Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8C31662AD3DD11EFBA800732C4F9AE02.roa
File: 8C31662AD3DD11EFBA800732C4F9AE02.roa (raw, json)
Hash identifier: 0KQXeNtmzI8UsxWXchlxpC47KH5wI0e1WXRaYbIoXBI=
Subject key identifier: DB:7C:AF:1E:8D:EC:94:50:FD:4E:5A:00:0A:5F:49:CA:62:E0:83:E0
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 21F4
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8C31662AD3DD11EFBA800732C4F9AE02.roa
Signing time: Tue 21 Jan 2025 11:32:53 +0000
ROA not before: Tue 21 Jan 2025 11:32:53 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
115.167.60.0/23 maxlen: 24
115.167.62.0/23 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.90.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.180.0/24 maxlen: 24
180.178.181.0/24 maxlen: 24
180.178.182.0/24 maxlen: 24
180.178.183.0/24 maxlen: 24
180.178.184.0/22 maxlen: 22
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 14:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8692 (0x21f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 21 11:32:53 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=678f85e5-095d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:83:98:22:e7:3c:f2:b5:50:45:63:59:b6:39:
c7:34:2e:37:6e:5f:8a:f6:38:b7:e7:e5:e9:f8:0f:
05:d0:90:25:b1:c9:07:c4:8d:5d:48:89:b5:6b:2f:
6e:2d:73:75:93:3a:83:e5:ee:8b:11:71:63:a1:c9:
90:08:0d:a6:a0:99:4d:a5:03:c8:50:04:3c:26:6a:
45:87:37:2d:64:f2:99:11:b3:98:85:79:a7:f6:03:
b1:68:34:90:85:ff:1d:35:37:66:c6:0d:27:65:6f:
e7:89:fe:f7:60:c5:55:ab:e7:b2:7d:f6:aa:ac:a7:
d3:11:8e:67:0f:dd:af:5c:ec:0c:ba:52:b7:53:9c:
47:25:79:04:35:01:ea:54:bc:17:78:c2:2b:c1:b1:
30:ca:db:af:0f:b4:b9:c1:0e:3c:ef:ed:66:6a:42:
bd:37:89:c8:67:bc:dc:5e:a6:7c:d4:48:55:6c:5d:
ec:8d:d3:de:2f:e1:73:e3:95:6c:a0:c7:64:a7:8c:
34:b8:0d:f5:f8:1e:70:01:79:6a:91:20:44:df:ff:
74:0e:2c:ec:0d:3c:42:a6:04:a2:60:2e:30:15:c4:
a2:eb:47:ab:8f:0b:ce:3d:92:d0:be:e9:01:fa:73:
19:e6:da:0e:23:24:27:f2:78:35:b2:9c:c0:db:2b:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7C:AF:1E:8D:EC:94:50:FD:4E:5A:00:0A:5F:49:CA:62:E0:83:E0
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8C31662AD3DD11EFBA800732C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/24
103.11.63.0/24
113.203.208.0-113.203.220.255
113.203.222.0/23
115.167.60.0/22
115.167.101.0/24
115.167.103.0/24
175.110.64.0/22
175.110.90.0/24
180.178.142.0/24
180.178.144.0/24
180.178.146.0-180.178.150.255
180.178.160.0-180.178.171.255
180.178.176.0/20
202.92.26.0/24
223.29.230.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:36:57:6f:2b:ae:c1:58:b4:66:20:bf:48:e6:21:44:22:36:
4f:22:92:d6:32:0c:f9:42:6a:59:06:88:fc:58:fc:d8:53:6d:
eb:51:10:ec:69:73:ff:c8:05:fa:7e:0b:72:9e:35:9f:e6:83:
da:85:55:92:e0:63:0e:e5:ee:ca:7a:20:dd:2b:fd:b8:05:9c:
dc:39:d4:ab:e8:9d:37:d5:17:b0:b6:17:1f:a6:d1:85:86:42:
73:a7:85:88:1e:32:6f:aa:6b:53:cc:dc:f0:81:b0:28:71:15:
52:f8:f2:e6:41:af:63:7c:7e:d7:87:cf:3e:33:b8:7c:5b:71:
18:d3:ab:2a:3f:4d:78:ab:ce:c9:64:15:69:63:9a:1d:08:dd:
85:cc:57:d4:be:ad:5d:8a:10:24:bd:b8:25:bc:9c:ec:6b:17:
08:3d:db:54:a4:3e:27:31:a0:f9:b4:ee:49:ca:3e:29:cb:7f:
c4:95:3f:a6:48:0f:1e:f8:dc:60:f8:de:1b:1d:a3:c2:c7:23:
f8:59:e7:f5:49:a7:0d:82:b7:c6:e3:85:2b:c9:e9:4c:86:b3:
fa:cd:30:05:4b:85:32:6d:15:4b:3d:c4:72:f8:fb:58:57:84:
66:06:14:b7:b4:4f:f7:09:d4:65:52:26:1a:3d:bc:e2:9d:c2:
53:d6:5f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 10:09:16 2025 by rpki-client