Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B5E3B032C6A811EF97A08B6AC4F9AE02.roa
File: B5E3B032C6A811EF97A08B6AC4F9AE02.roa (raw, json)
Hash identifier: SEcsFmCBgLabyW0trFAoNwGiYTetz5iXwQW9zLDs2Ek=
Subject key identifier: 20:60:14:DF:86:7A:30:2B:F2:2F:30:32:DE:44:33:DD:03:8D:BA:E1
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2111
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B5E3B032C6A811EF97A08B6AC4F9AE02.roa
Signing time: Mon 30 Dec 2024 12:22:18 +0000
ROA not before: Mon 30 Dec 2024 12:22:18 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.60.0/23 maxlen: 24
115.167.62.0/23 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.90.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.180.0/24 maxlen: 24
180.178.181.0/24 maxlen: 24
180.178.182.0/24 maxlen: 24
180.178.183.0/24 maxlen: 24
180.178.184.0/22 maxlen: 22
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Dec 2024 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8465 (0x2111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 30 12:22:18 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6772907a-3c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:16:ae:11:79:c1:59:20:8b:b0:28:58:53:
f6:26:12:25:e7:bc:0c:d9:10:65:ff:c1:6c:e3:70:
dd:d4:84:dd:07:52:c2:da:fe:ba:52:61:6a:44:0b:
88:60:68:38:a0:97:92:c6:ff:6f:32:ec:b2:bd:39:
31:1e:f0:5a:e0:90:86:c6:c9:54:9c:4d:f4:e8:bd:
ce:4e:5c:36:8b:ff:c5:bb:86:d3:3c:37:54:0e:29:
54:03:d7:06:42:c6:d0:c7:2d:1f:e7:9e:67:a2:d0:
76:c1:22:fa:06:55:fa:e2:fb:81:32:fa:51:3c:fb:
ca:93:36:47:36:76:ba:4f:3b:c9:f6:9e:22:b3:51:
a8:ee:7d:03:f3:55:d2:52:58:8e:51:3e:d0:07:35:
7a:d9:38:7f:13:bf:78:a1:99:13:9a:5d:03:a8:ad:
f6:f7:7d:94:3e:6b:65:6c:fc:a5:0f:6b:48:1f:68:
eb:c9:74:2e:ff:f0:bd:e5:c6:2a:94:19:e9:db:b9:
7a:c7:a0:a8:7d:4f:3c:ee:c9:5d:64:89:4b:63:d6:
06:68:ec:7b:72:34:96:7a:8f:6a:10:6b:f3:3d:32:
43:69:60:ac:c6:4c:db:39:b2:8a:42:01:b1:da:7b:
16:f4:a2:c2:32:64:a4:a4:3e:a9:2d:2c:9d:ab:86:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:60:14:DF:86:7A:30:2B:F2:2F:30:32:DE:44:33:DD:03:8D:BA:E1
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B5E3B032C6A811EF97A08B6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/24
103.11.63.0/24
103.151.27.0/24
113.203.208.0-113.203.220.255
113.203.222.0-113.203.231.255
113.203.233.0/24
113.203.241.0-113.203.245.255
113.203.248.0/24
113.203.252.0-113.203.254.255
115.167.3.0/24
115.167.6.0/24
115.167.16.0/22
115.167.28.0/22
115.167.60.0-115.167.64.255
115.167.66.0/24
115.167.73.0/24
115.167.76.0-115.167.78.255
115.167.101.0-115.167.103.255
115.167.117.0-115.167.119.255
115.167.122.0-115.167.124.255
175.110.64.0/22
175.110.89.0-175.110.91.255
175.110.97.0-175.110.98.255
175.110.104.0/22
175.110.109.0-175.110.110.255
180.178.142.0/24
180.178.144.0/24
180.178.146.0-180.178.150.255
180.178.160.0-180.178.164.255
180.178.166.0/24
180.178.169.0-180.178.171.255
180.178.176.0/20
202.92.18.0/24
202.92.20.0/24
202.92.26.0/24
223.29.225.0-223.29.226.255
223.29.228.0/22
223.29.235.0-223.29.239.255
Signature Algorithm: sha256WithRSAEncryption
3c:37:59:cb:3f:28:2d:6a:c5:ad:ae:3c:ab:8f:b6:64:df:1b:
4f:8e:65:32:0d:6c:40:61:7f:33:42:25:c9:02:ae:b7:23:1a:
49:19:66:7f:51:bb:cf:72:67:dc:a1:61:f0:8d:17:01:a1:09:
ae:b3:39:ce:0b:56:cd:6b:47:19:4d:c7:f3:7b:91:ad:4f:0c:
e6:77:12:29:7a:31:22:e5:8d:4c:25:f1:58:ab:3f:69:25:e3:
e5:9e:b9:1f:35:3b:8f:1e:df:fe:ad:3a:4a:5a:41:c9:db:97:
b8:f9:55:3a:60:53:6c:21:ff:dc:0a:72:3e:e7:ee:6e:72:8d:
22:3c:1a:0d:c5:f4:cc:41:bf:e1:ab:8d:84:a0:16:8b:64:6c:
13:96:b8:a2:83:a1:ee:c7:49:11:98:8a:92:fd:e8:de:e2:61:
58:89:8e:ef:d5:48:5a:ee:5a:cd:0b:5a:db:49:73:30:62:f1:
79:ba:5b:d8:09:44:e1:e0:52:89:e3:e7:92:91:a9:d4:84:6d:
8c:9b:b0:71:d5:da:c0:5d:01:fd:f8:ac:73:2b:c1:e8:a0:d2:
3e:70:0d:71:84:11:d2:1c:89:e3:f4:fa:e6:22:67:67:4e:42:
4a:8c:69:62:da:0d:af:ea:93:04:09:04:1e:ad:cf:25:59:ab:
2e:bf:d2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:30:39 2025 by rpki-client