Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6BD12DD292C111EFB9CA3F41C4F9AE02.roa
File: 6BD12DD292C111EFB9CA3F41C4F9AE02.roa (raw, json)
Hash identifier: wA9n1yERYxQBWlJNkdDJ0gZwsJuzwB4w6M1l5lmoHWM=
Subject key identifier: 04:DD:9B:AB:E2:11:FB:4E:AE:72:B3:7A:4F:8F:E1:0E:74:FA:B8:79
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 19D6
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6BD12DD292C111EFB9CA3F41C4F9AE02.roa
Signing time: Fri 25 Oct 2024 12:31:18 +0000
ROA not before: Fri 25 Oct 2024 12:31:18 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/22 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.12.0/22 maxlen: 22
115.167.16.0/22 maxlen: 22
115.167.20.0/22 maxlen: 22
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.52.0/22 maxlen: 22
115.167.56.0/22 maxlen: 22
115.167.60.0/22 maxlen: 22
115.167.65.0/24 maxlen: 24
115.167.67.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.64.0/22 maxlen: 22
175.110.104.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 28 Oct 2024 10:47:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6614 (0x19d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 25 12:31:18 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=671b8f96-b5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:35:c9:62:7e:7e:ae:e1:4e:c5:81:7a:85:
a4:b8:f5:29:c4:b4:ba:48:f9:f5:3d:24:89:3d:d1:
15:16:3f:87:e8:43:7c:e6:44:88:2b:8b:56:56:53:
5c:16:f1:8f:1a:89:26:72:fa:9e:7b:e6:0c:fd:79:
9d:b1:9f:03:48:54:ec:24:d1:90:87:73:d1:7a:a5:
94:1d:62:c3:0b:0e:76:f9:16:79:3d:ba:27:60:ff:
44:e5:9a:92:c7:41:91:d2:15:f2:5b:ec:3e:6b:7e:
17:f9:53:ef:dc:f2:d7:87:0d:8b:2d:a4:33:59:2a:
e0:0f:fb:35:80:9c:a0:a6:7a:3b:5e:31:fb:3f:9e:
17:05:b1:22:f4:1f:ba:0a:3d:3b:59:86:b2:70:f5:
14:58:50:42:67:05:32:71:cb:02:c5:bc:23:a8:43:
95:87:0f:f2:22:f6:b4:08:6c:b6:4f:bf:1d:c4:a7:
fc:50:3b:8d:e3:13:16:28:c0:63:f1:cf:f7:ea:53:
59:bd:da:60:ee:09:df:0a:6b:87:79:d6:6b:c1:8e:
ac:fc:8f:f0:7c:9d:1d:22:70:5c:06:38:4f:7e:47:
43:11:20:59:a9:96:3c:59:19:c2:59:69:6d:87:40:
b3:2c:97:f8:73:f2:61:37:db:ef:8b:f5:1d:9a:54:
6c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DD:9B:AB:E2:11:FB:4E:AE:72:B3:7A:4F:8F:E1:0E:74:FA:B8:79
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6BD12DD292C111EFB9CA3F41C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.11.63.0/24
113.203.209.0/24
113.203.211.0/24
113.203.214.0/23
113.203.219.0/24
113.203.222.0/24
113.203.224.0/24
113.203.241.0/24
113.203.246.0/24
115.167.6.0/24
115.167.9.0/24
115.167.12.0-115.167.23.255
115.167.29.0-115.167.31.255
115.167.48.0/24
115.167.50.0/24
115.167.52.0-115.167.63.255
115.167.65.0/24
115.167.67.0/24
115.167.76.0/24
115.167.102.0/24
115.167.124.0/23
175.110.64.0/22
175.110.104.0/24
180.178.142.0/24
180.178.146.0/23
180.178.149.0-180.178.151.255
180.178.161.0-180.178.164.255
180.178.168.0/24
180.178.170.0/24
180.178.188.0/24
180.178.190.0/24
202.92.26.0/24
223.29.225.0-223.29.230.255
223.29.238.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:07:4b:e7:b9:0e:df:48:02:cb:58:72:f9:1d:d3:8c:ce:d2:
e1:19:43:54:9a:25:b4:8b:9a:95:23:78:4f:95:7c:70:24:d3:
13:f6:c0:2e:18:ae:8a:39:d5:7d:85:b8:28:c1:ea:18:17:c2:
75:f7:ed:ff:43:d8:cb:58:f0:61:74:5c:de:08:0d:f9:34:de:
48:93:cf:e7:d6:31:97:7b:e6:ce:df:e7:e7:ac:c5:a9:f6:16:
0a:43:c0:75:18:8e:51:56:d1:cc:56:80:85:74:e6:f9:99:37:
bb:01:5f:96:c1:4f:c6:f6:dd:f4:e6:13:74:08:90:ad:35:4b:
70:0c:29:9d:4a:ed:f7:78:80:41:a8:7d:77:ee:ca:6b:97:7a:
ba:6e:ca:63:5a:2e:62:3f:29:11:55:b7:f0:65:1c:e0:4f:8b:
fa:c6:67:11:94:d7:c8:f0:55:76:85:0c:1d:99:0f:33:6d:9c:
ca:d8:1f:22:72:15:58:76:0d:5a:64:7f:ea:42:90:1d:99:f6:
22:36:ab:44:55:5f:6e:1a:0c:a7:f9:6e:46:13:a0:5f:50:0f:
6f:0e:f1:e5:01:8a:bc:44:8f:91:22:4d:ba:14:1e:9a:8c:bc:
24:be:12:07:3b:0a:51:95:a7:f5:76:bb:4c:47:69:a0:b2:f7:
6c:da:da:78
-----BEGIN CERTIFICATE-----
MIIGdzCCBV+gAwIBAgICGdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQxMDI1MTIzMTE4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzFiOGY5Ni1iNWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1mM1yWJ+fq7hTsWBeoWkuPUpxLS6SPn1PSSJPdEVFj+H6EN85kSIK4tWVlNc
FvGPGokmcvqee+YM/XmdsZ8DSFTsJNGQh3PReqWUHWLDCw52+RZ5PbonYP9E5ZqS
x0GR0hXyW+w+a34X+VPv3PLXhw2LLaQzWSrgD/s1gJygpno7XjH7P54XBbEi9B+6
Cj07WYaycPUUWFBCZwUyccsCxbwjqEOVhw/yIva0CGy2T78dxKf8UDuN4xMWKMBj
8c/36lNZvdpg7gnfCmuHedZrwY6s/I/wfJ0dInBcBjhPfkdDESBZqZY8WRnCWWlt
h0CzLJf4c/JhN9vvi/UdmlRsvwIDAQABo4IDmzCCA5cwHQYDVR0OBBYEFATdm6vi
EftOrnKzek+P4Q50+rh5MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNkJEMTJERDI5
MkMxMTFFRkI5Q0EzRjQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggEjBggrBgEFBQcBBwEB
/wSCARIwggEOMIIBCgQCAAEwggECAwQCK+LgAwQAZws/AwQAccvRAwQAccvTAwQB
ccvWAwQAccvbAwQAccveAwQAccvgAwQAccvxAwQAccv2AwQAc6cGAwQAc6cJMAwD
BAJzpwwDBANzpxAwDAMEAHOnHQMEBXOnAAMEAHOnMAMEAHOnMjAMAwQCc6c0AwQG
c6cAAwQAc6dBAwQAc6dDAwQAc6dMAwQAc6dmAwQBc6d8AwQCr25AAwQAr25oAwQA
tLKOAwQBtLKSMAwDBAC0spUDBAO0spAwDAMEALSyoQMEALSypAMEALSyqAMEALSy
qgMEALSyvAMEALSyvgMEAMpcGjAMAwQA3x3hAwQA3x3mAwQB3x3uMA0GCSqGSIb3
DQEBCwUAA4IBAQDCB0vnuQ7fSALLWHL5HdOMztLhGUNUmiW0i5qVI3hPlXxwJNMT
9sAuGK6KOdV9hbgoweoYF8J19+3/Q9jLWPBhdFzeCA35NN5Ik8/n1jGXe+bO3+fn
rMWp9hYKQ8B1GI5RVtHMVoCFdOb5mTe7AV+WwU/G9t305hN0CJCtNUtwDCmdSu33
eIBBqH137sprl3q6bspjWi5iPykRVbfwZRzgT4v6xmcRlNfI8FV2hQwdmQ8zbZzK
2B8ichVYdg1aZH/qQpAdmfYiNqtEVV9uGgyn+W5GE6BfUA9vDvHlAYq8RI+RIk26
FB6ajLwkvhIHOwpRlaf1drtMR2mgsvds2tp4
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:09:48 2025 by rpki-client