Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9343CDCA85FB11EF9D55E783C4F9AE02.roa
File: 9343CDCA85FB11EF9D55E783C4F9AE02.roa (raw, json)
Hash identifier: fitFm25+bNg1PUyASaG/GMPe9uErsY7dccaJj6Kaw3A=
Subject key identifier: BA:C4:20:8E:92:D3:D8:41:8C:64:CC:8E:A2:4D:82:C0:B0:F4:DD:1F
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 17CA
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9343CDCA85FB11EF9D55E783C4F9AE02.roa
Signing time: Thu 10 Oct 2024 12:49:45 +0000
ROA not before: Thu 10 Oct 2024 12:49:45 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 205220
IP address blocks: 113.203.212.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.228.0/22 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
115.167.116.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.120.0/22 maxlen: 22
175.110.90.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 11:36:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6090 (0x17ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 10 12:49:45 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6707cd69-b832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:90:1c:fa:f7:79:36:b1:a1:51:05:c3:88:
a2:38:1e:9d:8e:b1:60:4a:20:41:a3:69:b4:6f:8e:
e2:f1:a1:68:b3:d2:57:e6:af:72:d4:3f:4a:ea:84:
58:86:9d:1e:e4:81:bb:ae:4f:9d:51:e5:37:ac:53:
51:42:bb:eb:dd:86:fd:2c:91:88:e5:64:45:dc:c0:
34:36:7f:e8:f9:b6:b4:47:01:36:a8:59:df:3a:29:
54:33:51:bc:71:f0:6a:78:25:a5:db:cb:20:5d:9e:
25:e1:30:0c:b7:81:95:b8:24:8c:f4:a6:3d:e7:53:
a3:d1:19:81:e1:1a:07:72:68:ca:51:c3:ca:eb:db:
bf:11:5a:b7:69:e3:54:29:29:80:42:bf:7f:66:f5:
c9:a8:0a:e6:20:51:9b:60:62:1d:89:90:17:d3:79:
5f:c0:22:92:70:20:00:9b:70:14:9b:4f:5b:fd:ab:
03:53:87:19:49:6b:74:81:1e:e0:1b:3c:af:89:de:
33:9a:33:f9:93:67:c5:e0:97:47:95:0e:b3:1c:99:
17:6a:e2:a5:3f:dd:9d:79:94:68:3c:2a:45:87:a2:
59:f0:13:d4:03:c7:3d:32:7f:7b:da:80:d9:1d:f6:
4d:3a:21:4e:a3:54:07:f0:f7:7c:b2:27:0c:fd:67:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C4:20:8E:92:D3:D8:41:8C:64:CC:8E:A2:4D:82:C0:B0:F4:DD:1F
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9343CDCA85FB11EF9D55E783C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.212.0/24
113.203.216.0/24
113.203.218.0/24
113.203.223.0/24
113.203.226.0/24
113.203.228.0/22
113.203.233.0/24
113.203.242.0/24
113.203.244.0/23
115.167.116.0-115.167.123.255
175.110.90.0/23
175.110.107.0/24
175.110.109.0-175.110.111.255
180.178.144.0/24
180.178.146.0/24
180.178.165.0/24
180.178.167.0/24
202.92.18.0/24
202.92.20.0/24
223.29.231.0/24
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
35:3c:98:0f:fe:d6:3d:cd:cc:85:cf:aa:e2:f6:de:7f:06:ae:
f6:ca:bc:14:ac:bd:b0:34:00:43:78:08:ae:a2:76:e0:b5:41:
47:7f:87:ee:ec:43:12:1d:b5:4c:c4:17:7d:fa:51:95:fe:7f:
ec:e4:39:80:06:85:78:48:f2:79:f5:c9:c0:7f:c9:92:48:dc:
12:8a:e1:35:63:85:ee:8e:4e:fe:d0:20:fa:8c:2c:1c:66:22:
2a:30:ba:88:ac:1b:7a:45:a9:41:5a:56:0b:0f:d1:8a:f7:62:
a6:42:a2:43:9f:e8:8d:a3:dc:a8:ac:dd:0e:f7:d6:9a:a0:18:
39:18:f4:18:d4:e8:5d:50:23:67:a8:cb:ad:bc:03:4e:d5:72:
95:b6:01:fa:ae:c6:b8:2b:c2:89:18:b6:96:86:40:b3:98:a9:
e5:1c:e8:c1:bc:0d:c2:b6:f0:74:89:72:41:ae:df:82:da:83:
ce:05:31:a1:e8:b3:e9:1b:d9:ed:a2:df:ad:a9:28:af:b2:cd:
e0:4f:5c:bc:1d:ad:c6:dc:b8:b5:bf:6b:4c:84:c6:36:a6:c1:
aa:40:c6:db:69:ff:55:80:b3:48:20:31:40:65:05:be:a2:a6:
a5:d8:94:85:d6:9e:24:3f:e3:7a:a8:f1:0f:44:84:2d:20:b3:
b9:8a:36:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:12 2025 by rpki-client