Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8A2D0C76E85A11EFA2117071C4F9AE02.roa
File: 8A2D0C76E85A11EFA2117071C4F9AE02.roa (raw, json)
Hash identifier: MiiUDU35CLu0uUKzxl7xHFGXDtX7f6WNVLKAm0vnhuE=
Subject key identifier: FB:2A:F7:8B:AE:78:39:2E:C6:97:F6:B6:6A:5A:67:80:7F:A8:83:17
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 22F5
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8A2D0C76E85A11EFA2117071C4F9AE02.roa
Signing time: Mon 17 Feb 2025 06:14:44 +0000
ROA not before: Mon 17 Feb 2025 06:14:44 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/24 maxlen: 24
43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.15.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.60.0/23 maxlen: 24
115.167.62.0/23 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.80.0/24 maxlen: 24
175.110.81.0/24 maxlen: 24
175.110.82.0/24 maxlen: 24
175.110.83.0/24 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.90.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.180.0/24 maxlen: 24
180.178.181.0/24 maxlen: 24
180.178.182.0/24 maxlen: 24
180.178.183.0/24 maxlen: 24
180.178.184.0/22 maxlen: 22
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Feb 2025 06:19:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8949 (0x22f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Feb 17 06:14:44 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67b2d3d3-101a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d9:3c:e0:23:3f:18:3c:76:e9:55:af:f4:b8:
5d:13:12:54:2a:85:85:7b:b8:78:4b:47:1a:25:ba:
29:77:45:05:f0:9e:d8:dd:2f:75:57:1d:9c:e1:59:
49:64:97:4e:c8:82:1b:bf:29:80:c0:6f:bc:e8:36:
5e:50:7e:ff:b9:35:1d:e8:ae:dd:d3:a1:89:a6:be:
2b:74:08:a9:03:67:d3:65:d2:ce:85:4e:d9:ef:c5:
76:22:17:2f:3f:64:47:12:2b:f3:cb:89:1d:e7:35:
58:3c:9c:0d:6e:97:6e:bc:3c:ae:67:5e:9f:9b:9c:
62:1a:cf:f4:0a:2b:c5:04:05:8a:98:b7:b4:07:58:
d1:29:0d:15:5c:d8:dd:63:8d:39:b8:5a:1c:19:41:
51:d6:b5:15:8c:32:a4:0d:4d:28:28:60:a2:92:8f:
1e:cf:50:98:d1:d4:14:66:be:56:47:4f:51:7e:bf:
e8:ca:f8:d0:ea:e3:07:ca:15:a4:ca:0e:e8:95:b0:
d0:8b:54:37:c9:88:dd:0e:ae:c2:74:fb:09:83:68:
73:83:3b:52:b4:80:83:c2:ca:f0:2b:ff:97:d6:25:
d2:e3:de:69:a0:84:0b:be:d5:83:cf:e4:48:00:b2:
61:d8:c2:4c:48:5f:56:f3:8c:aa:d9:43:e7:44:52:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2A:F7:8B:AE:78:39:2E:C6:97:F6:B6:6A:5A:67:80:7F:A8:83:17
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8A2D0C76E85A11EFA2117071C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.11.63.0/24
113.203.208.0-113.203.220.255
113.203.222.0/23
113.203.225.0-113.203.231.255
113.203.233.0/24
113.203.241.0-113.203.245.255
113.203.248.0/24
113.203.252.0-113.203.254.255
115.167.6.0/24
115.167.15.0-115.167.19.255
115.167.60.0-115.167.64.255
115.167.66.0/24
115.167.73.0/24
115.167.78.0/24
115.167.101.0-115.167.103.255
115.167.117.0-115.167.118.255
115.167.123.0/24
175.110.64.0/22
175.110.80.0/22
175.110.89.0-175.110.91.255
175.110.97.0-175.110.98.255
175.110.104.0/22
175.110.109.0-175.110.111.255
180.178.142.0/24
180.178.144.0/24
180.178.146.0-180.178.150.255
180.178.160.0-180.178.171.255
180.178.176.0/20
202.92.18.0/24
202.92.20.0/24
202.92.26.0/24
223.29.225.0-223.29.226.255
223.29.228.0/22
223.29.235.0/24
223.29.237.0-223.29.239.255
Signature Algorithm: sha256WithRSAEncryption
75:d3:13:a2:c9:c3:e7:e5:2b:06:f1:bf:d5:01:d3:26:4b:54:
02:94:e2:e8:22:6d:8a:06:ee:36:1b:97:0a:8e:9f:44:9b:c6:
e1:13:73:e3:0b:46:f9:01:24:38:02:d8:47:8a:e1:1d:80:61:
ff:39:b3:9c:a7:1e:b4:08:e3:ed:57:a1:89:ed:da:82:f6:8b:
13:99:4b:49:f9:0a:cb:7b:a6:4d:87:38:03:72:34:13:21:f1:
c0:2e:3c:c6:af:39:fd:6f:d6:5b:5c:be:98:3a:e9:59:da:58:
60:51:0f:1e:50:7f:d7:59:05:f8:01:f8:93:c3:8d:f2:1f:20:
54:67:5f:8b:29:91:df:43:25:82:e4:9c:30:b2:05:ec:e7:35:
5e:7f:33:64:1d:7e:47:cf:f8:63:a6:bc:1d:06:3e:0f:e8:fb:
1f:1f:ea:6c:3b:9e:3a:ff:cf:70:c1:85:38:71:31:60:c7:ea:
e1:16:74:66:cb:41:4c:9b:25:f6:c1:44:74:74:ea:9a:16:52:
f6:d3:cc:5f:00:a4:b2:71:1f:9f:8b:56:bb:59:9c:61:9b:eb:
f4:e3:ce:f0:27:5b:2e:31:4f:47:6b:b2:57:da:a9:89:0b:f5:
d9:41:7f:32:45:9b:82:4c:e2:29:57:08:8d:8f:ec:9e:03:d8:
6d:81:3c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:50:51 2025 by rpki-client