Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CE7DC3E4B30211EFA1556871C4F9AE02.roa
File: CE7DC3E4B30211EFA1556871C4F9AE02.roa (raw, json)
Hash identifier: mRW2AoBW8VgOs2Y8OqkbQvqj0OGShpPVWQFsf8kCfp4=
Subject key identifier: 27:20:99:AA:F3:47:3C:54:20:7D:CE:CF:04:36:20:D4:3F:70:A3:22
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1E95
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CE7DC3E4B30211EFA1556871C4F9AE02.roa
Signing time: Thu 05 Dec 2024 12:16:51 +0000
ROA not before: Thu 05 Dec 2024 12:16:51 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.52.0/24 maxlen: 24
115.167.53.0/24 maxlen: 24
115.167.54.0/24 maxlen: 24
115.167.55.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.183.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Dec 2024 06:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7829 (0x1e95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 5 12:16:51 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=675199b2-e05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:42:45:00:1b:e8:eb:0a:51:81:a6:19:0f:
c2:7b:09:5a:ba:f6:e7:c3:fa:af:80:0b:6a:c8:be:
ff:1a:bc:eb:88:f1:2a:73:77:61:ad:77:02:ab:43:
19:13:f0:21:da:15:dc:83:3b:36:cb:ce:c6:50:69:
6b:1c:e4:fe:2f:17:2b:91:19:f9:c5:30:e8:0e:c4:
4e:5d:67:be:a2:7e:74:12:6e:20:e4:3a:4e:46:bb:
d0:55:11:90:8a:1f:f0:d5:b2:ba:6c:98:b7:93:25:
fe:c0:eb:f5:cd:66:bc:64:a9:89:c1:49:de:eb:2c:
15:f4:fa:df:3d:92:58:a0:cd:27:52:64:62:4e:2b:
84:54:ca:2c:c9:4d:cd:09:f0:55:20:51:41:07:db:
ac:1f:b9:d7:f8:ea:37:b3:8e:79:17:c8:b3:63:fc:
5b:34:77:68:4c:a7:b0:9b:6c:3a:e1:06:52:44:07:
7a:82:d9:97:61:0a:bd:fa:50:47:94:bf:96:07:7d:
9a:bd:9b:8f:ac:80:be:8d:13:1f:b9:58:36:1a:5e:
9d:d8:6e:e6:81:22:21:80:b7:f9:72:bb:d1:30:7f:
72:59:98:77:dc:5d:eb:89:14:64:e9:7a:d9:a2:c6:
a6:ca:fd:52:89:43:4e:64:00:35:5e:e9:34:fe:63:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:20:99:AA:F3:47:3C:54:20:7D:CE:CF:04:36:20:D4:3F:70:A3:22
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/CE7DC3E4B30211EFA1556871C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.211.0/24
113.203.213.0/24
113.203.215.0/24
113.203.219.0/24
113.203.224.0/23
113.203.227.0/24
113.203.241.0/24
113.203.243.0/24
113.203.248.0/24
113.203.253.0/24
113.203.255.0/24
115.167.3.0/24
115.167.5.0/24
115.167.9.0/24
115.167.12.0/22
115.167.28.0/24
115.167.50.0/24
115.167.52.0/22
115.167.101.0-115.167.103.255
115.167.125.0/24
175.110.80.0/22
175.110.89.0/24
175.110.91.0/24
175.110.97.0/24
175.110.104.0/24
175.110.106.0/24
180.178.147.0/24
180.178.149.0/24
180.178.166.0/24
180.178.169.0-180.178.171.255
180.178.176.0/22
180.178.183.0/24
180.178.187.0/24
180.178.189.0/24
223.29.225.0/24
223.29.228.0/24
223.29.230.0/23
223.29.235.0/24
223.29.237.0-223.29.239.255
Signature Algorithm: sha256WithRSAEncryption
53:37:5b:db:06:2d:65:a5:76:bf:cf:ca:85:eb:ab:56:e0:b8:
0d:b9:18:8d:86:e4:d5:aa:ce:ec:8f:c1:08:34:4b:e8:ae:72:
93:e3:c5:e9:7e:ed:fc:1c:05:81:fd:e7:05:a0:fd:c2:42:57:
dc:42:6a:ae:58:27:e8:af:91:69:53:62:53:87:b2:36:37:bb:
1b:c7:52:4e:86:4e:aa:36:7f:1c:f0:0c:fc:12:fe:0f:ce:ee:
8f:05:54:e6:39:80:55:92:26:e1:49:db:5a:f1:96:64:75:8b:
11:2d:db:5d:8d:17:f1:da:19:f8:3d:7d:2f:c5:64:a2:41:c1:
77:53:87:93:b1:2a:e4:ae:f8:19:f5:f4:00:4e:39:66:e4:cb:
0a:f6:ff:72:2d:18:89:55:0b:3b:e3:12:f9:a9:26:a1:b6:58:
88:3e:65:39:16:99:56:b7:64:95:f0:a0:7b:4e:79:46:9a:8c:
f1:8b:60:b7:43:57:84:22:7b:e0:2f:80:54:11:11:f5:35:83:
14:a3:d8:55:b9:2a:e6:a1:7e:63:7c:c6:ed:99:eb:5b:c4:bc:
b4:f9:51:4c:c0:9c:68:61:cf:74:35:21:87:7d:ea:f1:7c:be:
23:4f:ff:53:06:ae:5d:2c:b8:ed:0a:8b:1e:cd:cb:00:fb:b3:
4e:89:03:f3
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgICHpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQxMjA1MTIxNjUxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzUxOTliMi1lMDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyNBCRQAb6OsKUYGmGQ/Cewlauvbnw/qvgAtqyL7/GrzriPEqc3dhrXcCq0MZ
E/Ah2hXcgzs2y87GUGlrHOT+LxcrkRn5xTDoDsROXWe+on50Em4g5DpORrvQVRGQ
ih/w1bK6bJi3kyX+wOv1zWa8ZKmJwUne6ywV9PrfPZJYoM0nUmRiTiuEVMosyU3N
CfBVIFFBB9usH7nX+Oo3s455F8izY/xbNHdoTKewm2w64QZSRAd6gtmXYQq9+lBH
lL+WB32avZuPrIC+jRMfuVg2Gl6d2G7mgSIhgLf5crvRMH9yWZh33F3riRRk6XrZ
osamyv1SiUNOZAA1Xuk0/mMygwIDAQABo4IDoTCCA50wHQYDVR0OBBYEFCcgmarz
RzxUIH3OzwQ2INQ/cKMiMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQ0U3REMzRTRC
MzAyMTFFRkExNTU2ODcxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggEpBggrBgEFBQcBBwEB
/wSCARgwggEUMIIBEAQCAAEwggEIAwQAZ5cbAwQAccvTAwQAccvVAwQAccvXAwQA
ccvbAwQBccvgAwQAccvjAwQAccvxAwQAccvzAwQAccv4AwQAccv9AwQAccv/AwQA
c6cDAwQAc6cFAwQAc6cJAwQCc6cMAwQAc6ccAwQAc6cyAwQCc6c0MAwDBABzp2UD
BANzp2ADBABzp30DBAKvblADBACvblkDBACvblsDBACvbmEDBACvbmgDBACvbmoD
BAC0spMDBAC0spUDBAC0sqYwDAMEALSyqQMEArSyqAMEArSysAMEALSytwMEALSy
uwMEALSyvQMEAN8d4QMEAN8d5AMEAd8d5gMEAN8d6zAMAwQA3x3tAwQE3x3gMA0G
CSqGSIb3DQEBCwUAA4IBAQBTN1vbBi1lpXa/z8qF66tW4LgNuRiNhuTVqs7sj8EI
NEvornKT48Xpfu38HAWB/ecFoP3CQlfcQmquWCfor5FpU2JTh7I2N7sbx1JOhk6q
Nn8c8Az8Ev4Pzu6PBVTmOYBVkibhSdta8ZZkdYsRLdtdjRfx2hn4PX0vxWSiQcF3
U4eTsSrkrvgZ9fQATjlm5MsK9v9yLRiJVQs74xL5qSahtliIPmU5FplWt2SV8KB7
TnlGmozxi2C3Q1eEInvgL4BUERH1NYMUo9hVuSrmoX5jfMbtmetbxLy0+VFMwJxo
Yc90NSGHferxfL4jT/9TBq5dLLjtCosezcsA+7NOiQPz
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:33:58 2025 by rpki-client