Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CE32DDC8392E11EF8EB5CF76C4F9AE02.roa
File: CE32DDC8392E11EF8EB5CF76C4F9AE02.roa (raw, json)
Hash identifier: xVWIcjqZ9qjQ3vTRG/x/OFkYfpELxLA7owEBqTWdFcY=
Subject key identifier: 77:BD:08:D1:52:E8:58:76:11:C0:5E:9F:01:B3:7F:EE:10:DF:02:AB
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1446
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CE32DDC8392E11EF8EB5CF76C4F9AE02.roa
Signing time: Thu 04 Jul 2024 05:43:25 +0000
ROA not before: Thu 04 Jul 2024 05:43:25 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 6079
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
113.203.252.0/22 maxlen: 22
175.110.88.0/22 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/24 maxlen: 24
180.178.177.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
180.178.180.0/22 maxlen: 22
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Jul 2024 10:22:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5190 (0x1446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 4 05:43:25 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6686367d-9a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5a:b9:a2:82:cf:10:a4:96:42:35:a7:2d:0b:
a6:a4:31:1b:1f:23:0d:51:9c:b4:0b:1c:a7:6c:3d:
03:a2:03:90:e1:3e:f8:57:d4:a8:28:37:f7:40:fa:
ad:00:23:5d:9f:54:c6:40:0b:ae:b2:8d:44:a1:ec:
b6:12:f4:f4:7a:bf:95:ca:0f:fa:6c:45:c0:a5:ed:
af:d8:ab:fb:a1:37:d1:bf:2d:ac:76:9d:11:82:95:
6f:b7:04:70:4a:49:9e:28:34:0f:3d:63:21:36:2a:
1c:96:6a:54:1e:cb:e0:b3:4c:75:58:86:0f:21:11:
45:de:4d:b3:16:57:e1:4d:10:da:74:49:01:ef:5c:
ce:3c:02:ec:23:6b:22:c0:3c:c9:55:11:fd:f3:f3:
ff:a7:b9:cf:6e:53:71:34:08:36:66:f6:0a:a1:c8:
38:27:44:2e:c2:67:f0:70:05:51:8e:be:a3:fb:b2:
b7:53:f9:a5:17:51:cf:58:00:10:38:95:03:8d:7e:
61:e6:a8:6c:3a:83:99:15:36:73:7b:a1:b6:2c:55:
ab:3b:8a:4d:a5:85:96:b5:25:99:9f:10:d3:2a:63:
a3:1c:4b:17:c3:3c:ad:fb:b3:ca:4c:e9:8e:c6:dc:
3b:1e:99:bb:19:a1:d4:e3:42:b8:81:25:80:c1:4e:
0f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BD:08:D1:52:E8:58:76:11:C0:5E:9F:01:B3:7F:EE:10:DF:02:AB
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CE32DDC8392E11EF8EB5CF76C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/24
113.203.210.0/24
113.203.212.0/23
113.203.216.0-113.203.218.255
113.203.220.0/24
113.203.223.0-113.203.226.255
113.203.228.0/22
113.203.233.0/24
113.203.242.0/24
113.203.244.0/23
113.203.248.0-113.203.250.255
113.203.252.0/22
175.110.88.0/22
175.110.97.0/24
175.110.104.0/23
180.178.165.0/24
180.178.168.0/22
180.178.176.0/21
180.178.185.0-180.178.187.255
180.178.189.0/24
180.178.191.0/24
223.29.225.0/24
223.29.231.0/24
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
7c:f7:66:3a:1a:93:24:08:84:33:b3:27:c4:5a:62:4d:26:08:
8c:cc:61:08:f7:74:dc:5d:c2:d8:d3:22:73:dd:ec:a6:46:01:
71:86:c0:ed:ab:58:75:82:1b:d6:e3:ba:78:69:de:d9:b6:93:
c9:0a:d1:05:11:95:ab:1d:a3:f9:71:cd:27:1a:bf:4e:58:1b:
17:51:1b:52:0b:79:a3:f3:1b:01:30:fe:de:61:fc:af:90:29:
78:1e:44:c0:11:fe:da:cd:a8:b6:92:41:ae:45:00:66:33:45:
c1:43:1d:43:21:3e:5b:82:2f:b4:0b:1a:fd:f1:38:da:49:9f:
4e:35:59:26:a3:2f:b7:47:f9:45:75:ee:9d:33:f6:6f:c8:a5:
3e:14:c7:a9:7c:8e:2a:b2:92:67:d1:61:c2:e4:80:b1:c2:69:
07:9d:6f:ad:4b:61:01:ca:73:7f:1d:1d:c9:7e:03:61:59:90:
d8:ba:c2:d7:9f:64:b2:8f:70:21:38:dd:63:bc:28:2e:0b:7f:
a0:e8:1c:17:13:b8:98:96:86:78:1b:8e:33:86:59:94:a3:eb:
97:b2:8f:45:b5:49:1e:58:73:2c:ca:95:d0:ca:dd:88:29:f7:
57:86:e1:1a:58:95:26:ff:8a:19:e8:9f:c2:23:af:2b:a2:79:
47:66:a2:1c
-----BEGIN CERTIFICATE-----
MIIGKDCCBRCgAwIBAgICFEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQwNzA0MDU0MzI1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Njg2MzY3ZC05YTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz1q5ooLPEKSWQjWnLQumpDEbHyMNUZy0CxynbD0DogOQ4T74V9SoKDf3QPqt
ACNdn1TGQAuuso1Eoey2EvT0er+Vyg/6bEXApe2v2Kv7oTfRvy2sdp0RgpVvtwRw
SkmeKDQPPWMhNioclmpUHsvgs0x1WIYPIRFF3k2zFlfhTRDadEkB71zOPALsI2si
wDzJVRH98/P/p7nPblNxNAg2ZvYKocg4J0QuwmfwcAVRjr6j+7K3U/mlF1HPWAAQ
OJUDjX5h5qhsOoOZFTZze6G2LFWrO4pNpYWWtSWZnxDTKmOjHEsXwzyt+7PKTOmO
xtw7Hpm7GaHU40K4gSWAwU4PVQIDAQABo4IDTDCCA0gwHQYDVR0OBBYEFHe9CNFS
6Fh2EcBenwGzf+4Q3wKrMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQ0UzMkREQzgz
OTJFMTFFRjhFQjVDRjc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgdUGCCsGAQUFBwEHAQH/
BIHFMIHCMIG/BAIAATCBuAMEAHHL0AMEAHHL0gMEAXHL1DAMAwQDccvYAwQAccva
AwQAccvcMAwDBABxy98DBABxy+IDBAJxy+QDBABxy+kDBABxy/IDBAFxy/QwDAME
A3HL+AMEAHHL+gMEAnHL/AMEAq9uWAMEAK9uYQMEAa9uaAMEALSypQMEArSyqAME
A7SysDAMAwQAtLK5AwQCtLK4AwQAtLK9AwQAtLK/AwQA3x3hAwQA3x3nMAwDBADf
HesDBADfHe4wDQYJKoZIhvcNAQELBQADggEBAHz3ZjoakyQIhDOzJ8RaYk0mCIzM
YQj3dNxdwtjTInPd7KZGAXGGwO2rWHWCG9bjunhp3tm2k8kK0QURlasdo/lxzSca
v05YGxdRG1ILeaPzGwEw/t5h/K+QKXgeRMAR/trNqLaSQa5FAGYzRcFDHUMhPluC
L7QLGv3xONpJn041WSajL7dH+UV17p0z9m/IpT4Ux6l8jiqykmfRYcLkgLHCaQed
b61LYQHKc38dHcl+A2FZkNi6wtefZLKPcCE43WO8KC4Lf6DoHBcTuJiWhngbjjOG
WZSj65eyj0W1SR5YcyzKldDK3Ygp91eG4RpYlSb/ihnon8IjryuieUdmohw=
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:48:23 2025 by rpki-client