Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D174E06C45B811EFBBDC096EC4F9AE02.roa
File: D174E06C45B811EFBBDC096EC4F9AE02.roa (raw, json)
Hash identifier: RbJ9Y1bG8csvJHOsJH2R+pp4kZQfT6M4CthUb+j3tM0=
Subject key identifier: 78:DD:A5:44:D3:35:B0:C5:05:27:02:10:0F:30:8D:D0:8D:82:7B:1E
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 14A4
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D174E06C45B811EFBBDC096EC4F9AE02.roa
Signing time: Thu 01 Aug 2024 06:21:47 +0000
ROA not before: Thu 01 Aug 2024 06:21:47 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
115.167.0.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.4.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.108.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
115.167.126.0/24 maxlen: 24
115.167.127.0/24 maxlen: 24
175.110.68.0/22 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.152.0/21 maxlen: 21
180.178.160.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.180.0/22 maxlen: 22
180.178.184.0/22 maxlen: 22
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 06:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5284 (0x14a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 1 06:21:47 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66ab297a-d9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3b:ed:25:39:15:56:94:0c:2d:67:88:fd:61:
cd:1f:78:a9:23:75:51:e9:b6:3f:54:c2:79:e4:3b:
e3:dd:99:50:90:78:bf:b8:b0:c6:f6:ec:13:c3:89:
94:44:6d:31:77:6a:77:47:55:02:08:f5:dd:4b:23:
3c:c0:49:1a:96:52:af:68:a4:6e:e2:db:62:10:b4:
5c:d8:a6:19:ad:e4:b6:5b:02:f2:13:32:73:ac:83:
96:6b:eb:be:3b:40:19:7c:aa:a8:07:d6:7b:8d:eb:
25:96:e6:64:6a:cd:fe:e3:e1:46:16:87:14:8d:19:
f4:9a:af:77:86:8e:03:4a:e1:fb:e4:2d:46:11:3f:
76:63:a7:57:fc:20:d0:49:3b:84:37:77:a8:34:bb:
0b:53:e0:5f:13:c7:03:fe:88:61:07:b3:cc:e1:85:
fe:cb:07:7e:d9:2a:f7:e0:27:b1:93:55:79:be:ec:
51:e7:55:9f:91:b8:ef:08:9c:d0:78:f5:bf:11:43:
70:68:f6:e1:f0:1c:8d:a9:8a:3f:e2:cc:36:14:26:
1a:55:53:c0:d1:d1:97:5d:23:0d:fe:74:c5:be:40:
da:3d:c2:04:60:af:15:58:00:b1:59:da:8a:38:1e:
8b:d8:8d:f8:f1:eb:6a:8b:4a:db:52:20:46:b0:c2:
3d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DD:A5:44:D3:35:B0:C5:05:27:02:10:0F:30:8D:D0:8D:82:7B:1E
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D174E06C45B811EFBBDC096EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.213.0/24
115.167.0.0/24
115.167.2.0-115.167.4.255
115.167.12.0-115.167.23.255
115.167.56.0/22
115.167.73.0/24
115.167.78.0/24
115.167.108.0/22
115.167.116.0-115.167.123.255
115.167.126.0/23
175.110.68.0/22
175.110.80.0/22
175.110.106.0/23
175.110.109.0-175.110.111.255
180.178.144.0/24
180.178.146.0/24
180.178.148.0-180.178.150.255
180.178.152.0-180.178.160.255
180.178.163.0/24
180.178.166.0/23
180.178.180.0-180.178.187.255
202.92.18.0/24
202.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
58:13:95:ce:ee:ed:07:c5:46:a8:3f:75:19:ec:c5:d9:76:a5:
df:c7:83:36:50:9a:e5:9d:db:31:44:a3:e9:57:b8:32:79:2d:
2b:ce:f7:e6:6c:35:df:bc:ed:a8:1f:99:73:54:f6:b1:f7:6e:
04:fe:ed:80:63:1d:83:e1:f4:f0:3c:ac:8d:8d:d9:30:57:76:
0f:64:17:63:8d:4b:7a:5e:df:9a:15:7a:ab:12:8d:e7:52:cd:
4b:02:fa:7f:9d:23:35:df:82:d6:aa:eb:56:fb:34:65:0f:06:
c9:9e:ee:21:b2:b8:70:c9:44:b2:9e:35:dc:68:5d:5b:7c:f0:
cc:7f:1a:41:ad:37:a8:74:48:b4:7c:86:9d:ea:bc:98:96:1d:
d5:87:0c:2d:ad:47:bb:f4:13:c7:c9:fa:84:79:39:83:74:b4:
4b:e1:a2:18:4c:64:2d:8c:79:4e:a1:8e:c0:5d:b8:2f:f8:f5:
64:ff:a0:ec:50:72:b6:22:16:af:9d:b0:09:e9:f3:15:04:4e:
f2:ee:d4:1a:e2:01:ba:d5:a0:19:c3:90:c7:0a:55:d8:4b:9c:
f2:13:4f:c8:69:da:e7:b6:56:04:9d:66:ed:c7:c8:f3:b0:68:
3f:84:98:42:2c:65:90:94:b2:df:1f:6a:25:b4:0d:37:43:1b:
c0:3c:a7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:50:48 2025 by rpki-client