Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5EBD56BCC43911EFAEB07D52C4F9AE02.roa
File: 5EBD56BCC43911EFAEB07D52C4F9AE02.roa (raw, json)
Hash identifier: mCWM9o5BFTfpfUIrve3Z6s9s0SEcF858fu+AtAGT9CA=
Subject key identifier: 9E:D1:4F:65:2C:EA:80:7A:6A:E5:5B:6F:45:52:E9:D4:FB:D5:11:B0
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2035
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5EBD56BCC43911EFAEB07D52C4F9AE02.roa
Signing time: Fri 27 Dec 2024 10:00:15 +0000
ROA not before: Fri 27 Dec 2024 10:00:15 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 43.226.224.0/24 maxlen: 24
43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.52.0/24 maxlen: 24
115.167.53.0/24 maxlen: 24
115.167.54.0/24 maxlen: 24
115.167.55.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Dec 2024 05:33:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8245 (0x2035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 27 10:00:15 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=676e7aaf-5fa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:bb:53:36:91:c7:43:80:e2:08:8c:c8:8f:
c1:08:a5:5f:5f:b8:ea:9f:2a:3f:00:c6:a1:df:37:
33:d5:b6:85:28:46:59:01:8e:37:89:d2:54:8e:67:
89:60:93:f8:21:ab:ea:24:ae:5a:3f:a2:0a:e3:4a:
84:5c:03:cf:c3:09:6a:5b:6f:2c:cf:9a:b4:4e:f7:
9e:0d:5b:1c:aa:be:a9:60:e5:e8:cd:2a:ee:92:da:
7c:44:4b:f7:a1:4c:e6:ec:80:f2:0b:54:4c:b5:e8:
d4:f6:ba:94:6d:e8:c2:6d:e9:11:fa:89:20:04:17:
f4:1d:25:b6:02:3b:74:e9:b4:ed:01:3b:bf:bc:64:
61:f1:a7:9c:4f:ac:2c:a9:7f:95:bc:b2:93:37:03:
b5:cb:ab:46:bc:f6:88:3d:92:4f:1e:04:7d:97:c8:
43:ec:c2:c6:cc:06:86:22:27:71:92:b4:f1:32:0b:
dd:c3:86:9b:fb:76:e6:64:da:79:28:cf:b8:c8:24:
22:35:35:e7:54:4d:9f:e1:f3:70:73:3d:8e:d8:be:
05:23:a6:98:3e:ef:f4:13:b0:6d:f6:06:68:fc:ef:
f0:57:a7:73:b4:10:1d:1d:ba:5c:39:96:59:a0:7e:
40:7e:e5:1f:eb:0d:27:24:b6:d7:04:62:c5:6f:de:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D1:4F:65:2C:EA:80:7A:6A:E5:5B:6F:45:52:E9:D4:FB:D5:11:B0
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/5EBD56BCC43911EFAEB07D52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.151.27.0/24
113.203.224.0/23
113.203.227.0/24
113.203.243.0/24
115.167.3.0/24
115.167.5.0/24
115.167.9.0/24
115.167.12.0/22
115.167.28.0/24
115.167.52.0/22
115.167.101.0-115.167.103.255
175.110.80.0/22
175.110.89.0/24
175.110.91.0/24
175.110.111.0/24
180.178.165.0/24
180.178.167.0-180.178.168.255
223.29.228.0/24
223.29.230.0/23
223.29.235.0/24
223.29.237.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
a8:6f:ee:57:e2:c4:be:04:90:79:78:3a:fb:76:cf:d5:a7:d7:
47:2f:87:c9:28:d6:12:c3:8e:f9:b0:fc:35:24:b7:18:67:12:
cb:35:67:58:e5:41:6c:d1:47:48:1b:85:38:13:a5:d2:39:35:
e4:83:67:45:b6:31:8b:53:68:4e:86:2e:aa:21:e7:9b:a4:ad:
57:60:3b:a5:c4:c5:c1:5f:13:e6:f9:46:94:d8:61:6d:9d:ed:
71:86:49:ad:17:eb:0f:df:0d:95:4a:37:e6:21:0b:e4:61:ab:
b2:d0:41:e5:66:df:7a:9d:58:23:83:19:34:31:fd:e4:5c:9b:
08:94:54:ed:57:5e:29:4a:ae:39:3b:04:b4:1f:80:73:7c:45:
a8:41:57:32:e3:31:87:57:b1:0f:28:31:92:a1:44:32:ad:d5:
67:57:e0:f5:bd:27:5e:a8:99:51:80:90:cb:f1:e3:9e:01:d4:
e4:34:e7:94:55:f0:1d:30:02:11:83:c4:2b:50:68:af:f2:a5:
f4:ad:60:14:d5:79:c8:90:7a:93:e7:3a:e3:7c:5c:1d:3b:90:
6c:1c:6b:40:45:cd:f4:3f:0f:b2:c0:ac:e2:37:fd:48:b5:8c:
d4:98:42:a8:ce:2f:f9:4d:8c:d0:e4:47:f8:ba:80:ca:3a:cc:
cb:08:3e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:43:43 2025 by rpki-client