Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4CB8C45C8C7011EFB575016EC4F9AE02.roa
File: 4CB8C45C8C7011EFB575016EC4F9AE02.roa (raw, json)
Hash identifier: o7XbV6Hj9mp/ZECDh5pBDhShzU8U0OrQio1zyqCNxEg=
Subject key identifier: 3B:43:15:CE:F2:12:4A:B6:D4:CF:54:7A:67:8C:E7:FF:6C:CB:C2:0C
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1818
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4CB8C45C8C7011EFB575016EC4F9AE02.roa
Signing time: Thu 17 Oct 2024 10:12:22 +0000
ROA not before: Thu 17 Oct 2024 10:12:22 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/22 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.28.0/22 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/22 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.96.0/22 maxlen: 24
115.167.116.0/24 maxlen: 24
115.167.120.0/24 maxlen: 24
115.167.121.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.152.0/21 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.176.0/22 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 12:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6168 (0x1818)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 17 10:12:22 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6710e306-6582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:c5:7f:6b:8c:54:1e:64:b8:3c:d6:ee:69:
da:f1:90:ae:c1:4d:84:8b:a5:b7:61:5f:84:be:a8:
93:6d:d1:f9:fe:75:06:04:79:6a:08:81:e7:c0:e4:
96:2d:f7:46:a1:b2:c3:33:d5:c7:33:04:41:95:6c:
1e:b8:2d:fa:3e:5a:a4:30:d6:a5:1a:50:b1:6d:79:
75:be:6c:7e:7b:f9:6c:de:17:7a:b0:24:ba:b5:d6:
68:80:f0:c5:21:c0:b7:cc:75:66:cb:23:79:2f:d9:
a2:55:b4:0a:7c:00:e1:77:d4:99:c6:c6:59:3d:3e:
2a:24:3a:3b:62:93:0c:f2:81:24:41:4f:cf:57:b0:
95:0e:b4:43:cc:8d:ba:b1:b5:85:8b:9f:8e:71:d1:
a4:e3:c6:bd:bd:ef:a6:b6:c4:e0:3b:b9:9d:0f:a8:
89:dd:e9:c2:2d:56:a9:d2:36:1a:dc:7b:5e:96:06:
1b:8f:34:ae:f1:a2:04:86:2b:76:61:45:77:a3:0f:
00:72:f7:06:9d:fc:5c:bf:53:60:5a:4c:c3:a3:58:
79:24:b6:64:5a:a8:42:b3:9b:5c:f7:9c:fc:a5:d8:
72:be:f0:4c:68:2e:6a:7a:b7:d1:d7:df:e4:84:d0:
20:e1:27:e6:64:c5:77:6d:98:ea:0a:7f:82:4a:ed:
06:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:43:15:CE:F2:12:4A:B6:D4:CF:54:7A:67:8C:E7:FF:6C:CB:C2:0C
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4CB8C45C8C7011EFB575016EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.11.63.0/24
113.203.210.0/24
113.203.215.0/24
113.203.217.0/24
113.203.219.0-113.203.220.255
113.203.222.0/24
113.203.224.0/23
113.203.227.0/24
113.203.243.0/24
113.203.252.0/22
115.167.2.0/24
115.167.5.0-115.167.6.255
115.167.12.0-115.167.23.255
115.167.28.0/22
115.167.48.0/24
115.167.50.0/24
115.167.56.0-115.167.64.255
115.167.77.0-115.167.78.255
115.167.96.0/22
115.167.116.0/24
115.167.120.0/23
115.167.125.0/24
175.110.104.0/24
180.178.142.0/24
180.178.146.0/24
180.178.148.0-180.178.150.255
180.178.152.0-180.178.160.255
180.178.163.0/24
180.178.168.0/24
180.178.170.0/24
180.178.176.0-180.178.187.255
202.92.26.0/24
223.29.231.0/24
223.29.235.0/24
223.29.237.0-223.29.239.255
Signature Algorithm: sha256WithRSAEncryption
02:bf:bc:5b:f8:54:72:d8:30:b7:3e:c0:8e:1c:8d:60:ba:df:
91:5d:61:7a:94:7d:e9:6e:d3:ca:6d:8e:78:3e:03:19:52:2b:
98:4f:bb:72:73:cf:0b:d7:53:c5:1c:2f:cc:fc:2b:a9:18:3c:
69:f7:e3:bb:b2:f5:79:04:16:0d:32:57:85:b5:0f:ca:f6:07:
3d:df:2c:95:12:00:06:b4:b1:3d:bb:4c:7e:79:c3:95:44:ec:
92:17:02:ac:7c:40:96:03:9b:1a:36:aa:c5:96:27:49:ba:97:
95:7a:fb:49:c2:41:7f:ff:29:ff:57:e0:46:ff:20:23:e1:b6:
42:aa:14:e5:19:7a:ff:24:59:68:b7:06:d3:d7:fc:ec:4a:12:
48:0d:db:91:81:1f:51:13:fe:7f:15:67:94:5a:15:72:38:e5:
bd:ff:3d:cc:97:eb:ce:ab:b6:2a:f8:09:5a:fe:e2:ec:ed:3c:
e1:cf:50:cb:6a:0b:ce:c3:6b:7d:3c:b4:d2:b1:08:e0:29:ad:
42:4a:18:81:25:25:d4:24:14:85:95:a6:97:62:09:fd:56:23:
71:2b:4e:82:7e:13:60:30:f2:c2:06:f8:bb:35:a9:fc:f9:ff:
29:2e:6e:1a:a8:11:59:a2:5d:a2:db:13:3f:43:1a:be:ee:5f:
cf:82:12:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:36:29 2025 by rpki-client