Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5C26E6A6B90E11EF9610D67EC4F9AE02.roa
File: 5C26E6A6B90E11EF9610D67EC4F9AE02.roa (raw, json)
Hash identifier: yYJsFW5MnqIIZpyNXIOsN0B6CilwlaHyp71likasUnY=
Subject key identifier: 8A:E9:E2:A4:04:B6:F9:B1:54:3A:AB:BD:77:CF:CE:06:FF:6B:11:6D
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1FA3
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5C26E6A6B90E11EF9610D67EC4F9AE02.roa
Signing time: Fri 13 Dec 2024 07:31:31 +0000
ROA not before: Fri 13 Dec 2024 07:31:31 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 43.226.224.0/24 maxlen: 24
43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.52.0/24 maxlen: 24
115.167.53.0/24 maxlen: 24
115.167.54.0/24 maxlen: 24
115.167.55.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/24 maxlen: 24
180.178.177.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Dec 2024 17:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8099 (0x1fa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 13 07:31:31 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=675be2d3-7dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7e:94:ea:16:e4:96:07:18:e0:9d:65:b2:67:
d9:ad:d8:fb:e4:2c:32:b5:2f:3c:a1:b2:6c:c6:90:
7b:71:49:ff:fb:e7:f8:cc:58:dc:02:25:db:70:92:
2e:0a:3f:15:66:cb:f1:ee:08:42:d6:72:57:52:b0:
39:3c:a3:91:a8:f7:67:da:e1:f6:80:fb:93:30:ff:
28:07:0e:e2:99:21:26:56:c5:00:87:ca:9b:2a:9d:
fe:2d:49:78:1d:95:1d:85:7d:2c:01:d1:9f:33:1a:
3a:df:bb:9d:2e:30:d0:83:b5:44:1a:00:f0:37:b5:
cc:e5:ba:3a:b8:26:a1:e5:8b:6f:95:d6:dd:c4:73:
11:e5:d4:d1:48:b3:a4:14:53:38:8d:6c:3b:21:71:
02:e4:ad:2e:70:8f:8a:27:0e:53:d3:43:e1:21:02:
9b:c3:dc:6c:60:23:74:64:f7:b1:c9:42:bd:4a:64:
43:08:3b:c9:71:ea:49:77:64:82:df:3b:5e:9c:bf:
df:6f:1c:73:6e:ac:59:fa:7b:b4:ae:3d:64:8c:e5:
a2:1f:1f:f6:9c:c4:70:e3:8a:6a:8b:62:e5:fa:8b:
bd:66:71:73:09:f2:05:20:b5:25:08:61:87:8a:ab:
74:d9:b7:e1:f8:2e:78:59:11:61:93:ff:64:b7:4b:
01:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E9:E2:A4:04:B6:F9:B1:54:3A:AB:BD:77:CF:CE:06:FF:6B:11:6D
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5C26E6A6B90E11EF9610D67EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.151.27.0/24
113.203.211.0/24
113.203.213.0/24
113.203.215.0/24
113.203.219.0/24
113.203.224.0/23
113.203.227.0/24
113.203.243.0/24
113.203.248.0/24
115.167.3.0/24
115.167.5.0/24
115.167.9.0/24
115.167.12.0/22
115.167.28.0/24
115.167.50.0/24
115.167.52.0/22
115.167.73.0/24
115.167.76.0-115.167.78.255
115.167.101.0-115.167.103.255
175.110.80.0/22
175.110.89.0/24
175.110.91.0/24
175.110.97.0/24
175.110.104.0/24
175.110.106.0/24
175.110.111.0/24
180.178.147.0/24
180.178.149.0/24
180.178.165.0-180.178.171.255
180.178.176.0/22
180.178.189.0/24
223.29.228.0/24
223.29.230.0/23
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
23:9e:62:70:07:4b:68:0a:aa:03:ec:f9:c9:6e:61:22:ce:c4:
43:8e:e6:6c:3d:72:62:bd:e6:d3:c0:71:a5:8e:cd:f6:6c:51:
da:63:15:38:49:ee:03:8e:07:96:3c:1f:ea:5c:08:a1:9e:4c:
c6:2c:20:23:0e:09:12:2a:3e:cd:4d:d9:24:9e:aa:e5:74:97:
14:03:1a:86:d4:04:64:64:fa:ff:19:79:05:31:74:25:fa:95:
3a:f7:cc:df:f7:04:ea:94:42:8b:9e:07:66:d5:41:bf:7d:ef:
a2:65:56:5f:8f:53:f1:45:28:65:d7:66:fb:3a:2b:5c:bb:1d:
1a:92:a2:0f:4f:7d:8b:21:31:f9:9a:fd:b9:aa:cc:3d:46:8d:
f9:3c:d5:e6:4d:01:df:94:1b:fb:0c:75:cc:39:50:41:bb:1d:
6b:60:f8:90:8a:03:c5:5d:39:02:b1:77:87:98:52:a5:20:ae:
c7:72:5b:e7:88:7d:c5:33:9e:41:c6:d8:3a:58:c0:bd:b1:f1:
c5:7b:02:47:89:ab:69:76:1d:7e:05:ac:94:47:25:d4:b6:ea:
e0:8d:3d:10:8e:74:e1:96:47:27:61:d5:56:2f:19:70:a7:ea:
a7:9f:53:58:e0:54:2b:fe:5d:67:bd:a9:f8:52:58:77:c8:09:
38:0e:f4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:50:49 2025 by rpki-client