Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C1189D9C8FA711EFBC394B5AC4F9AE02.roa
File: C1189D9C8FA711EFBC394B5AC4F9AE02.roa (raw, json)
Hash identifier: gZr7RAX3Ff/gS5bIfzScKJcg7Fko9fhuDFCzBxGR8qU=
Subject key identifier: BC:0D:66:59:2F:B7:AC:84:DE:DF:BC:D5:86:C5:F7:88:1B:73:64:FE
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1849
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C1189D9C8FA711EFBC394B5AC4F9AE02.roa
Signing time: Mon 21 Oct 2024 12:35:30 +0000
ROA not before: Mon 21 Oct 2024 12:35:30 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/22 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.28.0/22 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.96.0/22 maxlen: 24
115.167.116.0/24 maxlen: 24
115.167.120.0/24 maxlen: 24
115.167.121.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.152.0/21 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.176.0/22 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 08:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6217 (0x1849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 21 12:35:30 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67164a92-f35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:5b:11:c4:15:e7:db:3b:61:f8:7d:53:6d:
7d:7d:8c:99:45:80:4b:9b:b1:42:bb:09:74:da:9c:
da:27:46:32:30:2c:18:06:f0:5d:26:f3:ce:12:2c:
01:45:25:90:62:bf:7d:10:ba:0b:d8:9e:6f:ef:1c:
46:3f:67:23:09:89:37:00:98:14:2c:de:c4:e2:fe:
40:08:39:bc:6d:73:ae:70:00:b8:04:fc:e2:1f:56:
cc:7a:32:5a:cc:99:12:16:e2:99:81:e9:46:f9:0c:
65:42:79:cf:45:34:33:34:d1:c4:cc:b9:ab:77:a1:
1c:77:62:b5:19:66:7c:c4:65:da:32:3f:68:ba:aa:
3d:1b:e3:d0:c5:bc:ce:26:2c:70:7f:bc:c5:49:b8:
6c:a3:6a:04:c7:37:c0:c2:a7:ea:26:8a:de:79:15:
d8:72:6b:2d:73:6c:59:e4:1d:5c:bb:72:ee:41:46:
f1:90:f7:99:e6:2b:e4:b1:9d:7c:c8:53:23:ab:fd:
4b:e8:b9:86:b8:75:37:68:53:28:9d:a1:1b:74:3c:
8c:82:d1:22:07:17:5f:ed:f8:15:27:cb:28:7d:66:
6f:03:31:2a:60:b9:77:20:ba:79:5e:53:63:cc:5f:
40:11:58:3c:5e:d1:67:fe:16:b8:4f:c1:2b:52:9b:
82:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0D:66:59:2F:B7:AC:84:DE:DF:BC:D5:86:C5:F7:88:1B:73:64:FE
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C1189D9C8FA711EFBC394B5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.11.63.0/24
113.203.210.0/24
113.203.217.0/24
113.203.220.0/24
113.203.222.0/24
113.203.224.0/23
113.203.227.0/24
113.203.243.0/24
113.203.252.0/22
115.167.2.0/24
115.167.5.0-115.167.6.255
115.167.9.0/24
115.167.28.0/22
115.167.48.0/24
115.167.64.0/24
115.167.77.0-115.167.78.255
115.167.96.0/22
115.167.116.0/24
115.167.120.0/23
115.167.125.0/24
180.178.142.0/24
180.178.146.0/24
180.178.148.0-180.178.150.255
180.178.152.0-180.178.160.255
180.178.163.0/24
180.178.168.0/24
180.178.170.0/24
180.178.176.0-180.178.187.255
202.92.26.0/24
223.29.231.0/24
223.29.235.0/24
223.29.237.0-223.29.239.255
Signature Algorithm: sha256WithRSAEncryption
8d:d3:97:51:72:ea:a3:3e:85:03:d7:a3:94:52:96:b8:c9:3c:
97:21:dd:2f:8c:93:2d:05:de:ac:05:42:74:ce:3c:30:bc:98:
5b:ba:6b:53:f8:79:ed:39:16:12:28:8c:29:b3:39:bf:cf:e0:
ac:a6:6d:e3:8f:16:f8:e6:ab:68:f8:75:27:21:aa:15:e2:f0:
97:6a:9b:a7:27:c0:38:99:ee:a4:26:70:f1:94:6e:3c:a9:63:
59:fd:40:02:f3:13:19:71:b7:89:5e:24:86:74:63:59:cd:49:
c0:a0:04:fe:c5:7a:de:c1:ab:0b:09:d6:d6:68:aa:cc:94:22:
a7:ae:91:00:00:c0:ff:e9:76:90:ac:9a:54:71:0c:b8:28:fc:
af:a4:76:2a:ca:02:ee:67:f3:8d:d2:98:70:f1:57:77:f9:5c:
da:f7:cf:10:c2:0f:00:7e:d8:8a:d4:ae:70:be:11:0b:49:1d:
a3:09:43:b2:e8:e3:b1:1e:38:fe:2b:d0:5b:ac:cf:ba:f7:c4:
4f:23:e5:b1:41:1d:72:07:2c:92:e0:eb:76:db:65:07:31:64:
22:76:55:ab:31:7b:01:0d:72:d5:93:e7:f7:c9:18:26:61:c6:
a1:98:b0:1a:13:ab:13:ef:a9:6a:6a:e4:4a:5b:30:8d:1e:ad:
23:90:08:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:31:36 2025 by rpki-client