Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/55B0819EAC0F11EFBF1BB372C4F9AE02.roa
File: 55B0819EAC0F11EFBF1BB372C4F9AE02.roa (raw, json)
Hash identifier: 2VTmYS6CQAFwkFkY3XVi7KcV4jzbEXgYTNXA+EAwl5s=
Subject key identifier: 3C:56:15:91:6E:42:66:63:D1:06:0C:E6:B8:29:61:7F:5E:CE:C1:9A
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1DBF
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/55B0819EAC0F11EFBF1BB372C4F9AE02.roa
Signing time: Tue 26 Nov 2024 15:58:53 +0000
ROA not before: Tue 26 Nov 2024 15:58:53 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.52.0/24 maxlen: 24
115.167.53.0/24 maxlen: 24
115.167.54.0/24 maxlen: 24
115.167.55.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Nov 2024 05:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7615 (0x1dbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 26 15:58:53 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6745f03d-9c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:54:22:c7:6a:b8:51:e2:45:7b:8a:76:07:
9f:bf:36:22:9b:77:0e:ef:85:e9:db:dc:ac:84:90:
d9:f1:ce:c3:68:ee:d7:eb:bf:c9:17:e6:36:ce:d6:
9b:e1:8c:70:a2:ff:2b:c5:bc:97:cc:cc:41:42:0e:
1c:63:d4:7f:26:7b:be:a1:3d:8a:a0:07:6a:fe:0e:
ba:24:8d:a9:62:c1:46:d5:28:2c:40:e1:30:37:16:
87:cb:19:bc:e5:73:99:8c:e8:af:e9:d1:d7:8a:f7:
d1:59:b9:a5:ce:99:29:dc:b8:01:13:c3:4d:18:9d:
0b:70:61:d7:b9:bc:a0:e9:6c:a2:90:49:64:94:8f:
66:f3:3b:5b:64:96:21:20:5e:d1:ae:51:2d:e3:19:
9e:d4:e3:af:04:90:93:3f:7f:35:7d:3f:52:04:99:
f7:00:dc:78:53:ba:b7:a1:eb:b7:d7:03:d9:94:e6:
5f:2b:e2:67:20:f1:5f:9b:0d:9d:2f:4e:b1:30:d7:
0e:99:af:b1:e4:fb:f6:76:92:9e:d5:41:b8:ea:86:
80:1e:62:c9:02:53:90:30:4e:fc:de:fc:49:32:32:
b9:78:2a:37:f6:e9:f1:b7:bc:c8:7a:6e:33:86:a9:
b6:56:bf:e8:13:52:70:5e:5b:d1:a1:b6:af:54:57:
7c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:56:15:91:6E:42:66:63:D1:06:0C:E6:B8:29:61:7F:5E:CE:C1:9A
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/55B0819EAC0F11EFBF1BB372C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.211.0/24
113.203.213.0-113.203.215.255
113.203.219.0/24
113.203.222.0/24
113.203.224.0/23
113.203.227.0/24
113.203.243.0/24
113.203.248.0/24
115.167.3.0/24
115.167.5.0/24
115.167.9.0/24
115.167.12.0/22
115.167.28.0/24
115.167.50.0/24
115.167.52.0/22
115.167.76.0/24
115.167.101.0/24
115.167.103.0/24
115.167.124.0/24
175.110.97.0/24
175.110.104.0/24
175.110.106.0/24
175.110.111.0/24
180.178.144.0/24
180.178.147.0-180.178.150.255
180.178.160.0/24
180.178.162.0/23
180.178.165.0-180.178.171.255
180.178.189.0/24
223.29.228.0/24
223.29.230.0/23
223.29.236.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
2f:1f:2c:e5:df:af:7a:b0:1f:fe:10:51:3c:d1:53:d2:7c:1b:
47:b4:aa:94:bd:b7:9f:15:32:12:cc:c7:9c:5b:de:07:4e:c6:
8d:2b:12:fb:1d:9e:11:4e:09:5d:32:42:44:65:53:ce:4e:4c:
cd:9f:9b:57:e9:2a:84:02:3d:70:af:b4:d9:5e:51:6d:f8:ca:
58:11:fe:66:e6:d3:16:ce:38:70:8b:e0:b7:3b:95:4c:34:e3:
0a:39:39:d0:f4:10:14:69:30:ef:ae:a2:49:f5:63:00:df:b1:
4f:8c:bf:16:8e:64:d8:be:ca:27:9b:48:7a:61:60:fc:15:47:
10:43:df:ea:b8:d2:47:cc:84:95:bc:b0:04:88:6d:7f:7e:22:
5e:9d:e7:0b:d9:86:f5:4e:ab:69:4c:0d:c8:35:3f:33:b5:ff:
f2:48:11:ec:e0:d6:e7:fa:d8:92:c8:1f:83:c9:28:db:48:3c:
fe:83:21:0e:af:9e:4b:5d:dc:0f:c1:d5:f7:f1:7d:93:f3:35:
ef:6f:b1:53:0a:67:b1:89:99:b6:69:c6:f3:f2:f5:e6:92:74:
59:15:54:31:b9:7b:66:06:21:c5:eb:46:b6:41:04:c5:b4:e3:
50:77:e4:80:ef:fd:1f:f4:a6:73:64:df:cb:e8:3c:01:e0:41:
af:76:47:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:21:49 2025 by rpki-client