Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E7B746B6B15211EF8304BB78C4F9AE02.roa
File: E7B746B6B15211EF8304BB78C4F9AE02.roa (raw, json)
Hash identifier: LtpPUHUjkJtBWzmIlH/A3CAUMaZI95EqRFqoXtM2Sn0=
Subject key identifier: CF:2C:3D:32:7B:87:EA:66:73:B8:67:C5:5F:1B:29:70:CA:FB:45:06
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1E8D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E7B746B6B15211EF8304BB78C4F9AE02.roa
Signing time: Thu 05 Dec 2024 09:36:52 +0000
ROA not before: Thu 05 Dec 2024 09:36:52 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
115.167.16.0/22 maxlen: 22
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
175.110.81.0/24 maxlen: 24
175.110.82.0/24 maxlen: 24
175.110.83.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Dec 2024 06:13:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7821 (0x1e8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 5 09:36:52 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67517434-b84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:27:c4:bc:7c:c0:2b:1d:ec:9a:4f:98:f5:7d:
4b:00:bd:c4:43:15:13:ca:71:98:5c:82:85:15:a3:
cb:a9:24:b1:47:25:4f:50:ce:02:c4:8c:ca:fb:e2:
ed:6f:58:6d:ef:a0:3d:1b:a7:6e:aa:3a:7d:d5:34:
77:12:0c:e9:f4:35:eb:36:3e:db:7f:7b:e2:46:71:
df:94:45:f7:3a:77:b8:d4:0f:f9:b8:57:b8:ea:48:
a3:a9:82:a6:b7:9a:c5:cd:1f:3b:61:db:91:b7:f1:
9b:92:b0:9c:7d:57:6f:1d:64:3f:52:a1:ba:06:09:
5b:76:1b:53:1a:13:f8:a9:3b:a7:f1:f6:1e:c5:64:
bc:3a:e6:6b:b1:ab:66:da:07:2b:f0:2b:87:6e:62:
8c:d6:79:33:df:52:90:f5:f9:51:1c:e6:39:4b:8b:
88:bb:0a:f0:ac:3b:a3:86:78:30:df:8d:76:17:1a:
49:cf:56:7a:43:41:81:ee:61:a8:c4:15:14:75:be:
56:fe:8e:08:38:dc:8d:37:03:e8:b6:35:75:9e:0f:
dd:48:83:47:cb:a8:00:9e:93:73:9d:fd:e6:e7:72:
20:cc:be:a9:20:0f:b0:24:60:37:a1:70:22:2f:37:
ab:6a:05:61:66:71:14:59:a9:15:71:71:f6:1d:f8:
e0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2C:3D:32:7B:87:EA:66:73:B8:67:C5:5F:1B:29:70:CA:FB:45:06
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E7B746B6B15211EF8304BB78C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.225.0-43.226.227.255
103.11.63.0/24
113.203.214.0/24
113.203.222.0/24
113.203.231.0/24
113.203.242.0/24
115.167.16.0/22
115.167.29.0-115.167.31.255
115.167.48.0/24
115.167.64.0/24
115.167.66.0/24
115.167.73.0/24
115.167.76.0/24
115.167.124.0/24
175.110.81.0-175.110.83.255
175.110.111.0/24
180.178.142.0/24
180.178.144.0/24
180.178.146.0/24
180.178.148.0/24
180.178.150.0/24
180.178.160.0/22
180.178.165.0/24
180.178.167.0-180.178.168.255
180.178.188.0/24
180.178.191.0/24
202.92.26.0/24
223.29.229.0/24
223.29.236.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:1e:1f:06:2c:37:09:8d:df:73:6f:d4:ce:8f:e3:87:16:c9:
b2:7e:bf:b9:af:2d:d4:2a:b2:0a:40:f8:00:a2:82:94:41:12:
2d:17:3f:48:4c:29:d8:97:fb:27:e1:11:82:c5:af:4c:bc:5e:
6b:f1:d3:2f:21:f1:1a:02:ae:1b:7d:8a:dd:3a:33:d4:39:c8:
24:e6:39:2d:5b:6d:75:36:40:16:ad:97:fe:41:0a:89:f4:e6:
f2:48:7d:5d:d2:21:5e:66:2a:76:c4:fe:2a:3d:e2:32:85:c2:
21:97:a0:c8:3a:5f:61:41:b6:2e:cc:62:ad:45:ab:11:a8:d9:
82:8b:5a:b1:76:76:3c:a5:af:55:29:cf:f8:b0:99:4a:cf:e8:
af:fd:94:cd:0d:1f:a9:35:8f:b7:4f:10:67:d6:73:04:aa:bf:
a6:7b:5b:a9:a2:d4:3f:14:bc:fc:fb:19:11:19:ef:43:63:e3:
d0:a4:7c:b9:e6:6b:26:39:06:7a:e7:06:4e:73:f7:aa:01:11:
04:33:5e:2f:ca:a7:9d:9a:ec:41:27:3d:4f:3d:1b:b4:08:b5:
09:d4:42:33:30:02:f6:cc:46:be:f7:69:f0:6e:6c:a7:a6:9f:
bf:06:6f:c0:45:a8:94:13:f8:8f:cf:06:56:75:7d:e0:46:a6:
3a:32:64:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:48:24 2025 by rpki-client