Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BFC99F309DBD11EFAB4B8C81C4F9AE02.roa
File: BFC99F309DBD11EFAB4B8C81C4F9AE02.roa (raw, json)
Hash identifier: mUy7Olnfdw/v304abbEMcNwMNHZjyAaUmx2EZ9dxE5c=
Subject key identifier: BA:6E:9F:80:14:33:72:0A:EB:E9:82:36:9F:BD:86:C4:2D:12:82:3F
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1C11
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BFC99F309DBD11EFAB4B8C81C4F9AE02.roa
Signing time: Mon 11 Nov 2024 06:27:35 +0000
ROA not before: Mon 11 Nov 2024 06:27:35 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/22 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.16.0/22 maxlen: 22
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.65.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.67.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.64.0/22 maxlen: 22
175.110.89.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.152.0/21 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 10:37:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7185 (0x1c11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 11 06:27:35 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6731a3d6-eeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:26:84:1c:d4:e3:d1:9b:b5:54:8d:10:07:c9:
18:c8:ab:9b:2f:73:cd:74:b8:c6:39:1f:5b:4f:02:
00:3f:42:3d:a5:78:b3:2e:56:43:91:38:b1:c9:06:
87:c8:e6:85:bd:40:e3:44:76:9f:4d:4a:4e:46:12:
44:37:5f:88:31:34:0c:0e:5b:c7:5d:00:20:ea:60:
1e:f0:bb:d5:0f:b4:86:54:aa:2f:1c:65:5d:ca:0e:
3f:87:6a:d1:ef:11:61:d7:fa:ad:24:8f:b8:fc:ad:
9a:12:25:dd:9c:7d:53:7b:5b:78:8c:55:b2:e5:17:
0d:2f:0c:79:66:f6:88:3f:be:8b:22:b6:af:38:5f:
af:b1:df:55:63:9b:3d:82:41:3b:63:64:84:6a:ce:
ac:3b:43:d6:15:4e:fc:65:45:6f:c5:9b:5d:a9:26:
0a:90:a7:76:45:c0:05:1c:d5:50:db:f8:38:79:36:
5a:ce:6c:82:94:21:5a:71:88:63:4e:7f:78:d8:5e:
c8:3e:d8:fc:2f:2d:b1:09:42:3d:13:89:54:ab:74:
6a:de:a3:6a:97:d0:05:c6:04:2a:ab:00:6e:82:55:
7c:b9:86:8f:eb:19:c2:68:97:3f:01:ba:4b:36:54:
38:bf:fe:ba:5d:75:88:23:64:7e:48:c8:a2:2e:db:
b6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:6E:9F:80:14:33:72:0A:EB:E9:82:36:9F:BD:86:C4:2D:12:82:3F
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BFC99F309DBD11EFAB4B8C81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.11.63.0/24
113.203.208.0/24
113.203.212.0/24
113.203.231.0/24
113.203.233.0/24
113.203.241.0-113.203.242.255
113.203.245.0-113.203.246.255
115.167.6.0/24
115.167.16.0/22
115.167.29.0-115.167.31.255
115.167.48.0/24
115.167.64.0/22
115.167.73.0/24
115.167.102.0/24
115.167.124.0/23
175.110.64.0/22
175.110.89.0/24
175.110.91.0/24
180.178.142.0/24
180.178.146.0/24
180.178.151.0-180.178.159.255
180.178.161.0/24
180.178.188.0/24
202.92.26.0/24
223.29.225.0/24
223.29.227.0/24
223.29.229.0/24
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f1:d4:69:97:c7:95:29:89:00:01:74:7d:ad:a7:8d:cc:af:
53:cd:6b:56:e2:bb:0d:8d:64:a5:27:f6:2c:93:a1:eb:17:cc:
6d:61:4a:e3:cc:77:fc:7b:3a:e0:60:b4:10:7e:ea:e4:e3:ad:
0d:79:8e:29:05:d8:34:62:2e:19:9d:22:d3:ac:73:37:fc:79:
f7:e8:74:4f:43:cc:d8:1d:27:e2:6e:20:3d:11:e3:b4:0d:1f:
6e:af:ed:61:08:10:00:35:bb:9a:ad:ba:19:db:a3:44:61:5f:
8c:da:5f:18:78:80:da:94:89:d3:d5:e8:13:c7:82:e5:08:db:
39:ef:17:96:2d:ad:9f:4c:a7:08:57:90:4d:2a:ae:ce:1d:e0:
c8:da:f3:f0:5f:aa:c0:48:c0:87:07:c7:8a:5b:0d:3e:e3:99:
e9:36:72:25:31:a9:47:58:a9:9f:36:7d:73:59:06:ea:7a:da:
e9:d3:da:8f:7e:51:33:9c:70:22:52:98:39:7d:c1:42:97:62:
c3:7c:d1:39:c1:47:23:ed:fe:62:e2:85:80:8f:2d:ce:c4:7e:
3f:9c:71:7d:a7:89:49:f1:eb:f5:12:76:ee:29:d8:53:a4:20:
5a:c9:00:44:a1:15:ca:1e:39:96:f0:ab:42:62:b3:13:fd:38:
8e:46:6c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:43:42 2025 by rpki-client