Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7AF1D9D2CF4411EF970D685AC4F9AE02.roa
File: 7AF1D9D2CF4411EF970D685AC4F9AE02.roa (raw, json)
Hash identifier: cPtp3wEQyH5c04DbAZ4QF47/3aticc5m3F4uHVQ1bZQ=
Subject key identifier: 58:52:C4:60:6C:DA:E3:9D:3E:0E:C0:2E:56:22:1C:D6:51:39:DD:6B
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2195
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7AF1D9D2CF4411EF970D685AC4F9AE02.roa
Signing time: Tue 14 Jan 2025 05:52:26 +0000
ROA not before: Tue 14 Jan 2025 05:52:26 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.15.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.60.0/23 maxlen: 24
115.167.62.0/23 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.180.0/24 maxlen: 24
180.178.181.0/24 maxlen: 24
180.178.182.0/24 maxlen: 24
180.178.183.0/24 maxlen: 24
180.178.184.0/22 maxlen: 22
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Jan 2025 10:11:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8597 (0x2195)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 14 05:52:26 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6785fb9a-e102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8d:41:5f:4b:82:d9:48:e2:dd:6a:a1:dc:54:
90:80:aa:de:cb:ee:cf:bc:4f:d0:bc:5c:84:20:ca:
cc:15:41:b8:97:4e:0a:54:94:0c:13:e0:7c:c6:08:
48:74:b9:62:0e:c4:a0:bc:f8:2c:52:25:98:5d:20:
15:65:f3:07:54:26:cc:93:5a:7c:55:fc:d5:de:5e:
a6:c3:e9:8e:d6:6f:47:e8:fb:a6:f6:36:6d:76:1d:
05:ff:d2:d6:48:0f:cf:86:42:ab:48:ff:88:11:19:
f7:55:dd:26:50:07:a1:7f:f5:bf:b8:c4:b8:66:09:
10:31:3e:3a:54:85:ce:11:48:47:80:37:e7:14:88:
cb:fd:a4:c6:d6:46:e1:7a:f3:ba:c6:46:71:b5:1e:
80:81:bf:e5:f7:32:ee:94:e0:7a:07:98:0e:0c:4b:
5d:6d:86:90:cb:ef:d7:5d:3d:cc:7b:02:88:62:c6:
e9:b5:4e:af:a7:22:26:03:af:cb:14:45:74:0c:55:
c1:4f:7d:87:d7:9a:72:23:6c:bc:51:e7:a8:0b:93:
cf:fd:66:75:60:f6:22:b3:46:d6:f7:e2:94:e4:dd:
fe:50:13:a4:cc:dc:7e:66:27:e7:95:b5:d7:dd:79:
b8:0b:78:a5:4d:43:11:87:f3:bd:56:2a:eb:07:dd:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:52:C4:60:6C:DA:E3:9D:3E:0E:C0:2E:56:22:1C:D6:51:39:DD:6B
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7AF1D9D2CF4411EF970D685AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.225.0-43.226.227.255
103.11.63.0/24
113.203.208.0-113.203.220.255
113.203.222.0-113.203.230.255
113.203.241.0-113.203.244.255
113.203.248.0/24
113.203.252.0-113.203.254.255
115.167.6.0/24
115.167.15.0-115.167.19.255
115.167.29.0-115.167.31.255
115.167.60.0-115.167.64.255
115.167.66.0/24
115.167.73.0/24
115.167.76.0/24
115.167.78.0/24
115.167.102.0/24
115.167.118.0/23
115.167.122.0-115.167.124.255
175.110.64.0/22
175.110.89.0/24
175.110.97.0-175.110.98.255
175.110.104.0/22
175.110.109.0-175.110.111.255
180.178.142.0/24
180.178.144.0/24
180.178.146.0-180.178.150.255
180.178.160.0-180.178.171.255
180.178.176.0/20
202.92.18.0/24
202.92.20.0/24
202.92.26.0/24
223.29.228.0/22
223.29.235.0-223.29.239.255
Signature Algorithm: sha256WithRSAEncryption
5f:b9:e1:d2:04:a1:96:12:c6:af:2e:74:d9:0f:5f:bc:fb:1a:
ba:23:17:8a:e8:ea:b4:73:49:67:56:50:34:1e:1d:54:ec:82:
96:4d:67:c8:b9:84:5b:7b:41:5c:e5:17:79:be:9d:ad:9d:31:
79:64:43:d6:ff:8d:37:03:a2:92:6c:26:9c:e8:ec:cf:b8:af:
bf:38:dd:1f:0a:1b:9f:03:b4:4a:0b:0c:7f:9d:4b:f5:e2:3c:
dc:69:48:0d:8a:21:e6:e9:f9:25:bb:93:69:91:e7:af:37:8b:
df:77:fd:ed:17:ea:5f:81:fe:de:3b:20:c8:b4:9e:3e:fc:78:
8f:bc:09:ec:cb:23:2b:fd:fa:1c:45:68:b6:36:7c:50:40:dc:
d4:4a:5e:3e:9f:69:52:be:51:f2:4a:95:0b:d8:f0:d1:05:eb:
74:8a:e9:0b:4e:2f:cb:f1:14:3f:22:38:60:03:55:d0:33:bb:
09:ae:63:52:c3:af:f8:35:8e:24:45:d0:08:97:09:3e:55:9e:
72:b5:e2:dd:6e:be:5a:f3:38:ee:4d:de:20:e0:39:b9:00:de:
f3:e4:9b:d3:e2:b1:cd:cf:a8:00:68:f6:a4:8e:3c:50:53:a9:
0e:7d:ee:67:b5:f5:81:e3:51:96:c0:a4:ab:da:b3:d8:62:82:
61:24:df:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:58:00 2025 by rpki-client