Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9CA60C0AC78411EF95C42E83C4F9AE02.roa
File: 9CA60C0AC78411EF95C42E83C4F9AE02.roa (raw, json)
Hash identifier: BFMZG0/tW+/sqks8SdNfNSI6hO/Nh2GdzYz2NyKHL8U=
Subject key identifier: A6:90:2C:4B:95:28:35:17:C3:8E:78:5A:10:C0:0A:42:9D:EC:EF:D1
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 212A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9CA60C0AC78411EF95C42E83C4F9AE02.roa
Signing time: Tue 31 Dec 2024 14:36:25 +0000
ROA not before: Tue 31 Dec 2024 14:36:25 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/24 maxlen: 24
43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.15.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.60.0/23 maxlen: 24
115.167.62.0/23 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.180.0/24 maxlen: 24
180.178.181.0/24 maxlen: 24
180.178.182.0/24 maxlen: 24
180.178.183.0/24 maxlen: 24
180.178.184.0/22 maxlen: 22
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Jan 2025 12:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8490 (0x212a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 31 14:36:25 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67740169-06b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f2:a8:48:1e:a7:df:d3:b0:0b:89:0b:b7:e0:
a2:9a:51:ea:50:78:53:db:92:6e:ab:ef:93:50:8a:
b8:f9:9c:0e:31:6f:2f:8b:03:54:13:d5:e7:c6:7e:
c4:66:0e:9d:41:b8:f9:a6:b4:60:7e:37:49:ed:77:
43:c5:d9:66:87:ef:1f:42:8b:80:cf:76:86:d8:f6:
6d:ec:43:57:dc:f4:ca:79:83:6a:89:7a:77:7b:1b:
f3:92:18:0e:f1:cd:ea:40:26:ca:ff:e0:24:36:d7:
bc:12:67:2a:22:ff:7a:64:b4:21:cd:27:1b:79:22:
05:d6:c7:dc:e5:4a:6f:f7:69:b1:ac:9b:06:d9:75:
a8:09:ea:0e:a1:e8:58:2f:cb:32:7c:bc:91:56:e1:
fb:86:71:f4:24:07:86:20:fe:5c:47:7c:c8:0b:03:
6c:5f:01:06:e2:5d:55:98:fb:b4:19:fb:b3:01:c6:
2e:f3:d0:82:29:f5:b2:74:cd:a2:65:ef:1e:13:0c:
76:33:48:4a:87:4c:13:04:d5:09:74:c3:40:6e:ac:
34:fe:90:9c:55:61:8f:3f:b1:10:ff:47:0c:2e:d2:
c8:7b:c2:c2:51:75:83:43:bc:68:38:6f:08:fd:ab:
60:92:df:34:a6:c0:5f:d8:15:e0:be:cb:71:07:49:
35:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:90:2C:4B:95:28:35:17:C3:8E:78:5A:10:C0:0A:42:9D:EC:EF:D1
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/9CA60C0AC78411EF95C42E83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.11.63.0/24
103.151.27.0/24
113.203.208.0-113.203.220.255
113.203.222.0-113.203.231.255
113.203.241.0-113.203.244.255
113.203.248.0/24
113.203.252.0-113.203.254.255
115.167.3.0/24
115.167.6.0/24
115.167.15.0-115.167.19.255
115.167.28.0/22
115.167.60.0-115.167.64.255
115.167.66.0/24
115.167.73.0/24
115.167.76.0-115.167.78.255
115.167.101.0-115.167.103.255
115.167.117.0-115.167.119.255
115.167.122.0-115.167.124.255
175.110.64.0/22
175.110.89.0/24
175.110.91.0/24
175.110.97.0-175.110.98.255
175.110.104.0/22
175.110.109.0-175.110.111.255
180.178.142.0/24
180.178.144.0/24
180.178.146.0-180.178.150.255
180.178.160.0-180.178.171.255
180.178.176.0/20
202.92.18.0/24
202.92.20.0/24
202.92.26.0/24
223.29.225.0/24
223.29.228.0/22
223.29.235.0-223.29.239.255
Signature Algorithm: sha256WithRSAEncryption
97:90:bc:59:e0:2c:ba:6e:64:2f:9d:dd:ac:8a:22:d2:38:42:
86:02:0a:49:95:a1:65:8f:74:5f:21:e2:e2:3a:a3:f4:b5:8d:
44:c8:e6:c1:0d:73:b1:ca:1e:c8:04:03:5e:dd:9f:34:7e:29:
95:a8:74:40:65:04:1b:a1:ba:a8:7b:b8:48:88:57:cd:88:7e:
5c:22:95:c8:94:7f:0b:6a:76:08:06:7a:5f:02:a9:ea:a7:6e:
4d:6a:36:43:ae:ab:63:b6:06:eb:21:f6:d3:45:2b:95:e5:8e:
f4:65:e5:4f:58:1f:3d:14:0b:41:e4:72:fa:32:23:0e:ac:89:
70:4a:b1:83:a3:a5:d5:ab:08:42:64:f4:ae:19:fb:91:17:17:
0d:2c:0b:3e:57:15:8d:39:ff:c8:b8:eb:73:c6:36:3d:f6:9e:
cf:6d:2e:63:38:dd:b6:d9:1f:92:7f:33:34:db:0f:19:23:93:
01:83:d0:93:1c:4d:a6:f5:36:d8:63:c2:46:c3:37:9e:77:0c:
a9:c8:95:ca:5e:9e:47:59:ae:5c:7b:1e:ae:fa:8a:50:4d:7a:
c6:ba:5a:8c:f5:93:0f:47:fb:03:fc:4d:45:dd:4d:57:81:94:
7b:cd:eb:63:fe:19:49:bd:c8:36:86:b3:44:15:da:dc:19:87:
1a:68:8a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:05:00 2025 by rpki-client