Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4C16185C907011EF83B14035C4F9AE02.roa
File: 4C16185C907011EF83B14035C4F9AE02.roa (raw, json)
Hash identifier: WFmVU9BqXQYRnpTVcXBFOCuaNld5x9S2YGe4eITWYyY=
Subject key identifier: FF:E8:BB:29:E1:E4:C2:61:80:D6:0E:CE:F1:3F:45:2A:F4:89:62:50
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 18D7
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4C16185C907011EF83B14035C4F9AE02.roa
Signing time: Tue 22 Oct 2024 13:02:31 +0000
ROA not before: Tue 22 Oct 2024 13:02:31 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 113.203.222.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 06:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6359 (0x18d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 22 13:02:31 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6717a267-afa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a8:dc:c1:c1:8c:f5:11:dd:7f:3b:4a:e2:a6:
3d:b7:60:a9:e8:a9:4b:33:60:40:92:0e:1d:98:65:
9e:ef:f7:87:59:01:13:f3:28:81:21:2e:26:15:8d:
22:3b:08:a4:94:9f:1a:19:82:fb:0c:12:6c:2b:9c:
e5:fc:35:61:9c:02:ca:c1:95:85:e4:37:e5:f4:90:
95:30:e6:62:64:83:d3:fd:c7:71:01:f0:c4:46:15:
cd:a3:58:7f:e9:08:93:32:15:14:a8:b1:21:1e:7a:
c5:a4:9c:89:7d:03:ad:de:76:6b:99:fe:cf:06:4d:
18:9d:18:cd:05:07:8c:f1:b9:32:bd:a7:cc:72:c1:
a2:1c:50:e0:9c:ce:0a:f5:83:c5:ef:ed:25:97:b6:
8c:9c:3a:64:c5:39:75:c3:73:29:8b:cd:d7:4b:97:
8b:74:d6:ff:cb:5d:fa:6e:e8:fd:5b:4f:88:00:e9:
43:bc:61:8c:97:53:5f:cf:00:9d:db:eb:06:3f:36:
b1:58:04:04:d1:02:22:fc:fe:0d:b9:61:d0:41:c0:
39:bd:9d:00:56:52:3e:95:7d:55:5b:1e:37:a7:46:
53:22:7c:29:3f:d3:dc:1e:e6:ab:0a:11:68:ba:69:
7d:f3:21:e5:d4:73:8e:16:26:33:77:58:0e:9d:09:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E8:BB:29:E1:E4:C2:61:80:D6:0E:CE:F1:3F:45:2A:F4:89:62:50
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4C16185C907011EF83B14035C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.222.0/24
113.203.224.0/23
115.167.5.0-115.167.6.255
115.167.9.0/24
115.167.29.0-115.167.31.255
115.167.48.0/24
115.167.77.0/24
180.178.146.0/24
180.178.149.0-180.178.150.255
180.178.163.0/24
180.178.168.0/24
180.178.170.0/24
223.29.238.0/24
Signature Algorithm: sha256WithRSAEncryption
88:10:2b:d3:09:cc:ca:c5:78:13:fc:ef:08:ce:90:e0:25:4a:
64:ef:20:c0:1c:6c:76:45:9d:12:f5:cf:d1:01:aa:e3:f3:f6:
da:36:c2:ab:78:4a:cc:9b:87:dd:2d:a9:96:1b:09:de:74:fc:
32:1c:61:ed:fe:38:61:d6:8a:2f:70:b3:f0:5e:d7:18:14:3e:
42:a6:23:7e:1a:c8:7c:cb:33:99:f3:4b:0d:7d:a6:a5:98:21:
54:40:87:5c:3f:4e:f1:a1:8c:a7:c9:d0:1e:da:c2:8b:f4:f0:
9f:a0:09:e6:65:d0:f2:53:98:64:47:a1:17:72:33:a6:d4:86:
59:04:08:26:41:50:2f:4d:f7:ac:ba:d9:88:e8:83:d7:77:a0:
68:f1:29:56:a0:e3:cd:32:4a:fd:0f:aa:f0:05:85:2b:b9:9d:
f0:d6:e5:2d:3c:32:41:1f:1c:8b:21:25:6f:09:3c:19:a4:da:
f0:16:4b:25:25:52:ed:06:10:9d:fc:7c:16:20:90:9f:f6:04:
ed:02:5a:a5:10:58:52:92:dc:02:bc:aa:1e:4e:58:ff:60:97:
3e:6a:69:47:68:e4:47:c5:72:5d:b0:0f:5a:f0:99:64:fc:bc:
1a:cd:55:a9:58:b2:ac:0e:4a:06:ac:88:fe:c7:5f:7f:07:83:
b3:42:d1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:16:52 2025 by rpki-client