Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/717972E8AC0311EF885D3D15C4F9AE02.roa
File: 717972E8AC0311EF885D3D15C4F9AE02.roa (raw, json)
Hash identifier: WTx935DTZtm95NbETREwO6cLB3SZyi/xGJs8unc+QBU=
Subject key identifier: 41:11:85:1E:EE:6E:74:BB:16:DA:2B:94:69:E2:5B:C6:CA:DD:DD:7E
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1DE1
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/717972E8AC0311EF885D3D15C4F9AE02.roa
Signing time: Thu 28 Nov 2024 08:40:17 +0000
ROA not before: Thu 28 Nov 2024 08:40:17 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
115.167.16.0/24 maxlen: 24
115.167.17.0/24 maxlen: 24
115.167.18.0/24 maxlen: 24
115.167.19.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Nov 2024 13:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7649 (0x1de1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 28 08:40:17 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67482c71-836c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:64:58:59:4b:f4:9d:d8:56:12:70:42:8e:97:
5d:40:b4:db:7b:8e:94:7a:22:4d:f1:6d:26:2b:22:
7e:64:47:83:78:bc:44:83:cb:ea:9d:3d:0f:55:2f:
aa:37:5e:ad:44:c3:2b:f7:2b:2e:a8:2c:c8:e2:e9:
19:13:59:5e:ca:92:62:69:4f:bf:b2:0d:1c:06:fd:
53:d6:6f:1d:00:ca:cc:4d:a7:5c:6a:43:ea:5c:86:
12:a6:ff:9b:1f:4a:ae:26:58:fe:54:47:b0:a4:98:
0d:4c:9e:bd:6d:f4:f2:8b:4f:a7:9c:d6:64:b6:94:
24:10:ea:21:6d:5e:cc:e3:2e:e2:40:5e:6c:b6:12:
55:bb:98:f2:29:71:dc:3e:12:65:45:f4:bd:96:4a:
49:52:1d:76:df:76:c2:4d:6b:3d:dc:f2:3e:be:99:
13:43:fe:9a:fc:01:f1:b8:5e:8e:4f:dc:a1:14:42:
a8:fa:08:62:1e:3f:f8:98:c7:f6:52:04:ee:b8:67:
68:36:b2:23:57:37:09:c9:fd:49:dc:40:25:a4:0a:
1b:80:ec:c1:bd:1f:c9:71:86:73:10:8d:d3:24:90:
ce:be:c6:3b:f0:40:c3:9c:b9:40:e4:ce:5b:4c:7b:
ca:76:cb:50:24:a6:ee:47:bb:d1:fe:7a:31:41:8c:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:11:85:1E:EE:6E:74:BB:16:DA:2B:94:69:E2:5B:C6:CA:DD:DD:7E
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/717972E8AC0311EF885D3D15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.225.0-43.226.227.255
103.11.63.0/24
113.203.208.0/24
113.203.212.0/24
113.203.222.0/24
113.203.231.0/24
113.203.233.0/24
113.203.241.0-113.203.242.255
113.203.245.0/24
115.167.16.0/22
115.167.29.0-115.167.31.255
115.167.48.0/24
115.167.64.0/24
115.167.66.0/24
115.167.73.0/24
115.167.102.0/24
115.167.124.0/23
175.110.64.0/22
175.110.80.0/22
175.110.89.0/24
175.110.91.0/24
175.110.111.0/24
180.178.142.0/24
180.178.144.0/24
180.178.146.0/24
180.178.148.0/24
180.178.150.0/24
180.178.160.0-180.178.162.255
180.178.165.0/24
180.178.167.0/24
180.178.188.0/24
180.178.191.0/24
202.92.26.0/24
223.29.225.0/24
223.29.229.0/24
223.29.236.0/24
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
24:0f:56:8b:b5:4e:00:c1:73:8c:2f:58:2a:36:6d:54:52:e1:
3d:2d:80:f7:02:f2:e5:6f:c0:f6:6e:0a:87:a1:e1:df:d5:43:
ed:18:c3:75:b2:1d:cb:00:8b:5d:0f:17:0f:42:be:72:ae:37:
73:08:d9:88:88:5e:93:5c:22:ae:8f:4f:75:ff:40:f2:04:0e:
f4:6f:75:cd:e1:35:c2:a4:a1:a5:af:d3:5e:d9:51:c3:47:3e:
23:c5:e6:ac:d6:49:6a:78:19:7c:f2:53:cc:f0:31:47:31:99:
09:94:ce:86:d6:d3:f6:6b:ae:39:0c:a9:2c:8a:0c:2c:fb:fc:
ae:24:96:4e:fa:87:35:90:f7:23:66:bf:78:b4:64:96:9b:b0:
70:3c:50:50:f9:69:90:92:22:9b:8a:cb:3a:83:ff:1c:ca:be:
28:b2:86:3b:ad:a2:f8:34:9a:59:76:83:46:35:e7:01:69:78:
d5:20:3b:35:b0:75:24:2b:46:7d:e1:9c:9f:a0:88:a5:3f:67:
d6:af:8b:9a:0f:69:c0:72:4d:d3:b7:0d:9f:44:80:74:fe:0f:
18:ec:d9:64:7e:1e:85:a4:43:e2:1c:a2:00:48:26:84:52:1c:
42:6d:80:04:47:0d:a6:37:81:e6:43:38:74:dd:a3:af:6e:a0:
f8:a4:2a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:21:48 2025 by rpki-client