Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B10A4EAE96E211EF88B8404AC4F9AE02.roa
File: B10A4EAE96E211EF88B8404AC4F9AE02.roa (raw, json)
Hash identifier: bObL64XhjHFy0lBY7jmcMDB8Def1z3AJwBAwaGbKPdQ=
Subject key identifier: 0C:C4:8C:54:98:C9:8D:CB:A5:63:5B:5C:00:FB:6F:FC:6C:26:84:74
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1B4F
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B10A4EAE96E211EF88B8404AC4F9AE02.roa
Signing time: Thu 31 Oct 2024 11:35:27 +0000
ROA not before: Thu 31 Oct 2024 11:35:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.52.0/24 maxlen: 24
115.167.53.0/24 maxlen: 24
115.167.54.0/24 maxlen: 24
115.167.55.0/24 maxlen: 24
115.167.65.0/24 maxlen: 24
115.167.67.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 07:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6991 (0x1b4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 31 11:35:27 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67236b7f-5b47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0d:2b:1d:19:4d:4b:e3:f7:25:af:9f:52:89:
5f:23:18:c5:d7:7b:86:51:14:94:51:59:37:e5:bc:
85:ec:84:b2:7e:2e:97:8d:17:de:24:fb:98:3e:d8:
6f:35:f8:f4:b0:27:95:49:cb:56:98:3f:11:a6:3c:
9d:13:b7:e4:b2:f8:78:9d:a8:f5:69:b0:c5:35:4f:
03:13:d4:41:0d:cd:07:f0:5d:5c:f9:ef:ee:0e:91:
66:e7:d0:7d:2e:e7:e6:18:29:66:03:28:97:1f:2b:
b6:ad:77:78:89:c6:93:f1:a9:9a:09:8c:88:fb:77:
9b:b5:d8:a3:4b:b2:aa:bd:41:31:98:08:4c:f4:83:
bd:b7:00:ae:e1:84:17:76:8c:1a:6b:9e:86:2c:46:
6c:ea:66:3e:6b:ee:03:55:53:95:83:aa:ee:7f:46:
47:c3:a5:b8:4e:2f:02:b3:f6:c6:4d:1a:e3:c4:0a:
fb:26:70:b3:79:a9:78:8e:da:e7:dd:60:41:6c:6e:
27:f3:77:ad:d1:25:da:8d:2e:f8:01:85:42:a8:5c:
7f:bc:29:dd:65:17:24:92:43:7e:9a:af:27:df:90:
f5:a1:2b:69:e4:8e:01:fa:62:54:a4:83:0f:0c:26:
3a:9c:89:45:6a:75:dd:44:e8:5e:d9:64:96:11:52:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C4:8C:54:98:C9:8D:CB:A5:63:5B:5C:00:FB:6F:FC:6C:26:84:74
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B10A4EAE96E211EF88B8404AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.211.0/24
113.203.213.0-113.203.214.255
113.203.224.0/23
113.203.227.0/24
113.203.243.0/24
113.203.248.0/24
115.167.3.0/24
115.167.5.0-115.167.6.255
115.167.9.0/24
115.167.12.0-115.167.19.255
115.167.28.0/24
115.167.52.0/22
115.167.65.0/24
115.167.67.0/24
115.167.76.0/24
115.167.101.0-115.167.103.255
115.167.124.0/24
175.110.64.0/22
175.110.97.0/24
175.110.104.0/24
175.110.106.0/24
180.178.146.0-180.178.149.255
180.178.151.0/24
180.178.160.0/24
180.178.163.0/24
180.178.166.0/24
180.178.168.0/22
180.178.189.0/24
180.178.191.0/24
223.29.231.0/24
223.29.237.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
39:cb:f3:51:33:f1:06:58:93:9b:04:85:88:75:0d:40:b6:20:
b7:65:7b:53:58:0f:3e:eb:eb:84:f6:c3:c9:49:bd:2f:9b:db:
2a:d7:97:2e:da:6c:c8:d1:93:6e:02:6f:83:fe:dc:34:3d:5c:
bf:cc:df:9f:95:13:48:04:6b:83:01:67:25:2c:38:da:4f:3d:
ae:6b:4f:f9:27:41:6c:de:fa:6f:ce:cc:0b:3c:ca:68:1d:ec:
2a:c9:3c:2f:be:8a:d3:b3:d6:23:ca:46:29:d7:f7:e5:42:3d:
e6:09:53:bc:8a:2f:0c:99:fc:0f:a8:18:35:34:84:3b:5f:6a:
25:f7:89:76:9e:d2:ec:f7:6f:b1:8e:27:6d:ba:35:12:c5:80:
51:61:33:5e:50:d3:1b:7d:b3:3e:bb:d8:d5:0f:9b:5a:6f:eb:
0b:d6:30:fe:19:48:ad:b9:39:6e:87:dc:2a:76:93:c1:62:82:
31:0a:e4:0a:bd:ca:c5:1a:23:08:ab:28:ad:9b:42:51:2d:f8:
f9:15:23:7c:f4:c8:29:c9:2b:c8:4e:48:91:73:16:32:8b:12:
3d:5e:28:f9:09:3a:76:45:07:b5:01:43:f6:5a:9d:39:19:1f:
91:1b:12:f8:e9:23:fa:84:1a:3b:a6:66:f6:b5:28:fb:38:c0:
22:17:94:1b
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgICG08wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQxMDMxMTEzNTI3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzIzNmI3Zi01YjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnw0rHRlNS+P3Ja+fUolfIxjF13uGURSUUVk35byF7ISyfi6XjRfeJPuYPthv
Nfj0sCeVSctWmD8RpjydE7fksvh4naj1abDFNU8DE9RBDc0H8F1c+e/uDpFm59B9
LufmGClmAyiXHyu2rXd4icaT8amaCYyI+3ebtdijS7KqvUExmAhM9IO9twCu4YQX
dowaa56GLEZs6mY+a+4DVVOVg6ruf0ZHw6W4Ti8Cs/bGTRrjxAr7JnCzeal4jtrn
3WBBbG4n83et0SXajS74AYVCqFx/vCndZRckkkN+mq8n35D1oStp5I4B+mJUpIMP
DCY6nIlFanXdROhe2WSWEVKiZQIDAQABo4IDhTCCA4EwHQYDVR0OBBYEFAzEjFSY
yY3LpWNbXAD7b/xsJoR0MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQjEwQTRFQUU5
NkUyMTFFRjg4Qjg0MDRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggENBggrBgEFBQcBBwEB
/wSB/TCB+jCB9wQCAAEwgfADBABnlxsDBABxy9MwDAMEAHHL1QMEAHHL1gMEAXHL
4AMEAHHL4wMEAHHL8wMEAHHL+AMEAHOnAzAMAwQAc6cFAwQAc6cGAwQAc6cJMAwD
BAJzpwwDBAJzpxADBABzpxwDBAJzpzQDBABzp0EDBABzp0MDBABzp0wwDAMEAHOn
ZQMEA3OnYAMEAHOnfAMEAq9uQAMEAK9uYQMEAK9uaAMEAK9uajAMAwQBtLKSAwQB
tLKUAwQAtLKXAwQAtLKgAwQAtLKjAwQAtLKmAwQCtLKoAwQAtLK9AwQAtLK/AwQA
3x3nMAwDBADfHe0DBADfHe4wDQYJKoZIhvcNAQELBQADggEBADnL81Ez8QZYk5sE
hYh1DUC2ILdle1NYDz7r64T2w8lJvS+b2yrXly7abMjRk24Cb4P+3DQ9XL/M35+V
E0gEa4MBZyUsONpPPa5rT/knQWze+m/OzAs8ymgd7CrJPC++itOz1iPKRinX9+VC
PeYJU7yKLwyZ/A+oGDU0hDtfaiX3iXae0uz3b7GOJ226NRLFgFFhM15Q0xt9sz67
2NUPm1pv6wvWMP4ZSK25OW6H3Cp2k8FigjEK5Aq9ysUaIwirKK2bQlEt+PkVI3z0
yCnJK8hOSJFzFjKLEj1eKPkJOnZFB7UBQ/ZanTkZH5EbEvjpI/qEGjumZva1KPs4
wCIXlBs=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:12:10 2025 by rpki-client