Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/ADC6BA92A1B011EF89F7EC66C4F9AE02.roa
File: ADC6BA92A1B011EF89F7EC66C4F9AE02.roa (raw, json)
Hash identifier: 5BV1Psh5UYQu6fcSFKkECo322xyDJi9BjPB6S9TeCy0=
Subject key identifier: 3F:11:B1:02:4E:5E:CF:78:79:92:CB:A4:F0:8E:73:56:D8:02:DC:39
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1D0D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/ADC6BA92A1B011EF89F7EC66C4F9AE02.roa
Signing time: Tue 19 Nov 2024 11:12:31 +0000
ROA not before: Tue 19 Nov 2024 11:12:31 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/22 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/22 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.65.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.67.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 16:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7437 (0x1d0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 19 11:12:31 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=673c729f-183e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:08:f5:87:05:1e:56:06:09:92:45:0b:65:5e:
a0:e5:b5:3d:6b:bd:38:a1:8b:7b:2c:24:78:89:03:
a1:6a:e6:1e:8d:e8:ce:d6:02:f4:17:fd:71:e6:f0:
b8:ca:0a:70:bd:d9:60:3f:dd:c5:d3:49:cc:73:1c:
7a:1b:81:60:a7:32:92:97:40:2a:bb:7f:f4:4b:cc:
46:6b:aa:f6:85:39:bc:7e:5b:7e:b1:0d:d2:3c:60:
e8:dd:08:e4:ed:19:92:e5:5e:1b:3d:50:f5:93:e4:
32:53:0c:cb:18:a0:21:5a:86:0a:c5:6a:1d:f7:a7:
84:7e:94:07:e9:c0:da:7e:a5:ef:29:b1:6f:ab:ba:
af:24:d9:50:77:03:d4:77:3a:35:c6:6b:ed:27:45:
3a:3d:96:c5:da:6d:33:26:79:6f:01:eb:0b:fc:1b:
6b:b9:21:08:60:27:96:69:d6:01:59:89:a7:80:52:
c9:11:f9:4e:b3:31:28:3f:c9:39:57:c8:69:1e:b3:
4c:c8:55:eb:c5:22:7a:13:5b:bf:2c:cf:40:7e:df:
a7:2c:41:bc:b4:60:e2:fa:da:43:75:90:49:4d:6f:
1f:c1:fe:5e:20:91:71:94:6c:5a:5b:13:16:72:7a:
f8:ee:ea:be:11:22:fb:f0:61:e6:e9:ea:bd:8a:04:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:11:B1:02:4E:5E:CF:78:79:92:CB:A4:F0:8E:73:56:D8:02:DC:39
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/ADC6BA92A1B011EF89F7EC66C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.11.63.0/24
113.203.208.0/24
113.203.210.0/24
113.203.212.0/24
113.203.215.0/24
113.203.217.0/24
113.203.219.0-113.203.220.255
113.203.222.0/24
113.203.231.0/24
113.203.233.0/24
113.203.241.0-113.203.242.255
113.203.245.0-113.203.246.255
115.167.6.0/24
115.167.16.0/21
115.167.29.0-115.167.31.255
115.167.48.0/24
115.167.50.0/24
115.167.56.0-115.167.67.255
115.167.73.0/24
115.167.78.0/24
115.167.102.0/24
115.167.124.0/23
175.110.64.0/22
175.110.80.0/22
175.110.89.0/24
175.110.91.0/24
175.110.111.0/24
180.178.142.0/24
180.178.144.0/24
180.178.146.0/24
180.178.150.0/23
180.178.161.0-180.178.162.255
180.178.165.0/24
180.178.167.0/24
180.178.188.0/24
180.178.191.0/24
202.92.26.0/24
223.29.225.0/24
223.29.227.0-223.29.230.255
223.29.236.0/24
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d2:34:60:87:17:8d:e5:42:6c:b1:cc:90:a9:47:96:d7:50:
e7:0c:04:34:5f:cf:41:fc:0c:7d:2f:b0:41:fc:ec:7a:41:0a:
f4:07:e9:c3:aa:cb:e7:8e:68:7e:43:bb:c4:f4:db:7f:98:2f:
7f:95:9d:3f:61:ca:1e:21:73:f9:d6:ef:e1:b1:85:25:ec:c6:
44:d1:88:6e:b0:dd:40:74:19:c3:e0:d5:48:9e:fd:f9:56:61:
22:80:6c:29:96:1a:da:cf:43:69:c3:aa:15:77:14:d8:1e:bb:
d3:3d:b8:bf:06:21:62:b1:5b:3e:ca:e3:ff:90:e8:83:4e:d5:
a7:0a:40:fd:c6:2b:3a:d5:e0:31:37:0e:cf:c6:67:5a:08:80:
fe:86:dc:ff:72:93:7f:a7:a7:25:d4:34:b1:5f:bb:9f:6a:a6:
e6:ea:3f:ba:0f:5a:11:af:1b:42:28:f9:c9:b0:2c:d9:1a:08:
42:38:f6:c6:f3:1e:c7:5e:fa:3f:99:16:d5:8a:07:e3:a7:0b:
dc:87:c9:6d:e2:40:20:79:7b:c2:b3:c2:5e:81:62:13:d9:9b:
b9:b5:53:01:06:86:f7:9c:da:0e:d6:93:01:31:5d:eb:3e:c3:
d5:87:c7:a3:d2:40:60:14:83:88:7a:d9:ed:e5:56:14:3b:4f:
e2:5b:60:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:50:49 2025 by rpki-client