Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/899439F4AD4C11EFBA57EA64C4F9AE02.roa
File: 899439F4AD4C11EFBA57EA64C4F9AE02.roa (raw, json)
Hash identifier: KrMWSsCTnx7NY29nMzyczu0Kp8RGerwAlNx+LeCPhE8=
Subject key identifier: 3B:B9:0E:5D:65:EC:11:74:65:8A:A0:49:DB:41:90:BC:26:B0:75:24
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1DDE
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/899439F4AD4C11EFBA57EA64C4F9AE02.roa
Signing time: Thu 28 Nov 2024 05:49:31 +0000
ROA not before: Thu 28 Nov 2024 05:49:31 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.52.0/24 maxlen: 24
115.167.53.0/24 maxlen: 24
115.167.54.0/24 maxlen: 24
115.167.55.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Nov 2024 08:40:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7646 (0x1dde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 28 05:49:31 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6748046b-4b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:82:1e:09:29:ec:70:1b:03:17:2f:c9:97:
91:26:95:11:7b:e7:b3:d5:5f:7f:e7:6a:aa:12:c1:
d6:db:49:e9:b0:3d:85:97:1d:af:a7:59:af:b5:44:
34:2f:39:c2:d3:4d:13:9c:0b:d3:1f:9d:99:a3:06:
4a:f7:1c:2c:c8:07:c5:ce:93:5d:c7:b0:f4:d4:0e:
00:a9:2b:96:b6:08:3e:c8:72:fd:a4:08:83:16:8c:
b2:03:e2:dc:4c:c5:68:c4:83:74:c7:94:2c:d2:27:
63:ee:e8:19:86:2a:22:07:b6:66:38:36:ee:ea:a6:
b0:ae:f6:37:fb:03:a9:ba:c1:37:cc:77:44:92:15:
c7:5c:6a:ba:c8:1b:d2:57:34:9c:67:37:b8:b3:cd:
43:23:da:4c:a7:1a:2b:af:49:bf:5a:8f:08:62:28:
13:fc:51:2c:bc:6b:aa:ca:96:ef:e2:7a:2a:da:4a:
be:43:04:d1:47:16:db:c2:ec:b1:2a:f4:ee:0d:5c:
c8:ef:21:c1:9c:bb:ce:70:8a:b5:14:d9:19:95:fa:
86:42:9a:d3:c3:67:60:5a:1c:ca:56:ef:6c:ad:b1:
6e:f6:2d:77:c4:ed:d3:b0:9c:7c:0f:6d:d5:b0:a0:
ad:dd:80:b3:b7:ba:68:74:93:ee:e1:94:e6:00:e4:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B9:0E:5D:65:EC:11:74:65:8A:A0:49:DB:41:90:BC:26:B0:75:24
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/899439F4AD4C11EFBA57EA64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.211.0/24
113.203.213.0-113.203.215.255
113.203.219.0/24
113.203.224.0/23
113.203.227.0/24
113.203.243.0/24
113.203.248.0/24
115.167.3.0/24
115.167.5.0/24
115.167.9.0/24
115.167.12.0/22
115.167.28.0/24
115.167.50.0/24
115.167.52.0/22
115.167.76.0/24
115.167.101.0/24
115.167.103.0/24
175.110.97.0/24
175.110.104.0/24
175.110.106.0/24
180.178.147.0-180.178.149.255
180.178.160.0/24
180.178.162.0/23
180.178.166.0/24
180.178.168.0/22
180.178.189.0/24
223.29.228.0/24
223.29.230.0/23
223.29.237.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
6f:61:2e:44:bc:4a:89:07:80:ea:e5:e1:1a:56:10:1f:62:26:
2c:2f:ab:18:74:f4:17:18:b6:d3:d0:67:46:c4:31:1a:67:23:
59:72:b5:d4:a1:b1:5d:12:83:58:8f:84:78:25:28:60:3b:ca:
19:32:bf:fd:4a:a8:c1:e4:b8:cf:69:0f:bc:22:67:b2:47:98:
6b:f4:2e:88:02:61:a2:6a:5e:29:b0:47:7a:ba:09:54:94:ed:
90:6a:f7:9a:85:5f:53:29:04:2e:47:08:3d:ef:6f:6c:83:39:
66:a0:3f:35:72:e7:cd:27:37:f8:21:bb:d8:a9:1c:0a:96:05:
08:fa:bf:70:c6:b2:5e:99:39:ac:5d:d6:73:93:44:d3:e9:fe:
71:75:9e:17:c1:f3:46:8c:f6:b9:a6:50:dd:a4:65:3f:44:5c:
ec:09:0a:0a:e8:e4:ad:7f:e3:18:f6:ac:d3:d1:e1:dd:65:8a:
11:b8:ae:c9:d9:a7:b3:0b:d8:73:d4:73:9f:d5:99:5e:33:9a:
0c:4f:ee:3c:75:ce:55:f2:a2:4b:0b:b4:bf:50:06:7f:b5:33:
ae:a8:04:de:95:bd:66:32:82:47:d1:63:05:57:a9:53:cf:fc:
8c:7a:a3:61:b5:9c:14:40:50:99:fb:dd:a1:2b:68:d5:51:60:
f5:cd:9a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:09:52 2025 by rpki-client