Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/B000CE72FF6011ED90C62C26C4F9AE02.roa
File: B000CE72FF6011ED90C62C26C4F9AE02.roa (raw, json)
Hash identifier: /9eGECugmi8Xu0s2pzWCW9yAYmUAOLGXRbI+Ky9/6mw=
Subject key identifier: A2:E9:83:D1:93:BC:05:F1:7B:7C:35:F1:C6:93:C1:E4:D9:BC:DB:EB
Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Certificate serial: 3313
Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/B000CE72FF6011ED90C62C26C4F9AE02.roa
Signing time: Wed 31 May 2023 03:50:16 +0000
ROA not before: Wed 31 May 2023 03:50:16 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 7540
IP address blocks: 117.18.96.0/24 maxlen: 24
117.18.98.0/24 maxlen: 24
117.18.101.0/24 maxlen: 24
117.18.102.0/24 maxlen: 24
117.18.103.0/24 maxlen: 24
117.18.104.0/24 maxlen: 24
117.18.105.0/24 maxlen: 24
117.18.106.0/24 maxlen: 24
117.18.107.0/24 maxlen: 24
117.18.108.0/24 maxlen: 24
117.18.110.0/24 maxlen: 24
117.18.112.0/24 maxlen: 24
117.18.113.0/24 maxlen: 24
117.18.114.0/24 maxlen: 24
117.18.115.0/24 maxlen: 24
117.18.116.0/24 maxlen: 24
117.18.117.0/24 maxlen: 24
117.18.118.0/24 maxlen: 24
117.18.119.0/24 maxlen: 24
117.18.120.0/24 maxlen: 24
117.18.121.0/24 maxlen: 24
117.18.123.0/24 maxlen: 24
117.18.124.0/24 maxlen: 24
117.18.125.0/24 maxlen: 24
117.18.126.0/24 maxlen: 24
202.181.137.0/24 maxlen: 24
202.181.138.0/24 maxlen: 24
202.181.139.0/24 maxlen: 24
202.181.140.0/24 maxlen: 24
202.181.141.0/24 maxlen: 24
202.181.142.0/24 maxlen: 24
202.181.143.0/24 maxlen: 24
202.181.148.0/24 maxlen: 24
202.181.150.0/24 maxlen: 24
202.181.151.0/24 maxlen: 24
202.181.152.0/24 maxlen: 24
202.181.153.0/24 maxlen: 24
202.181.154.0/24 maxlen: 24
202.181.156.0/24 maxlen: 24
202.181.157.0/24 maxlen: 24
202.181.158.0/24 maxlen: 24
202.181.159.0/24 maxlen: 24
202.181.160.0/24 maxlen: 24
202.181.161.0/24 maxlen: 24
202.181.162.0/24 maxlen: 24
202.181.163.0/24 maxlen: 24
202.181.164.0/24 maxlen: 24
202.181.165.0/24 maxlen: 24
202.181.166.0/24 maxlen: 24
202.181.167.0/24 maxlen: 24
202.181.168.0/24 maxlen: 24
202.181.169.0/24 maxlen: 24
202.181.170.0/24 maxlen: 24
202.181.171.0/24 maxlen: 24
202.181.172.0/24 maxlen: 24
202.181.173.0/24 maxlen: 24
202.181.174.0/24 maxlen: 24
202.181.175.0/24 maxlen: 24
202.181.176.0/24 maxlen: 24
202.181.177.0/24 maxlen: 24
202.181.178.0/24 maxlen: 24
202.181.179.0/24 maxlen: 24
202.181.180.0/24 maxlen: 24
202.181.181.0/24 maxlen: 24
202.181.182.0/24 maxlen: 24
202.181.183.0/24 maxlen: 24
202.181.184.0/24 maxlen: 24
202.181.185.0/24 maxlen: 24
202.181.186.0/24 maxlen: 24
202.181.187.0/24 maxlen: 24
202.181.188.0/24 maxlen: 24
202.181.189.0/24 maxlen: 24
202.181.190.0/24 maxlen: 24
202.181.191.0/24 maxlen: 24
202.181.192.0/24 maxlen: 24
202.181.193.0/24 maxlen: 24
202.181.194.0/24 maxlen: 24
202.181.195.0/24 maxlen: 24
202.181.196.0/24 maxlen: 24
202.181.197.0/24 maxlen: 24
202.181.198.0/24 maxlen: 24
202.181.199.0/24 maxlen: 24
202.181.200.0/24 maxlen: 24
202.181.201.0/24 maxlen: 24
202.181.202.0/24 maxlen: 24
202.181.203.0/24 maxlen: 24
202.181.204.0/24 maxlen: 24
202.181.205.0/24 maxlen: 24
202.181.206.0/24 maxlen: 24
202.181.207.0/24 maxlen: 24
202.181.208.0/24 maxlen: 24
202.181.209.0/24 maxlen: 24
202.181.210.0/24 maxlen: 24
202.181.211.0/24 maxlen: 24
202.181.212.0/24 maxlen: 24
202.181.213.0/24 maxlen: 24
202.181.214.0/24 maxlen: 24
202.181.215.0/24 maxlen: 24
202.181.216.0/24 maxlen: 24
202.181.217.0/24 maxlen: 24
202.181.219.0/24 maxlen: 24
202.181.220.0/24 maxlen: 24
202.181.221.0/24 maxlen: 24
202.181.222.0/24 maxlen: 24
202.181.223.0/24 maxlen: 24
202.181.224.0/24 maxlen: 24
202.181.225.0/24 maxlen: 24
202.181.226.0/24 maxlen: 24
202.181.227.0/24 maxlen: 24
202.181.228.0/24 maxlen: 24
202.181.229.0/24 maxlen: 24
202.181.230.0/24 maxlen: 24
202.181.231.0/24 maxlen: 24
202.181.233.0/24 maxlen: 24
202.181.234.0/24 maxlen: 24
202.181.235.0/24 maxlen: 24
202.181.236.0/24 maxlen: 24
202.181.237.0/24 maxlen: 24
202.181.238.0/24 maxlen: 24
202.181.239.0/24 maxlen: 24
202.181.240.0/24 maxlen: 24
202.181.241.0/24 maxlen: 24
202.181.242.0/24 maxlen: 24
202.181.243.0/24 maxlen: 24
202.181.244.0/24 maxlen: 24
202.181.245.0/24 maxlen: 24
202.181.246.0/24 maxlen: 24
202.181.247.0/24 maxlen: 24
202.181.248.0/23 maxlen: 24
2405:5d00::/64 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13075 (0x3313)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Validity
Not Before: May 31 03:50:16 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6476c3f7-2dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:48:d4:b5:56:07:76:15:70:ea:7a:ae:5f:26:
bd:dd:86:9d:72:b7:d3:f0:65:98:97:96:f2:d3:d1:
55:fc:10:a2:f9:f8:a3:22:fe:14:00:cf:b8:ba:c2:
bc:e6:d3:f8:ed:4f:25:0b:82:f8:10:26:91:67:47:
3f:89:0a:ee:e1:13:99:fd:b0:21:63:ff:2b:52:f3:
94:5d:99:6d:c0:58:9b:c4:59:e3:4a:90:4c:ce:af:
b9:37:51:75:26:74:fb:2c:90:3b:6a:d1:15:b3:a6:
b4:d6:e0:f4:9f:21:89:0b:cc:39:07:6e:26:8b:4e:
fa:f2:95:4c:48:8b:da:df:36:a9:39:ef:09:44:b4:
3c:5d:a6:6f:ea:cf:b6:24:1b:12:0c:c5:7c:04:04:
8a:bc:67:19:1f:03:27:89:80:d1:7d:ca:9a:5c:77:
50:93:06:35:f3:14:23:72:1d:a4:7b:f4:80:f4:7c:
0f:33:b0:2c:b3:3a:99:50:ad:5b:ae:28:a5:e8:83:
30:d1:06:72:c1:47:a5:d4:95:b8:1c:2a:db:d5:f1:
59:1e:43:f0:bc:95:52:a8:8e:39:8a:93:fc:7a:43:
7a:04:ef:c7:3f:6b:83:75:39:e8:0a:13:5b:de:64:
6d:65:c1:16:e9:20:31:f2:f8:8e:b4:a1:fa:c8:db:
f4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E9:83:D1:93:BC:05:F1:7B:7C:35:F1:C6:93:C1:E4:D9:BC:DB:EB
X509v3 Authority Key Identifier:
keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/B000CE72FF6011ED90C62C26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.18.96.0/24
117.18.98.0/24
117.18.101.0-117.18.108.255
117.18.110.0/24
117.18.112.0-117.18.121.255
117.18.123.0-117.18.126.255
202.181.137.0-202.181.143.255
202.181.148.0/24
202.181.150.0-202.181.154.255
202.181.156.0-202.181.217.255
202.181.219.0-202.181.231.255
202.181.233.0-202.181.249.255
IPv6:
2405:5d00::/64
Signature Algorithm: sha256WithRSAEncryption
21:4b:64:1b:7e:45:c9:04:ef:71:5a:a5:72:70:2c:1d:99:4c:
4a:36:ee:b1:88:0a:23:9c:c9:8e:56:f4:b2:cd:66:39:91:7d:
fb:0f:1a:8b:8f:e3:ba:12:ab:3f:78:bf:8f:85:34:c5:57:9b:
6e:41:4d:86:ce:85:e5:ba:78:76:d4:73:4f:3a:d2:00:19:e8:
7b:41:52:95:7f:1a:95:d3:88:54:90:cb:8f:0d:2b:87:b8:1e:
90:06:0e:64:fe:54:0e:7f:4b:44:b2:31:2a:6b:ca:57:bc:31:
98:41:ac:c5:0b:48:38:ce:66:bd:9e:57:1f:3d:66:2f:a8:90:
7c:bb:5d:28:35:fc:f3:52:a6:02:27:24:91:86:4b:66:a7:08:
a5:46:48:3c:50:5a:19:46:09:f9:54:d9:6b:80:01:8b:ff:e1:
39:5a:c2:0d:48:11:1c:01:96:a9:2a:26:71:31:a2:cd:e4:4d:
fb:4f:27:88:46:e6:57:46:a4:84:40:da:1b:9b:b7:d4:e2:c0:
7b:d3:e1:b5:5c:f0:a0:4a:ff:bb:dc:20:64:a6:54:95:4e:50:
0b:13:62:f7:bd:c8:82:37:e2:a9:57:ad:89:27:a1:17:0b:c1:
e0:a5:be:d7:ed:35:8f:a3:5b:61:de:60:c9:ac:82:e0:51:f0:
6b:2f:2f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 08:10:58 2023 by rpki-client on console-ams.rpki-client.org