Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DE40E818706011EFB08FB164C4F9AE02.roa
File: DE40E818706011EFB08FB164C4F9AE02.roa (raw, json)
Hash identifier: pth0nO+DWuthE9xcdgpqno+hiAq0QRmItOXRi+02BeA=
Subject key identifier: 7C:BB:89:68:82:37:3D:9F:ED:3A:84:F6:E9:21:3C:59:67:0C:94:6A
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 15CF
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DE40E818706011EFB08FB164C4F9AE02.roa
Signing time: Wed 11 Sep 2024 17:11:22 +0000
ROA not before: Wed 11 Sep 2024 17:11:22 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.88.0/22 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 05:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5583 (0x15cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 11 17:11:22 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66e1cf3a-ad2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:a8:d6:85:ff:af:e0:5b:17:19:7b:2d:cf:
fa:0f:e3:1e:bd:87:0f:48:a2:5d:fc:d2:2f:76:4b:
31:db:7a:6b:c3:b9:b4:b0:5f:ef:23:06:6d:f2:0e:
2a:d9:9b:8c:c6:38:a3:6a:f2:54:c3:65:9d:12:8c:
96:40:ac:92:f2:05:be:03:1f:34:5e:e6:c5:db:a5:
5d:40:65:6a:8e:3b:b3:b2:5d:a9:f3:e1:3b:3a:f7:
f5:b6:61:05:06:2d:93:03:d0:96:df:55:8c:ec:51:
54:b3:b7:92:7d:8b:8d:45:51:f7:5f:42:cc:a3:25:
2f:0e:51:e9:98:f3:85:9c:89:28:06:fb:8b:1c:52:
e5:2d:56:56:fc:7b:d2:a8:93:4c:46:59:a4:d1:2b:
16:72:36:da:2d:14:9a:1a:aa:b3:4d:33:55:b1:8d:
a6:d4:b0:2e:51:d7:29:e3:3e:3c:d9:30:38:4a:ca:
97:87:d6:1a:8f:32:4f:ef:d8:8a:88:38:63:15:c7:
24:2b:a4:0f:29:60:66:0d:48:78:75:74:3b:c0:a7:
f6:76:82:89:d8:07:a5:e9:e9:5b:85:29:0a:73:57:
3f:1f:54:5b:13:5c:3a:c2:66:aa:9e:4b:d2:80:c9:
25:53:4d:35:72:62:39:34:2f:ec:c1:6a:ee:c4:cc:
63:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BB:89:68:82:37:3D:9F:ED:3A:84:F6:E9:21:3C:59:67:0C:94:6A
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DE40E818706011EFB08FB164C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
103.151.27.0/24
113.203.208.0/24
113.203.210.0/24
113.203.212.0/23
113.203.215.0-113.203.220.255
113.203.222.0/24
113.203.227.0/24
113.203.233.0/24
113.203.242.0-113.203.245.255
113.203.252.0/22
115.167.2.0/23
115.167.12.0-115.167.23.255
115.167.50.0/24
115.167.56.0/22
115.167.73.0/24
115.167.78.0/24
115.167.116.0-115.167.123.255
115.167.125.0/24
175.110.88.0/22
180.178.142.0/24
180.178.148.0-180.178.150.255
180.178.160.0/24
180.178.163.0/24
180.178.169.0-180.178.171.255
180.178.180.0-180.178.187.255
180.178.189.0/24
180.178.191.0/24
202.92.18.0/24
202.92.20.0/24
202.92.26.0/24
223.29.231.0/24
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:07:e4:41:51:e8:4d:3f:85:47:ab:6a:12:cd:ac:81:5b:4d:
9a:c2:b9:3b:3f:3b:51:8c:3b:ee:30:81:6b:04:32:ab:9c:69:
9e:8f:3b:a6:a1:3a:20:af:6b:e6:e8:2d:8f:ea:e5:be:64:b1:
64:68:f5:f8:ca:7e:6f:01:53:2b:95:f2:67:4c:7d:72:40:d3:
25:19:ee:2b:68:d7:d8:5d:e6:5b:d9:1d:f8:77:79:32:5a:ac:
f9:01:81:46:82:06:b5:46:bb:c7:0a:49:14:fe:72:91:05:96:
a3:b3:3e:a7:ce:b7:9d:eb:ba:98:f2:0d:ef:99:4f:87:76:63:
e3:2f:cf:a0:03:33:75:52:a8:7d:07:9e:16:fb:f9:81:94:57:
8e:fd:64:33:70:2f:ce:db:bc:29:f4:9c:0c:52:3d:ba:df:be:
d1:e1:e9:df:0a:96:96:fc:6e:54:68:d8:d8:c2:c4:c8:0e:63:
dc:c4:c8:10:0c:c2:f1:c6:01:3e:4f:29:4a:6f:18:a8:85:18:
f6:22:9a:cb:b5:e0:1c:74:5f:f6:a6:e6:c8:18:ef:f1:a8:f1:
42:41:b3:aa:3b:90:6e:57:2c:be:45:65:52:6b:e1:17:32:4d:
3a:9b:41:27:64:d8:7d:ec:73:22:06:df:01:ea:48:97:0c:6a:
97:64:d8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:29:39 2025 by rpki-client