Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DFB3D198AE4E11EFB98F113BC4F9AE02.roa
File: DFB3D198AE4E11EFB98F113BC4F9AE02.roa (raw, json)
Hash identifier: 0HtvG3i2KvWEQNhPyRv9OEr/T2qa77gl11+S+6L2YTY=
Subject key identifier: 23:C5:AA:31:6B:4E:81:40:91:45:AC:29:1E:2E:93:B4:FF:46:E0:00
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1E59
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DFB3D198AE4E11EFB98F113BC4F9AE02.roa
Signing time: Mon 02 Dec 2024 09:10:24 +0000
ROA not before: Mon 02 Dec 2024 09:10:24 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/24 maxlen: 24
43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.16.0/22 maxlen: 22
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
175.110.81.0/24 maxlen: 24
175.110.82.0/24 maxlen: 24
175.110.83.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.183.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Dec 2024 13:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7769 (0x1e59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 2 09:10:24 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=674d797f-cbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d7:b8:e7:a1:81:38:8b:b4:1e:6e:56:f6:c8:
21:77:de:45:97:de:a0:cf:88:b0:d7:c5:1f:f0:d0:
ea:86:5c:ef:5f:a5:79:54:89:a7:e6:f3:23:4e:71:
13:00:1e:85:fc:01:23:65:d6:19:03:8e:e6:50:ef:
17:c9:3b:80:52:f1:32:6c:ee:63:11:4c:0f:53:b7:
62:98:95:96:fc:38:3f:8a:70:d8:f7:ec:6e:d9:0d:
72:16:83:71:0e:15:a8:46:5b:f2:6f:d0:f1:b9:11:
3e:87:c5:6c:62:f9:61:11:f4:25:d4:e9:87:78:81:
93:67:76:13:9a:6b:b0:32:91:6e:5b:21:60:30:f4:
88:54:1e:56:d6:fe:fd:89:53:ca:65:e7:26:b4:da:
09:7f:0c:25:d1:82:cd:10:a4:67:57:ec:65:b9:83:
47:e6:7c:88:f9:90:39:74:eb:51:26:20:a4:89:2c:
c0:70:01:9e:f9:71:5c:ec:71:e3:df:18:2c:7b:10:
a4:be:3e:18:31:6f:1f:8f:d8:47:4f:2e:7a:5d:e6:
60:3a:ee:62:43:e3:d4:48:32:96:73:9d:f2:cd:1d:
ad:37:d8:6f:54:d7:27:f1:da:9c:9c:96:ae:b1:f7:
a8:df:5d:90:00:d5:01:6f:e5:59:a5:28:6c:38:e7:
fe:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C5:AA:31:6B:4E:81:40:91:45:AC:29:1E:2E:93:B4:FF:46:E0:00
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/DFB3D198AE4E11EFB98F113BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.11.63.0/24
113.203.222.0/24
113.203.231.0/24
113.203.242.0/24
113.203.253.0/24
113.203.255.0/24
115.167.16.0/22
115.167.29.0-115.167.31.255
115.167.48.0/24
115.167.64.0/24
115.167.66.0/24
115.167.73.0/24
115.167.78.0/24
115.167.124.0/24
175.110.81.0-175.110.83.255
175.110.111.0/24
180.178.142.0/24
180.178.144.0/24
180.178.146.0/24
180.178.148.0/24
180.178.150.0/24
180.178.160.0-180.178.162.255
180.178.165.0/24
180.178.167.0/24
180.178.176.0/22
180.178.183.0/24
180.178.187.0-180.178.188.255
180.178.191.0/24
202.92.26.0/24
223.29.229.0/24
223.29.235.0-223.29.236.255
Signature Algorithm: sha256WithRSAEncryption
30:b1:e2:c2:96:33:c8:00:40:7c:84:a8:dc:22:19:05:36:75:
2b:5c:38:ef:cf:f3:5b:f0:ef:58:12:7f:c8:cf:82:40:e4:d9:
0f:e8:43:f2:11:bb:07:f5:2b:06:e8:b7:9f:62:dc:bd:2c:66:
b6:0f:f5:32:17:2a:62:29:97:9d:fb:9e:62:5d:5c:b0:87:f8:
73:7f:a6:ae:6b:41:36:2b:8a:83:2c:5f:75:e6:27:19:3d:4a:
68:56:4a:dd:d3:98:ad:99:b5:07:fb:3b:27:e4:3d:52:46:95:
53:90:c0:75:a4:74:48:39:da:4c:f4:a7:18:eb:60:e1:d6:57:
1d:e4:00:1f:4d:f4:ab:6a:6d:51:b8:d2:18:d8:a3:d8:67:2f:
a6:d3:77:8c:de:ee:e0:61:17:92:5e:da:d1:e0:12:2d:4d:31:
fa:15:0c:a3:19:10:78:94:f1:39:3f:e2:70:09:b9:ee:06:9c:
eb:82:a8:f5:06:1b:70:3e:8e:31:76:04:40:62:a3:b6:17:7a:
ac:f9:e4:fa:0b:25:19:79:a7:3e:a3:ec:56:b0:e0:99:63:ad:
66:45:7e:31:b1:5b:42:fd:d8:3f:85:bc:3c:37:04:26:b1:8c:
ab:70:ce:d3:26:81:e4:cb:bb:b2:1c:8e:f3:e3:95:86:8e:cf:
c4:56:75:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:00:24 2025 by rpki-client