Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/AF031E92507F11EE8F290A87C4F9AE02.roa
File: AF031E92507F11EE8F290A87C4F9AE02.roa (raw, json)
Hash identifier: BTUQCMvSwB1bVmsxyPHG5Ta7LHEHnrICigXAax6WzBE=
Subject key identifier: 22:1E:57:0D:AD:6C:E1:6D:BE:29:81:41:8C:DB:1E:81:61:E9:1B:6E
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 1757
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/AF031E92507F11EE8F290A87C4F9AE02.roa
Signing time: Wed 22 Nov 2023 03:43:17 +0000
ROA not before: Wed 22 Nov 2023 03:43:17 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 9443
IP address blocks: 14.137.64.0/18 maxlen: 18
14.137.192.0/19 maxlen: 19
58.178.0.0/16 maxlen: 16
58.179.0.0/16 maxlen: 16
111.220.0.0/16 maxlen: 16
112.141.0.0/16 maxlen: 16
112.213.128.0/18 maxlen: 18
116.240.0.0/16 maxlen: 16
121.79.126.0/23 maxlen: 23
122.148.0.0/16 maxlen: 16
122.150.0.0/16 maxlen: 16
122.151.0.0/16 maxlen: 16
123.2.0.0/16 maxlen: 16
123.3.0.0/16 maxlen: 16
125.168.0.0/16 maxlen: 16
202.4.64.0/19 maxlen: 19
202.14.191.0/24 maxlen: 24
202.61.12.0/24 maxlen: 24
202.61.13.0/24 maxlen: 24
202.62.128.0/19 maxlen: 19
202.67.64.0/18 maxlen: 18
202.86.113.0/24 maxlen: 24
202.86.114.0/23 maxlen: 23
202.86.116.0/23 maxlen: 23
202.86.118.0/24 maxlen: 24
202.130.195.0/24 maxlen: 24
202.130.205.0/24 maxlen: 24
202.136.32.0/20 maxlen: 20
202.138.0.0/18 maxlen: 18
202.147.128.0/20 maxlen: 20
202.154.64.0/18 maxlen: 18
203.16.9.0/24 maxlen: 24
203.16.170.0/24 maxlen: 24
203.23.116.0/24 maxlen: 24
203.24.100.0/23 maxlen: 23
203.55.252.0/24 maxlen: 24
203.56.5.0/24 maxlen: 24
203.62.135.0/24 maxlen: 24
203.91.224.0/19 maxlen: 19
203.91.224.0/20 maxlen: 20
203.91.240.0/21 maxlen: 21
203.132.224.0/19 maxlen: 19
203.134.0.0/17 maxlen: 17
203.134.128.0/18 maxlen: 18
203.142.128.0/19 maxlen: 19
203.161.160.0/20 maxlen: 20
203.190.192.0/20 maxlen: 20
203.191.160.0/19 maxlen: 19
203.212.128.0/19 maxlen: 19
210.50.0.0/16 maxlen: 16
210.86.240.0/20 maxlen: 20
211.26.0.0/16 maxlen: 16
211.27.0.0/16 maxlen: 16
218.214.0.0/16 maxlen: 16
218.215.0.0/16 maxlen: 16
2403:4800::/32 maxlen: 32
2403:9e00::/32 maxlen: 32
2403:fc00::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 13 Feb 2024 00:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5975 (0x1757)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Nov 22 03:43:17 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=655d78d5-4fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:d5:61:af:d7:f3:39:d4:3f:b8:1e:dc:a6:
da:79:b5:61:46:fd:4f:f9:3c:43:58:ab:11:72:e2:
01:b4:12:25:15:99:1d:99:1b:0c:27:98:a5:e2:a8:
26:f5:5d:0d:3b:1b:47:90:71:6a:69:0f:99:31:22:
90:2e:72:16:ed:2e:c8:5e:4c:dc:7a:06:d9:0e:a0:
7b:9d:92:04:9e:9a:65:e6:ef:bd:86:f1:1b:de:40:
95:c7:ab:1c:11:3a:78:65:fb:71:f7:37:89:9d:c1:
ed:98:8b:49:fa:7d:56:4e:04:f3:dc:56:39:ee:09:
31:af:bf:4b:da:9e:0e:03:d1:35:58:8f:d8:db:6b:
11:fb:8a:b1:56:0f:8a:bf:a2:67:3e:9e:10:26:06:
0f:46:4a:ca:05:27:7a:9d:1d:be:34:e9:64:23:18:
37:8c:05:61:44:60:f2:c4:2e:16:4a:b6:c5:e9:b2:
b0:55:e1:55:e3:13:59:7d:24:fe:bb:7d:2a:1a:06:
a0:13:ff:4e:60:bc:27:6d:57:b2:08:93:4f:af:32:
9d:6e:8a:53:76:f7:b2:6c:3e:3b:ed:33:f7:00:16:
48:62:75:0f:3d:76:24:dc:20:85:4d:57:61:f4:5c:
19:12:52:4d:d1:fb:54:71:53:a9:20:e9:aa:9c:50:
27:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1E:57:0D:AD:6C:E1:6D:BE:29:81:41:8C:DB:1E:81:61:E9:1B:6E
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/AF031E92507F11EE8F290A87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.137.64.0/18
14.137.192.0/19
58.178.0.0/15
111.220.0.0/16
112.141.0.0/16
112.213.128.0/18
116.240.0.0/16
121.79.126.0/23
122.148.0.0/16
122.150.0.0/15
123.2.0.0/15
125.168.0.0/16
202.4.64.0/19
202.14.191.0/24
202.61.12.0/23
202.62.128.0/19
202.67.64.0/18
202.86.113.0-202.86.118.255
202.130.195.0/24
202.130.205.0/24
202.136.32.0/20
202.138.0.0/18
202.147.128.0/20
202.154.64.0/18
203.16.9.0/24
203.16.170.0/24
203.23.116.0/24
203.24.100.0/23
203.55.252.0/24
203.56.5.0/24
203.62.135.0/24
203.91.224.0/19
203.132.224.0/19
203.134.0.0-203.134.191.255
203.142.128.0/19
203.161.160.0/20
203.190.192.0/20
203.191.160.0/19
203.212.128.0/19
210.50.0.0/16
210.86.240.0/20
211.26.0.0/15
218.214.0.0/15
IPv6:
2403:4800::/32
2403:9e00::/32
2403:fc00::/32
Signature Algorithm: sha256WithRSAEncryption
2a:1e:69:e9:8a:c3:87:6e:b1:89:ed:e8:94:10:48:6b:7e:de:
bb:39:d1:dd:92:51:7e:38:e2:7f:c9:e2:2e:83:e4:99:02:fa:
38:60:16:df:35:65:06:81:c5:20:da:92:66:21:83:44:9a:e1:
c3:d7:06:9a:62:e4:b7:ef:63:7c:f6:cc:15:a7:9d:1e:5e:45:
8f:5b:03:8e:d4:09:67:39:2e:7b:37:35:ed:76:e0:4f:76:03:
1b:cf:77:d5:1e:da:12:37:cb:46:e0:0c:2e:eb:cf:76:82:30:
87:0f:5b:16:42:d9:33:58:22:c8:c6:65:fd:3c:77:84:ad:45:
ef:a8:1e:c5:c5:06:8a:02:25:0d:21:9d:b6:6a:38:ad:c4:11:
49:c3:43:8e:a0:5c:2a:71:ac:6a:6c:13:31:22:fa:6d:55:b4:
8d:49:5c:7f:f8:8f:d4:ed:23:0a:6b:e0:4d:e0:aa:1a:74:b8:
21:34:b9:c3:b9:05:90:c7:87:18:07:a9:cb:41:1b:b3:f8:be:
4f:3d:ac:07:9f:b7:7d:3d:3f:14:d1:18:8c:8b:42:48:1f:4f:
16:29:cd:9f:61:b8:b5:63:12:f7:bd:e9:e4:ec:58:37:fc:5b:
fd:d8:76:8f:bf:94:ab:51:a5:ec:79:53:f2:05:5f:1a:21:ce:
b3:f8:75:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 04:10:13 2024 by rpki-client on console-fra.rpki-client.org