Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6488BD1CD30B11EFBA9DE44BC4F9AE02.roa
File: 6488BD1CD30B11EFBA9DE44BC4F9AE02.roa (raw, json)
Hash identifier: 5gUwPPBMHo0FQXMwkoBSK+qpApUHNEdKxXQMyAiDF90=
Subject key identifier: 1B:6D:97:76:E8:36:4F:81:B8:03:68:71:1E:53:82:56:0E:9E:41:6F
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 21D7
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6488BD1CD30B11EFBA9DE44BC4F9AE02.roa
Signing time: Thu 16 Jan 2025 05:02:51 +0000
ROA not before: Thu 16 Jan 2025 05:02:51 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.180.0/24 maxlen: 24
180.178.181.0/24 maxlen: 24
180.178.182.0/24 maxlen: 24
180.178.183.0/24 maxlen: 24
180.178.184.0/22 maxlen: 22
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Jan 2025 07:43:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8663 (0x21d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 16 05:02:51 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=678892fa-114e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:94:4a:d8:59:38:5f:70:87:76:d7:d4:68:
0c:59:7c:56:c2:8a:e3:94:e0:84:cf:63:88:fd:08:
34:aa:d6:03:ff:cd:62:b5:fc:0a:46:49:08:57:81:
f4:33:4e:a8:b0:9e:ec:e0:f0:45:6d:71:3e:2e:d4:
1c:33:62:97:5a:64:06:f9:be:57:dd:4a:6b:71:22:
2a:0f:7d:1c:78:9a:b7:e3:92:c7:97:b3:5a:55:e1:
c3:24:a6:a4:7a:b1:6d:5b:37:e4:56:ef:e1:7d:a1:
c5:b6:1b:05:b1:1d:97:4e:75:fa:5b:6e:e8:91:a3:
31:6c:70:a6:d4:b9:74:eb:69:36:cb:f7:49:44:ce:
37:b0:fa:3b:a0:40:df:e6:dc:7b:7d:5f:0c:5e:b5:
f9:37:7d:b4:e3:c7:00:2a:96:3f:b1:a6:4d:26:c9:
fd:38:e8:cd:63:b3:9e:5e:49:bd:45:dd:83:25:b1:
c6:88:ec:c4:40:4f:ee:49:39:b3:50:6a:9f:00:1f:
ca:bb:76:7b:e9:20:27:c5:2b:15:0b:34:35:2b:31:
54:6e:e7:01:4b:e9:62:c3:66:c6:b2:bf:4e:c1:ef:
86:b2:ee:f4:06:c7:67:1c:79:44:11:fa:89:e4:44:
f4:c8:78:48:c6:ad:07:cc:98:02:25:f3:90:a0:80:
b0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6D:97:76:E8:36:4F:81:B8:03:68:71:1E:53:82:56:0E:9E:41:6F
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6488BD1CD30B11EFBA9DE44BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
113.203.208.0-113.203.220.255
113.203.222.0/23
175.110.64.0/22
180.178.142.0/24
180.178.144.0/24
180.178.146.0-180.178.150.255
180.178.160.0-180.178.171.255
180.178.176.0/20
202.92.26.0/24
223.29.230.0/24
223.29.236.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:7d:f9:f1:fe:53:0d:1e:1c:6a:76:e5:57:99:22:17:48:49:
d4:ee:bf:77:5f:71:34:47:5b:15:22:45:2a:19:16:8a:77:f0:
be:cf:3b:d2:90:51:1d:d0:e0:f1:b3:c6:47:18:fe:08:ab:cd:
99:e4:47:a3:71:8a:4c:87:09:2f:70:7b:82:94:ed:23:f8:ba:
92:bb:b3:a6:2a:cc:98:ed:bf:7f:f1:f6:05:41:2a:ab:5d:ff:
da:b3:89:bb:6e:bd:46:ec:50:38:e7:40:45:d8:e4:39:c4:c9:
fd:e5:db:48:42:70:f3:3f:e7:cf:b3:67:64:5d:c4:28:11:38:
00:e2:f4:38:d9:47:a9:bf:2b:86:cc:88:88:67:d2:11:82:ad:
53:4f:ba:68:06:8c:e0:51:87:86:b9:4f:77:fc:69:92:35:23:
ba:23:99:9c:6a:2b:ee:f5:5b:7f:b8:6d:1f:c8:83:55:9e:3b:
c2:6b:6e:9d:4a:ec:bf:37:24:14:53:c0:ef:2a:9a:08:28:08:
41:c2:55:a4:54:8b:7f:1b:0d:48:26:54:6a:7e:0d:a9:40:35:
25:42:55:1f:09:75:43:d6:fc:bd:af:44:83:e3:76:54:13:84:
fb:89:5e:aa:59:7e:4c:f0:2c:57:ff:ae:b3:42:80:38:cc:27:
5a:cd:4a:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:13 2025 by rpki-client