Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4E562CD447EA11EF933BE841C4F9AE02.roa
File: 4E562CD447EA11EF933BE841C4F9AE02.roa (raw, json)
Hash identifier: Wv4aNJD7xHaUxfE3Eo5C3V3cidglrBY1GToiDLacaeQ=
Subject key identifier: A2:48:DF:04:E2:05:FE:42:4B:77:86:20:18:E5:68:D9:D1:78:03:E3
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1487
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4E562CD447EA11EF933BE841C4F9AE02.roa
Signing time: Mon 22 Jul 2024 08:00:18 +0000
ROA not before: Mon 22 Jul 2024 08:00:18 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 04:21:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5255 (0x1487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 22 08:00:18 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=669e1192-7b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:00:a8:e6:17:bd:13:32:3e:a9:79:fc:66:56:
63:f7:50:bd:11:a8:3d:9a:80:c7:04:42:5c:fa:ff:
9c:99:94:6c:b8:95:9f:70:7c:40:3f:d4:24:e0:1f:
0f:20:0c:fe:0b:c1:a7:f3:81:f3:03:e1:d3:8e:66:
00:f7:24:31:7c:70:ad:a8:e8:c5:76:0e:ce:c4:af:
2b:cd:2c:24:2e:6a:64:f1:45:72:7c:84:b1:31:e1:
09:e8:0a:44:82:d1:51:3d:de:f5:bd:fe:eb:a7:bc:
72:bb:fe:68:57:2c:c8:2a:8a:af:c3:09:c9:91:ba:
0d:34:a4:3b:76:24:79:22:e9:d6:47:e1:de:f0:76:
7d:df:e8:b6:81:2d:3d:54:c4:af:24:0c:b3:30:50:
6a:98:53:9b:aa:7b:22:ad:fa:b9:4b:40:26:82:ef:
9c:ce:8d:33:6b:d1:6c:8d:bc:4b:30:13:45:4f:a2:
8b:a8:b5:44:87:44:f9:ac:a0:2e:ae:b2:fe:f5:e5:
0a:fc:c5:b7:73:c9:09:a8:06:e3:85:77:59:0d:e8:
1a:38:ce:c5:ad:f3:99:d5:ee:d0:88:a4:a7:3b:db:
73:dd:13:25:ba:1b:6c:c1:19:ae:92:7f:49:0e:60:
7b:b4:98:6d:b2:64:88:ab:17:de:65:6c:43:9a:47:
35:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:48:DF:04:E2:05:FE:42:4B:77:86:20:18:E5:68:D9:D1:78:03:E3
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4E562CD447EA11EF933BE841C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/24
113.203.234.0-113.203.240.255
113.203.253.0/24
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.147.0/24
180.178.172.0/24
180.178.174.0/23
223.29.226.0/24
223.29.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:25:00:4d:4f:c6:6c:60:f4:e7:40:44:48:f8:88:d3:e3:f6:
75:f9:1f:02:ca:8a:0e:56:86:51:a6:cc:31:07:49:a1:0b:f4:
f7:c4:ec:df:72:9a:48:bc:70:2d:32:f2:d8:24:bb:48:de:4d:
3e:af:38:d5:50:34:62:e0:a4:18:d5:b9:d3:8d:44:8a:8e:33:
63:d1:59:51:46:d9:59:25:a9:e3:ae:f0:1a:7b:f2:e8:9c:c6:
c9:bd:04:38:38:34:9f:14:d4:87:29:9e:b4:f5:29:a8:b0:ad:
ed:6e:3b:69:c6:7e:41:70:fe:72:45:07:2a:8e:0f:bf:de:26:
31:97:fa:51:eb:1d:79:2e:20:45:62:17:ff:85:17:fd:30:36:
bd:bd:e5:55:a4:ec:2a:ba:fa:f6:fb:c9:9c:e4:6b:6e:ed:f8:
c4:9c:a9:3b:36:ae:3e:a6:43:62:c6:3e:08:77:7a:f4:d9:a5:
7a:b1:ef:a4:d2:e0:72:c5:27:f4:0d:1a:eb:d0:83:39:9c:1d:
72:f4:17:b3:17:4c:1f:d8:d1:19:ef:da:6a:38:fe:af:35:db:
c8:76:a9:24:43:a1:04:1f:09:ac:ae:22:00:16:69:d4:69:0a:
62:2a:d5:6b:5e:c2:a0:32:c6:ec:72:36:7d:35:0d:d1:a1:d1:
fa:3d:67:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:09:53 2025 by rpki-client