10:8b:58:e7:f2:44:86:
f2:fa:83:f0:08:f0:12:98:ad:96:c1:02:6f:cf:b8:d6:9c:3f:
d1:41:e0:11:d0:87:8e:d6:ad:bc:85:0e:e0:29:51:6e:59:48:
49:4f:99:28:34:7a:fc:42:0f:96:a3:eb:45:af:18:fc:ef:d6:
22:a3:0a:41:3d:56:f0:3f:34:59:c5:0b:ae:dd:26:86:43:a5:
09:ee:0e:a3:42:50:fb:81:40:76:2f:f9:65:6d:6d:73:c9:24:
5f:d5:26:a1:df:40:63:43:dc:cc:e5:48:3c:73:1e:8f:bd:bb:
d6:b9:2c:01:9d:57:de:fb:8b:d8:56:1c:ab:6d:35:56:e9:e4:
2e:3a:c6:da:64:40:79:fd:92:ca:4a:c8:82:50:b7:29:23:9e:
ac:4f:32:ad:aa:96:bf:6d:c4:cc:d9:b0:fd:69:2c:fc:75:d6:
8b:0a:67:f3:3c:50:6d:c0:71:3e:78:ef:6f:7d:01:61:62:48:
0d:b5:14:49:6c:7e:be:76:d7:f8:2c:76:70:03:72:b6:9d:36:
6c:a4:b9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:07:27 2025 by rpki-client