Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E5ABF5548FA811EFA295C47BC4F9AE02.roa
File: E5ABF5548FA811EFA295C47BC4F9AE02.roa (raw, json)
Hash identifier: 7V32ROxaiaLslDJGk4S1stm3GRDCVaFFGhBGziWw/Es=
Subject key identifier: BA:C4:5F:5F:DB:10:61:FD:AC:B8:2E:87:4C:2F:6A:49:A2:30:9E:67
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 18E8
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E5ABF5548FA811EFA295C47BC4F9AE02.roa
Signing time: Wed 23 Oct 2024 11:37:26 +0000
ROA not before: Wed 23 Oct 2024 11:37:26 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.96.0/22 maxlen: 22
115.167.101.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.116.0/24 maxlen: 24
115.167.120.0/24 maxlen: 24
115.167.121.0/24 maxlen: 24
175.110.80.0/22 maxlen: 22
180.178.148.0/24 maxlen: 24
180.178.152.0/21 maxlen: 21
180.178.160.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 11:08:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6376 (0x18e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 23 11:37:26 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6718dff6-b24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:d5:30:03:ab:de:7d:fd:e0:97:57:c4:46:
f7:92:5e:be:35:1c:68:f4:28:2a:fb:bc:29:2d:78:
d3:2e:dd:00:a7:33:04:77:9d:ee:4b:ee:b8:b7:a1:
c5:22:ad:e2:87:99:37:2a:7a:1a:fa:56:df:0c:1f:
08:b0:57:11:c3:da:24:fe:e9:e9:76:51:c6:09:96:
27:70:72:66:41:86:8c:26:46:0b:76:c1:7b:c0:27:
ef:44:50:b6:0a:e4:4e:e3:da:a0:fb:d6:be:b3:e5:
f6:37:13:92:20:8e:38:42:3a:be:f5:60:8c:71:6f:
50:eb:07:be:b0:c3:eb:e9:a2:cb:24:d9:e6:55:a7:
3c:48:30:de:cd:41:6a:ce:b9:ea:3d:7b:83:44:b5:
d7:89:e4:ba:e9:19:83:70:d2:db:aa:cb:7a:6b:8d:
00:9e:51:2d:7a:0d:73:0b:b0:33:e5:24:33:27:68:
8e:67:c8:cc:30:06:b8:fb:27:5e:0c:19:c2:06:5c:
e4:39:d3:9a:37:fe:0d:e5:18:e2:ef:60:59:34:03:
44:03:40:e2:1a:37:ee:be:13:ff:13:6e:27:8e:9c:
c7:57:c6:0f:8b:41:43:6f:54:7e:e3:95:2f:10:30:
97:79:36:44:c7:82:1e:72:92:f2:cf:b8:97:6f:c7:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C4:5F:5F:DB:10:61:FD:AC:B8:2E:87:4C:2F:6A:49:A2:30:9E:67
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E5ABF5548FA811EFA295C47BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.27.0/24
113.203.208.0/24
113.203.210.0/24
113.203.213.0/24
113.203.217.0/24
113.203.220.0/24
113.203.227.0/24
113.203.243.0/24
113.203.248.0/24
115.167.2.0/23
115.167.28.0/24
115.167.64.0/24
115.167.66.0/24
115.167.73.0/24
115.167.78.0/24
115.167.96.0/22
115.167.101.0/24
115.167.103.0/24
115.167.116.0/24
115.167.120.0/23
175.110.80.0/22
180.178.148.0/24
180.178.152.0-180.178.160.255
180.178.166.0/24
180.178.169.0/24
180.178.171.0/24
180.178.189.0/24
180.178.191.0/24
223.29.231.0/24
223.29.237.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:39:e0:b0:0d:34:16:f6:40:6f:d9:43:d7:9d:21:fb:d6:01:
46:98:2c:6a:25:a4:27:f6:dd:5f:2a:b0:13:75:b7:ce:42:13:
56:3f:62:a2:69:06:5d:22:9f:a0:60:66:92:cb:e3:b1:e1:5b:
30:e2:e4:51:1b:9f:11:9d:a2:fc:8e:dd:9c:73:c9:dd:b2:74:
0b:8d:e3:07:de:d2:98:5f:29:e8:73:b1:53:e0:75:86:90:ad:
ee:c8:21:ae:ba:e5:37:68:9f:1a:56:21:07:a7:d9:eb:12:81:
4f:1c:72:a7:c2:50:fa:f5:ae:d0:9e:f2:a0:31:fe:46:f9:54:
ff:86:29:c5:a8:a8:f6:a3:2c:ae:23:ef:27:6b:90:62:82:07:
e6:7c:ae:f1:9e:24:aa:93:b6:a6:ec:e8:2f:91:3e:f6:84:37:
56:45:ce:b5:0a:6b:db:74:b2:fa:b6:51:6c:da:d3:09:ab:14:
60:42:a9:23:91:c9:5c:a6:9a:81:31:5d:0a:47:b4:aa:2b:53:
f9:6c:69:f3:70:f9:a6:68:7e:3e:db:a6:4b:10:ed:c2:d4:99:
d8:51:a6:a9:15:46:9a:51:5c:f9:c4:35:16:ad:b2:48:fe:9c:
b4:15:1d:da:56:ae:fa:4a:bd:bf:a0:65:90:c0:ed:ed:2d:f3:
50:c4:a3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:46:01 2025 by rpki-client