Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8E034C28701611EFB8CAA580C4F9AE02.roa
File: 8E034C28701611EFB8CAA580C4F9AE02.roa (raw, json)
Hash identifier: 4ucsXbXjPyGotNxS/kcxjA0nfU9JaNqDccy24gnJ6T8=
Subject key identifier: 86:D0:6B:6C:6F:08:1C:68:36:F9:6F:14:C3:E9:DD:0F:A9:89:69:D4
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 15BF
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8E034C28701611EFB8CAA580C4F9AE02.roa
Signing time: Wed 11 Sep 2024 08:19:25 +0000
ROA not before: Wed 11 Sep 2024 08:19:25 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
113.203.251.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 11:19:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5567 (0x15bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 11 08:19:25 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66e1528c-240e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:61:d6:47:59:78:17:4c:de:ee:db:fe:1e:53:
35:92:66:50:e7:c5:13:84:3f:3e:3c:89:78:03:c2:
de:63:78:c8:3f:ee:5d:13:2c:b5:fe:4b:13:a9:94:
e3:f5:04:0f:e0:34:85:81:04:87:fd:6d:89:d7:c3:
e7:07:d1:1b:22:6e:9b:4b:52:20:8f:6b:56:fb:70:
b6:a4:0a:9f:c0:a7:2f:01:26:cc:1b:aa:fd:b8:66:
b3:54:e2:55:30:ae:fa:81:f3:85:6c:4d:e5:07:88:
5d:38:ab:84:68:cf:70:37:f0:3b:24:de:92:95:aa:
89:a1:3a:48:76:4b:a5:8d:5d:84:28:b9:4b:91:6c:
ed:ab:83:98:27:15:ab:6f:fd:61:89:8f:2e:c0:36:
43:73:4e:41:a2:73:36:75:2a:8e:4d:fe:0f:25:d4:
00:ca:13:53:5a:71:d7:87:2f:eb:ca:25:b0:00:0f:
cd:f6:dc:cd:08:30:af:88:90:9d:65:e7:03:48:e9:
07:fa:c9:12:ab:9d:9f:67:61:3e:e4:bd:39:33:fe:
be:df:aa:aa:76:08:70:52:8e:92:87:2e:55:61:22:
61:4e:c4:ae:c3:6a:0b:75:c8:3c:62:42:1c:00:96:
61:46:a1:72:c0:1a:c8:34:86:e6:04:a2:10:1b:20:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D0:6B:6C:6F:08:1C:68:36:F9:6F:14:C3:E9:DD:0F:A9:89:69:D4
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8E034C28701611EFB8CAA580C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
103.151.27.0/24
113.203.208.0/24
113.203.210.0/24
113.203.212.0/23
113.203.215.0-113.203.220.255
113.203.222.0/24
113.203.227.0-113.203.231.255
113.203.233.0/24
113.203.242.0-113.203.245.255
113.203.248.0/21
115.167.2.0/23
115.167.12.0-115.167.23.255
115.167.50.0/24
115.167.56.0/22
115.167.73.0/24
115.167.78.0/24
115.167.116.0-115.167.123.255
115.167.125.0/24
175.110.88.0/22
175.110.97.0/24
175.110.104.0/22
175.110.109.0-175.110.111.255
180.178.142.0/24
180.178.148.0-180.178.150.255
180.178.160.0/24
180.178.163.0/24
180.178.169.0-180.178.171.255
180.178.180.0-180.178.187.255
180.178.189.0/24
180.178.191.0/24
202.92.18.0/24
202.92.20.0/24
202.92.26.0/24
223.29.231.0/24
223.29.235.0-223.29.239.255
Signature Algorithm: sha256WithRSAEncryption
a8:f8:66:bc:54:38:84:93:b9:19:c3:22:e6:97:c8:bd:29:7f:
1f:41:ac:26:2e:fd:86:06:02:fc:fb:e7:d4:8e:97:e1:de:15:
78:30:a6:0c:b1:c2:67:a2:1f:e2:92:41:49:05:97:9a:21:ae:
2a:28:04:eb:0d:37:31:f1:15:4e:a4:4e:1f:c4:c4:44:90:da:
12:26:04:9e:ce:18:55:02:d5:4d:00:5b:64:2f:73:f1:fc:9c:
4e:45:51:73:ae:de:63:81:86:44:c4:67:2e:6d:94:2c:d5:f3:
50:02:65:88:e5:f4:81:96:d9:9e:f6:0a:41:6e:5a:1a:f4:fd:
c6:a5:97:06:20:be:4a:8f:1a:68:2d:06:3f:a1:44:cc:3d:ae:
7b:3a:20:6e:6c:d4:12:32:72:6a:f7:6e:7d:6f:22:96:2a:df:
fa:98:b2:40:5a:8a:f5:25:70:8f:90:ea:15:32:dc:16:a6:1a:
4e:bf:8a:88:eb:45:cb:6f:69:9c:c3:6a:7c:c8:a4:e0:ad:60:
15:90:63:64:98:b2:3b:81:f1:62:a4:78:91:e1:8e:f7:c5:11:
ac:7e:19:7b:1b:5b:5a:f3:02:32:62:d4:dd:39:71:13:16:f4:
ab:7b:64:fe:5c:32:12:69:1f:31:87:43:c6:28:95:56:b9:b8:
e7:ee:4e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:14:28 2025 by rpki-client