Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/46D8F630089211F0B505857FC4F9AE02.roa
File: 46D8F630089211F0B505857FC4F9AE02.roa (raw, json)
Hash identifier: iO24gxT6qxMRyA9GcA7NJVVb8WSdLpSAR3ObwY0pFb4=
Subject key identifier: 31:F3:28:E5:9C:6B:41:34:72:70:E1:8F:41:99:74:78:08:9B:23:25
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2501
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/46D8F630089211F0B505857FC4F9AE02.roa
Signing time: Mon 24 Mar 2025 09:28:00 +0000
ROA not before: Mon 24 Mar 2025 09:28:00 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
103.151.26.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.15.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/23 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.90.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.101.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.108.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.180.0/24 maxlen: 24
180.178.181.0/24 maxlen: 24
180.178.182.0/24 maxlen: 24
180.178.183.0/24 maxlen: 24
180.178.184.0/22 maxlen: 22
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 11:13:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9473 (0x2501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Mar 24 09:28:00 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67e1259f-4ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:81:e8:94:b5:fe:47:b5:e4:89:60:27:f5:
11:b9:af:e0:92:f4:65:ce:06:df:a6:64:54:d3:4c:
20:ea:18:62:ec:94:6b:22:20:ed:88:57:a3:5d:9a:
e0:33:b8:20:ee:25:b9:a6:a2:89:2c:d5:5c:de:ad:
1c:34:43:c2:8d:4e:72:63:72:ac:f1:1f:0f:84:1a:
79:be:85:48:bc:c1:ce:c9:73:45:f6:b5:66:34:59:
f8:83:59:88:a2:15:19:5c:33:11:30:cd:27:76:44:
bf:42:7d:27:43:61:8b:92:29:bb:e3:a3:5f:4e:de:
8a:0b:c3:5b:86:c7:ba:33:1f:cb:5a:44:0a:39:d7:
dd:73:22:5c:e6:15:81:53:2a:fa:9b:7d:5f:4f:ee:
08:ea:ea:8a:3e:da:06:1d:f6:17:92:7f:5f:a8:15:
1c:3d:ae:79:ad:55:bc:83:e4:8a:4e:d3:a1:80:9c:
26:6a:c3:ff:61:5c:12:a2:a3:18:ab:52:4b:a1:20:
3b:43:f4:82:52:17:ee:9d:9c:a9:7b:98:16:9a:97:
bb:a5:23:ec:7a:c9:21:d4:8f:dc:58:f5:3d:f5:99:
29:43:3e:53:95:b3:11:af:1d:29:12:c2:ef:4f:91:
db:cf:7b:7b:7d:15:79:e5:ce:69:78:c4:c3:71:c2:
f8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F3:28:E5:9C:6B:41:34:72:70:E1:8F:41:99:74:78:08:9B:23:25
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/46D8F630089211F0B505857FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
103.151.26.0/24
113.203.208.0-113.203.220.255
113.203.222.0/23
113.203.227.0/24
113.203.229.0-113.203.231.255
113.203.241.0-113.203.246.255
113.203.248.0/24
113.203.252.0/22
115.167.6.0/24
115.167.15.0-115.167.19.255
115.167.28.0/22
115.167.56.0-115.167.61.255
115.167.64.0/24
115.167.73.0/24
115.167.78.0/24
115.167.101.0-115.167.103.255
115.167.117.0-115.167.119.255
115.167.123.0-115.167.125.255
175.110.64.0/22
175.110.89.0-175.110.91.255
175.110.97.0-175.110.98.255
175.110.101.0/24
175.110.104.0/21
180.178.142.0/24
180.178.144.0/24
180.178.146.0-180.178.150.255
180.178.160.0-180.178.171.255
180.178.176.0/20
202.92.26.0/24
223.29.228.0/23
223.29.231.0/24
223.29.237.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a4:b1:fd:aa:eb:59:6c:ac:18:20:33:4f:14:23:1d:26:df:
d2:6b:07:92:21:01:22:d1:81:96:68:e2:11:5a:e2:7d:b2:95:
00:69:6d:36:c3:c8:03:62:ff:43:82:0d:d5:55:88:4e:c7:da:
9d:b1:85:f4:bb:9e:66:0f:3c:51:76:a3:e8:ac:9a:5d:19:71:
22:11:05:fa:80:c6:ee:bb:59:c7:92:e0:40:46:68:6b:9e:cf:
de:f5:31:85:85:33:bf:72:ef:1e:5c:ed:ef:2e:b8:e3:96:0b:
89:f7:36:a0:69:c6:3e:67:fa:8e:4b:f6:cd:86:fb:93:03:db:
72:93:15:3b:fd:05:b0:5c:eb:39:0b:41:09:58:fe:64:86:dd:
fa:b9:c7:4c:98:e4:40:8c:21:1a:b0:6f:ed:2e:00:33:1c:ea:
1c:bb:3b:29:f4:95:d3:26:b9:5c:91:ee:97:36:d1:1f:67:be:
49:06:b8:33:7c:2d:62:a6:3e:e2:b8:14:cf:f0:b9:7d:83:80:
20:74:5e:f1:8f:eb:5f:24:4d:dd:0a:5c:70:88:d6:0b:2b:c9:
ec:22:1e:32:b9:0c:b3:76:4d:b3:54:9b:b1:77:54:ad:6a:92:
53:0f:9c:ea:e4:13:11:15:80:72:f0:49:34:6d:77:4a:77:07:
29:cc:bb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:09:16 2025 by rpki-client