Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/87AA9C346B5011EF9ABB8587C4F9AE02.roa
File: 87AA9C346B5011EF9ABB8587C4F9AE02.roa (raw, json)
Hash identifier: e7kLcvcWv6Je6D+I5HDDtK7CSPedV5chyq1wdhMrdVM=
Subject key identifier: 5D:A2:A9:AB:95:89:6B:C4:17:89:32:F7:2F:6C:59:56:40:34:35:67
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1502
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/87AA9C346B5011EF9ABB8587C4F9AE02.roa
Signing time: Thu 05 Sep 2024 06:31:49 +0000
ROA not before: Thu 05 Sep 2024 06:31:49 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 6079
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
113.203.252.0/22 maxlen: 22
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 07:20:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5378 (0x1502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 5 06:31:49 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66d95055-bd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:96:1f:f0:88:5a:92:65:c5:f5:8a:80:f9:
f2:ec:a9:0e:c6:da:03:73:81:ff:d5:69:6f:37:02:
8a:60:48:81:7d:83:71:a9:45:81:41:a4:a8:3a:34:
cc:5f:ba:a4:c7:5c:90:91:81:0c:83:4e:b7:e8:59:
6b:ac:7b:e7:f1:71:19:da:f6:46:da:42:64:24:e7:
86:b2:a2:18:21:de:a3:30:44:25:86:0d:c3:36:05:
5b:b2:de:19:1a:f2:11:5d:de:67:33:2c:80:aa:d6:
6e:b1:50:a8:3a:61:6e:19:63:67:9f:38:ab:a6:ac:
f3:3a:ef:7c:ad:5f:a7:9a:b1:64:5c:f2:6b:4f:63:
f4:b0:e7:98:14:98:4c:72:d3:e2:a3:79:83:6a:45:
36:43:d8:47:2c:a8:84:2e:ce:ed:76:86:9e:5e:28:
6a:ff:d4:b6:2f:f5:fc:83:58:cd:7a:6d:37:5e:6d:
af:3f:47:99:70:5e:b7:f5:49:3f:72:cf:35:ed:bb:
38:f2:d3:5c:21:fb:0f:c4:55:be:7b:51:ff:b4:73:
f2:9a:2d:15:d8:2f:d3:33:d2:72:a4:14:19:77:58:
2e:e1:ab:f4:dd:59:43:63:d4:e2:56:15:c1:7b:4d:
6e:27:6c:68:81:77:52:13:ab:73:0d:e1:86:38:ab:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A2:A9:AB:95:89:6B:C4:17:89:32:F7:2F:6C:59:56:40:34:35:67
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/87AA9C346B5011EF9ABB8587C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/24
113.203.210.0/24
113.203.212.0/23
113.203.216.0-113.203.218.255
113.203.220.0/24
113.203.223.0-113.203.226.255
113.203.228.0/22
113.203.233.0/24
113.203.242.0/24
113.203.244.0/23
113.203.248.0-113.203.250.255
113.203.252.0/22
180.178.185.0-180.178.187.255
180.178.189.0/24
180.178.191.0/24
223.29.231.0/24
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
1a:35:d9:93:c8:57:d1:c3:2b:e6:03:b4:5b:44:8c:3c:a7:76:
28:d4:6f:80:5b:ca:de:68:5c:49:54:77:13:8f:72:d3:e0:81:
90:c0:c8:7b:ad:1a:91:4c:eb:84:62:ed:56:02:7f:49:24:7f:
a0:1f:6a:78:e2:69:18:a9:74:4c:94:e0:d3:91:b2:c3:90:d3:
72:2d:48:96:b3:8b:72:7d:30:d6:98:5e:47:8c:51:ce:6c:a3:
8f:ce:99:fb:42:c2:ed:cf:b5:f0:51:d4:4b:75:27:2b:6e:70:
af:79:e0:5d:38:b2:37:c7:6e:09:d4:64:84:b0:0a:11:4b:d2:
68:38:ab:12:72:d7:dc:21:05:c8:51:7e:5d:73:52:13:ad:7c:
0e:9a:48:1e:f7:dd:39:c1:29:75:5c:3a:e5:03:01:a5:26:07:
56:af:18:d3:45:0c:37:d0:e9:d8:6e:50:05:b3:14:74:b4:72:
e1:62:ff:92:1e:14:92:a1:0f:4a:d8:3a:3a:3f:4d:84:c3:9f:
2b:59:9f:07:ba:1a:d7:0c:54:37:5b:0c:17:32:08:64:0f:60:
df:88:db:6a:11:7b:71:f0:6f:70:a4:da:9a:0d:d5:34:f1:58:
e8:cc:c7:31:80:94:50:3b:76:b8:aa:fd:61:d6:b9:11:97:fb:
79:8e:04:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:55:43 2025 by rpki-client