Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/498790F8668A11EF82CE5A2BC4F9AE02.roa
File: 498790F8668A11EF82CE5A2BC4F9AE02.roa (raw, json)
Hash identifier: tQiZ1Rrh/oQJLJb5s2SOdZA446aQRgKu6/3QNFxfPuY=
Subject key identifier: ED:77:25:E8:14:5A:68:9A:82:2F:E5:FF:3D:A7:4F:39:7F:FF:2A:36
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 15B1
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/498790F8668A11EF82CE5A2BC4F9AE02.roa
Signing time: Thu 05 Sep 2024 16:45:54 +0000
ROA not before: Thu 05 Sep 2024 16:45:54 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
113.203.251.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.152.0/21 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/24 maxlen: 24
180.178.177.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 08:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5553 (0x15b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 5 16:45:54 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66d9e042-381b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:34:a0:78:02:ed:34:d6:47:22:bf:18:3d:
65:6e:93:dd:c2:0a:19:8a:0c:76:c7:89:54:22:45:
ef:63:71:f3:4d:ad:0e:6e:e2:dd:6c:19:14:69:86:
50:81:56:b7:5e:d2:b4:c1:86:e8:4d:bd:99:25:a7:
eb:a7:d7:ee:ca:f0:6b:c3:e6:cd:0d:08:f1:90:99:
51:2c:6d:bb:59:36:7f:54:71:0e:c6:7c:27:b0:67:
b5:d9:d3:35:34:26:e0:90:da:18:a9:9e:d3:0d:4c:
49:23:fc:63:52:ec:57:ce:f1:ea:b5:7c:35:4c:d9:
5d:4d:76:41:70:6f:86:87:05:f5:a0:ad:8c:56:86:
46:17:5c:73:1c:82:f8:a0:9a:c8:28:2a:8f:10:1d:
c4:66:4c:7e:2b:91:26:a3:c0:73:51:75:a4:57:34:
86:c1:30:d3:e4:8f:17:98:e5:a8:71:97:dc:c3:05:
34:c8:06:e7:e0:61:78:e2:6c:c5:c2:57:24:38:c2:
9b:02:a8:e7:19:6e:d4:4d:a0:a7:12:42:7e:b8:66:
46:b9:4a:bf:3e:ac:f4:8b:9e:41:47:50:3e:44:94:
98:ce:d0:85:80:4a:23:d3:43:8a:0c:98:a3:49:41:
58:37:ee:98:9e:74:a7:a2:6f:64:66:d4:ac:46:69:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:77:25:E8:14:5A:68:9A:82:2F:E5:FF:3D:A7:4F:39:7F:FF:2A:36
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/498790F8668A11EF82CE5A2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
103.151.27.0/24
113.203.208.0/24
113.203.210.0/24
113.203.212.0/23
113.203.215.0-113.203.220.255
113.203.222.0-113.203.231.255
113.203.233.0/24
113.203.242.0-113.203.245.255
113.203.248.0/21
115.167.2.0/23
115.167.12.0-115.167.23.255
115.167.50.0/24
115.167.56.0/22
115.167.73.0/24
115.167.78.0/24
115.167.116.0-115.167.123.255
115.167.125.0/24
175.110.88.0/22
175.110.97.0/24
175.110.104.0/22
175.110.109.0-175.110.111.255
180.178.142.0/24
180.178.144.0/24
180.178.146.0/24
180.178.148.0-180.178.150.255
180.178.152.0-180.178.160.255
180.178.163.0/24
180.178.165.0-180.178.171.255
180.178.176.0-180.178.187.255
180.178.189.0/24
180.178.191.0/24
202.92.18.0/24
202.92.20.0/24
202.92.26.0/24
223.29.231.0/24
223.29.235.0-223.29.239.255
Signature Algorithm: sha256WithRSAEncryption
9e:74:06:64:23:99:d7:ef:9b:9c:99:a6:1e:65:6e:b3:90:28:
5c:ec:f0:d2:4c:7d:49:37:81:2f:13:a3:8b:0a:50:75:29:d1:
bd:58:29:c1:d7:8f:59:fd:48:09:3d:84:ef:dd:7f:81:7c:11:
0c:35:dc:3d:e3:84:82:0c:f5:9c:aa:8f:97:ff:f9:e1:af:20:
3a:cf:97:44:a8:ab:5c:de:8f:b0:99:88:75:85:3e:1b:96:99:
02:43:01:08:5d:6b:24:25:8d:f1:46:3f:7f:b7:09:91:59:b6:
6c:0a:4a:ea:16:b6:53:ec:62:b7:69:6b:d9:8d:59:93:2e:ec:
3f:11:01:57:fa:cf:c7:dd:a0:63:6d:de:a5:fb:48:fe:8f:b4:
77:25:fc:6e:c0:83:ef:87:b5:f0:a2:5a:1d:ab:26:d0:88:06:
21:09:8f:f2:02:71:3d:57:7e:4a:5f:a0:65:83:84:db:64:47:
c6:86:ee:08:cf:71:29:c4:46:2b:f9:3c:ff:9e:8b:92:10:5a:
fc:06:94:8c:d8:56:51:0a:88:ce:37:2c:29:c2:42:c5:de:d8:
08:c6:a4:b3:53:ea:55:2c:7b:db:73:4c:58:f1:80:d8:83:09:
45:97:39:16:22:08:79:1a:32:5c:c9:f7:ef:4e:f0:d1:ea:3d:
34:f2:51:f0
-----BEGIN CERTIFICATE-----
MIIGqzCCBZOgAwIBAgICFbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQwOTA1MTY0NTU0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmQ5ZTA0Mi0zODFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArp40oHgC7TTWRyK/GD1lbpPdwgoZigx2x4lUIkXvY3HzTa0ObuLdbBkUaYZQ
gVa3XtK0wYboTb2ZJafrp9fuyvBrw+bNDQjxkJlRLG27WTZ/VHEOxnwnsGe12dM1
NCbgkNoYqZ7TDUxJI/xjUuxXzvHqtXw1TNldTXZBcG+GhwX1oK2MVoZGF1xzHIL4
oJrIKCqPEB3EZkx+K5Emo8BzUXWkVzSGwTDT5I8XmOWocZfcwwU0yAbn4GF44mzF
wlckOMKbAqjnGW7UTaCnEkJ+uGZGuUq/Pqz0i55BR1A+RJSYztCFgEoj00OKDJij
SUFYN+6YnnSnom9kZtSsRmlJHwIDAQABo4IDzzCCA8swHQYDVR0OBBYEFO13JegU
Wmiagi/l/z2nTzl//yo2MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNDk4NzkwRjg2
NjhBMTFFRjgyQ0U1QTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFXBggrBgEFBQcBBwEB
/wSCAUYwggFCMIIBPgQCAAEwggE2AwQAZws/AwQAZ5cbAwQAccvQAwQAccvSAwQB
ccvUMAwDBABxy9cDBABxy9wwDAMEAXHL3gMEA3HL4AMEAHHL6TAMAwQBccvyAwQB
ccv0AwQDccv4AwQBc6cCMAwDBAJzpwwDBANzpxADBABzpzIDBAJzpzgDBABzp0kD
BABzp04wDAMEAnOndAMEAnOneAMEAHOnfQMEAq9uWAMEAK9uYQMEAq9uaDAMAwQA
r25tAwQEr25gAwQAtLKOAwQAtLKQAwQAtLKSMAwDBAK0spQDBAC0spYwDAMEA7Sy
mAMEALSyoAMEALSyozAMAwQAtLKlAwQCtLKoMAwDBAS0srADBAK0srgDBAC0sr0D
BAC0sr8DBADKXBIDBADKXBQDBADKXBoDBADfHecwDAMEAN8d6wMEBN8d4DANBgkq
hkiG9w0BAQsFAAOCAQEAnnQGZCOZ1++bnJmmHmVus5AoXOzw0kx9STeBLxOjiwpQ
dSnRvVgpwdePWf1ICT2E791/gXwRDDXcPeOEggz1nKqPl//54a8gOs+XRKirXN6P
sJmIdYU+G5aZAkMBCF1rJCWN8UY/f7cJkVm2bApK6ha2U+xit2lr2Y1Zky7sPxEB
V/rPx92gY23epftI/o+0dyX8bsCD74e18KJaHasm0IgGIQmP8gJxPVd+Sl+gZYOE
22RHxobuCM9xKcRGK/k8/56LkhBa/AaUjNhWUQqIzjcsKcJCxd7YCMaks1PqVSx7
23NMWPGA2IMJRZc5FiIIeRoyXMn3707w0eo9NPJR8A==
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:13 2025 by rpki-client