Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8FEDBA4A5C6711EFB826674CC4F9AE02.roa
File: 8FEDBA4A5C6711EFB826674CC4F9AE02.roa (raw, json)
Hash identifier: 9cyPtL+ajahEFJcFZfb02LYbeNzk8MxJ8WTIdkMylR8=
Subject key identifier: 00:C4:E2:57:5F:69:ED:E7:5E:09:16:E3:D1:01:AC:45:2E:F6:A1:39
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 14BA
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8FEDBA4A5C6711EFB826674CC4F9AE02.roa
Signing time: Sat 17 Aug 2024 07:08:54 +0000
ROA not before: Sat 17 Aug 2024 07:08:54 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
115.167.52.0/22 maxlen: 24
115.167.60.0/22 maxlen: 22
115.167.65.0/24 maxlen: 24
115.167.67.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Aug 2024 04:11:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5306 (0x14ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 17 07:08:54 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66c04c86-8791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:be:26:5f:18:e9:f5:13:35:e0:09:85:98:79:
a2:11:1c:74:a6:fa:73:ce:f2:d1:e6:3b:d4:30:7b:
4e:3f:81:94:4c:c7:85:95:e6:b6:e8:9b:96:39:7b:
2e:02:92:16:7c:f0:45:d5:12:3a:5d:38:8b:ea:df:
c1:77:0c:59:2e:82:b6:ed:c9:4a:72:46:71:71:12:
cb:ab:ed:62:d1:10:74:f1:82:0d:35:8d:35:28:73:
5f:3a:b9:1f:3e:42:f4:2b:a3:1d:76:b1:07:bc:f6:
d9:05:a1:ab:a1:d6:1a:65:0c:49:6e:ac:54:b6:85:
44:7a:77:24:e2:f6:1f:ec:e9:c3:56:10:ec:0c:d8:
96:cb:10:a3:29:89:5d:d4:f5:31:80:63:11:b0:91:
ac:87:de:ce:ad:95:d8:4d:be:00:28:42:4a:f3:9b:
02:0d:ca:77:df:c8:a4:1e:07:54:49:f5:75:8b:62:
8e:44:88:e1:5b:97:5c:73:7c:fd:b8:a7:27:01:59:
01:e6:49:68:8a:66:7c:75:14:00:d3:a3:1d:e4:1d:
f8:7d:20:56:65:30:fa:30:68:cf:07:3f:f2:f8:02:
28:67:80:40:63:84:86:45:ad:b2:ee:c3:dc:34:a1:
48:3e:fa:4b:ba:81:89:16:e0:3e:eb:f6:df:79:e9:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C4:E2:57:5F:69:ED:E7:5E:09:16:E3:D1:01:AC:45:2E:F6:A1:39
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8FEDBA4A5C6711EFB826674CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
113.203.209.0/24
113.203.211.0/24
113.203.214.0/23
113.203.219.0/24
113.203.222.0/24
113.203.227.0/24
113.203.241.0/24
113.203.243.0/24
113.203.246.0/24
115.167.52.0/22
115.167.60.0/22
115.167.65.0/24
115.167.67.0/24
115.167.76.0/24
115.167.124.0/23
180.178.142.0/24
180.178.151.0/24
180.178.161.0-180.178.162.255
180.178.164.0/24
180.178.188.0/24
180.178.190.0/24
223.29.225.0/24
223.29.227.0/24
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f5:06:58:c3:ea:69:03:8a:6c:8e:06:cd:49:0b:0c:11:84:
ff:06:6a:e8:0a:80:ce:28:c0:c1:6c:0f:d0:0b:b7:82:b7:e1:
5c:f7:9c:3e:85:12:9d:92:f4:9e:cd:4e:46:d5:db:05:2c:9f:
ea:bc:39:5b:8d:f0:32:ce:a1:a6:7f:c0:b6:46:a6:8b:50:b7:
0d:3d:72:54:94:51:05:cc:57:7f:7f:7c:db:09:46:2f:49:58:
03:16:c2:4f:12:34:7e:32:b2:f9:ef:59:4f:b3:70:4e:1b:2a:
64:e1:7f:f2:1a:bb:7d:38:75:fa:a7:01:d6:f6:5f:ff:92:dc:
c6:af:24:3e:fd:1e:c8:1b:1d:c8:85:7a:6c:32:89:d3:9f:2f:
41:f3:ff:a4:26:78:a6:c9:84:f3:24:71:cd:3d:c2:1d:65:b4:
ff:05:0e:84:44:cf:fc:e1:7a:26:3f:ca:e9:7f:25:fc:5f:57:
78:9b:0b:38:60:92:4e:f2:2a:ee:4c:27:61:2b:82:32:4f:4c:
80:0b:1d:15:4d:aa:3d:6b:80:89:22:13:0a:4a:c0:00:96:b7:
27:34:40:36:68:22:90:0d:f4:b9:e6:44:41:57:69:57:b8:9e:
5e:b9:c4:3a:5e:71:99:e6:a4:d8:2a:bc:17:dc:b4:b3:67:d0:
2f:05:3f:72
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgICFLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQwODE3MDcwODU0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmMwNGM4Ni04NzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6L4mXxjp9RM14AmFmHmiERx0pvpzzvLR5jvUMHtOP4GUTMeFlea26JuWOXsu
ApIWfPBF1RI6XTiL6t/BdwxZLoK27clKckZxcRLLq+1i0RB08YINNY01KHNfOrkf
PkL0K6MddrEHvPbZBaGrodYaZQxJbqxUtoVEenck4vYf7OnDVhDsDNiWyxCjKYld
1PUxgGMRsJGsh97OrZXYTb4AKEJK85sCDcp338ikHgdUSfV1i2KORIjhW5dcc3z9
uKcnAVkB5kloimZ8dRQA06Md5B34fSBWZTD6MGjPBz/y+AIoZ4BAY4SGRa2y7sPc
NKFIPvpLuoGJFuA+6/bfeeml2wIDAQABo4IDMjCCAy4wHQYDVR0OBBYEFADE4ldf
ae3nXgkW49EBrEUu9qE5MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvOEZFREJBNEE1
QzY3MTFFRkI4MjY2NzRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgbsGCCsGAQUFBwEHAQH/
BIGrMIGoMIGlBAIAATCBngMEAGcLPwMEAHHL0QMEAHHL0wMEAXHL1gMEAHHL2wME
AHHL3gMEAHHL4wMEAHHL8QMEAHHL8wMEAHHL9gMEAnOnNAMEAnOnPAMEAHOnQQME
AHOnQwMEAHOnTAMEAXOnfAMEALSyjgMEALSylzAMAwQAtLKhAwQAtLKiAwQAtLKk
AwQAtLK8AwQAtLK+AwQA3x3hAwQA3x3jAwQA3x3vMA0GCSqGSIb3DQEBCwUAA4IB
AQB29QZYw+ppA4psjgbNSQsMEYT/BmroCoDOKMDBbA/QC7eCt+Fc95w+hRKdkvSe
zU5G1dsFLJ/qvDlbjfAyzqGmf8C2RqaLULcNPXJUlFEFzFd/f3zbCUYvSVgDFsJP
EjR+MrL571lPs3BOGypk4X/yGrt9OHX6pwHW9l//ktzGryQ+/R7IGx3IhXpsMonT
ny9B8/+kJnimyYTzJHHNPcIdZbT/BQ6ERM/84XomP8rpfyX8X1d4mws4YJJO8iru
TCdhK4IyT0yACx0VTao9a4CJIhMKSsAAlrcnNEA2aCKQDfS55kRBV2lXuJ5eucQ6
XnGZ5qTYKrwX3LSzZ9AvBT9y
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:50:50 2025 by rpki-client