Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B7F86D188C6F11EF88F4F46CC4F9AE02.roa
File: B7F86D188C6F11EF88F4F46CC4F9AE02.roa (raw, json)
Hash identifier: 1jIOrA9xy83hlYjd4Cub+xyAPaEkrS7iSI9C0OU/sRA=
Subject key identifier: E3:10:FA:47:B0:8F:A6:21:4C:BC:D0:6C:7C:4A:CB:42:4F:07:33:95
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 180C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B7F86D188C6F11EF88F4F46CC4F9AE02.roa
Signing time: Thu 17 Oct 2024 10:08:13 +0000
ROA not before: Thu 17 Oct 2024 10:08:13 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 10753
IP address blocks: 113.203.209.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
115.167.1.0/24 maxlen: 24
115.167.24.0/22 maxlen: 22
115.167.52.0/22 maxlen: 24
115.167.100.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.104.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.72.0/22 maxlen: 24
175.110.84.0/22 maxlen: 24
175.110.96.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 04:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6156 (0x180c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 17 10:08:13 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6710e20d-11c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:34:a0:4f:ca:51:83:18:d5:f9:92:81:ad:
30:c7:5f:d1:fa:ef:18:8d:b2:07:f0:40:08:fe:06:
69:e9:ca:16:e7:a9:38:dd:79:44:cf:0a:2f:9b:e8:
7f:f4:e7:8f:be:fb:b4:76:46:f7:3b:56:57:67:59:
75:75:89:be:57:4d:13:04:c2:b6:3a:50:98:06:3a:
3d:12:08:a8:61:2a:3f:a7:5b:42:d8:c0:4e:31:3a:
9c:27:1f:75:8a:ce:b5:9d:e8:6e:a7:6d:32:42:7e:
22:03:cc:0f:24:d8:b0:2b:e6:6f:15:63:b1:e4:54:
b7:a0:1c:5a:c9:11:5b:99:3e:cc:37:e5:45:52:ed:
3d:ae:05:88:7e:03:1f:65:0d:4a:3f:fa:fb:2f:ef:
51:a2:54:c2:c1:7a:95:fa:1e:bc:b2:04:65:50:07:
83:cb:86:ed:56:bd:f9:3e:fa:9a:76:7c:9a:f3:a2:
7d:5f:92:41:ce:93:c8:8e:40:a6:14:93:3d:8f:b9:
08:f3:5d:f2:c3:a9:b2:16:f3:3a:13:4e:42:fb:39:
c8:25:0d:50:78:48:00:bc:6b:03:5f:ae:41:dd:f3:
61:2f:2a:af:c2:72:89:2e:20:00:19:24:8d:bd:02:
65:23:f9:47:02:52:05:33:48:4e:a4:36:e4:47:16:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:10:FA:47:B0:8F:A6:21:4C:BC:D0:6C:7C:4A:CB:42:4F:07:33:95
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B7F86D188C6F11EF88F4F46CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.209.0/24
113.203.241.0/24
113.203.246.0/24
115.167.1.0/24
115.167.24.0/22
115.167.52.0/22
115.167.100.0/24
115.167.102.0/24
115.167.104.0/22
115.167.112.0/22
175.110.64.0/22
175.110.72.0/22
175.110.84.0/22
175.110.96.0/24
180.178.151.0/24
180.178.161.0/24
180.178.188.0/24
180.178.190.0/24
223.29.225.0-223.29.228.255
Signature Algorithm: sha256WithRSAEncryption
a8:60:00:44:d0:fb:80:7b:ef:39:89:18:2a:58:96:d4:6e:a1:
cd:7e:55:95:f7:97:c6:37:66:3e:ec:32:45:92:89:06:1d:9b:
f3:39:98:8e:c4:30:e7:0a:e4:0a:b5:0d:82:cb:a8:4d:e0:a6:
34:89:03:7f:7e:6f:60:cb:22:a8:84:f2:d6:20:c2:f2:31:34:
ae:b0:a4:c5:7b:4f:29:89:29:7d:bf:0c:6e:b0:14:5d:6b:e4:
15:b8:b4:29:bd:fd:8f:b0:4d:65:26:0c:e1:61:21:8f:df:c3:
ca:8e:cf:d2:57:e5:18:a2:bf:82:7f:96:d4:ef:32:fd:11:71:
2c:8f:5a:8c:bc:4a:b8:d2:19:82:dd:52:97:43:ed:96:b0:35:
ca:97:73:de:4c:88:34:0f:7f:52:c0:7e:d6:4f:3c:1c:0f:20:
79:24:5a:ce:5a:89:80:a4:ae:3b:60:f2:de:fd:1e:95:1b:72:
ba:c8:4e:6f:c2:7f:8b:13:8d:ff:14:89:f2:77:08:dd:19:d1:
84:96:3a:a3:22:d8:a6:19:53:2f:ed:db:d4:93:fc:35:dc:99:
63:e5:f4:0a:0f:39:4c:b3:00:a7:bf:2b:6d:4e:2c:70:dd:36:
bd:45:1e:74:83:8a:16:43:f5:f6:d5:57:36:8d:40:a7:f6:da:
62:b2:6f:f6
-----BEGIN CERTIFICATE-----
MIIF6TCCBNGgAwIBAgICGAwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQxMDE3MTAwODEzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzEwZTIwZC0xMWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsq00oE/KUYMY1fmSga0wx1/R+u8YjbIH8EAI/gZp6coW56k43XlEzwovm+h/
9OePvvu0dkb3O1ZXZ1l1dYm+V00TBMK2OlCYBjo9EgioYSo/p1tC2MBOMTqcJx91
is61nehup20yQn4iA8wPJNiwK+ZvFWOx5FS3oBxayRFbmT7MN+VFUu09rgWIfgMf
ZQ1KP/r7L+9RolTCwXqV+h68sgRlUAeDy4btVr35Pvqadnya86J9X5JBzpPIjkCm
FJM9j7kI813yw6myFvM6E05C+znIJQ1QeEgAvGsDX65B3fNhLyqvwnKJLiAAGSSN
vQJlI/lHAlIFM0hOpDbkRxYeowIDAQABo4IDDTCCAwkwHQYDVR0OBBYEFOMQ+kew
j6YhTLzQbHxKy0JPBzOVMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQjdGODZEMTg4
QzZGMTFFRjg4RjRGNDZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZYGCCsGAQUFBwEHAQH/
BIGGMIGDMIGABAIAATB6AwQAccvRAwQAccvxAwQAccv2AwQAc6cBAwQCc6cYAwQC
c6c0AwQAc6dkAwQAc6dmAwQCc6doAwQCc6dwAwQCr25AAwQCr25IAwQCr25UAwQA
r25gAwQAtLKXAwQAtLKhAwQAtLK8AwQAtLK+MAwDBADfHeEDBADfHeQwDQYJKoZI
hvcNAQELBQADggEBAKhgAETQ+4B77zmJGCpYltRuoc1+VZX3l8Y3Zj7sMkWSiQYd
m/M5mI7EMOcK5Aq1DYLLqE3gpjSJA39+b2DLIqiE8tYgwvIxNK6wpMV7TymJKX2/
DG6wFF1r5BW4tCm9/Y+wTWUmDOFhIY/fw8qOz9JX5Riiv4J/ltTvMv0RcSyPWoy8
SrjSGYLdUpdD7ZawNcqXc95MiDQPf1LAftZPPBwPIHkkWs5aiYCkrjtg8t79HpUb
crrITm/Cf4sTjf8UifJ3CN0Z0YSWOqMi2KYZUy/t29ST/DXcmWPl9AoPOUyzAKe/
K21OLHDdNr1FHnSDihZD9fbVVzaNQKf22mKyb/Y=
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:02:43 2025 by rpki-client