Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/BB85CCC49FC011EEA6B3B663C4F9AE02.roa
File: BB85CCC49FC011EEA6B3B663C4F9AE02.roa (raw, json)
Hash identifier: HS2qIHh5OnjAvICFni+JlmT7hMH6iwO6AswZLoA1XQk=
Subject key identifier: A2:92:51:53:2B:46:DF:F5:84:16:C3:CE:2D:3B:74:6F:07:63:2B:DB
Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Certificate serial: 3390
Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/BB85CCC49FC011EEA6B3B663C4F9AE02.roa
Signing time: Thu 21 Dec 2023 05:21:03 +0000
ROA not before: Thu 21 Dec 2023 05:21:03 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 7540
IP address blocks: 117.18.96.0/24 maxlen: 24
117.18.98.0/24 maxlen: 24
117.18.101.0/24 maxlen: 24
117.18.102.0/24 maxlen: 24
117.18.103.0/24 maxlen: 24
117.18.105.0/24 maxlen: 24
117.18.106.0/24 maxlen: 24
117.18.107.0/24 maxlen: 24
117.18.108.0/24 maxlen: 24
117.18.110.0/24 maxlen: 24
117.18.112.0/24 maxlen: 24
117.18.113.0/24 maxlen: 24
117.18.114.0/24 maxlen: 24
117.18.115.0/24 maxlen: 24
117.18.116.0/24 maxlen: 24
117.18.119.0/24 maxlen: 24
117.18.120.0/24 maxlen: 24
117.18.121.0/24 maxlen: 24
117.18.124.0/24 maxlen: 24
117.18.125.0/24 maxlen: 24
117.18.126.0/24 maxlen: 24
202.181.137.0/24 maxlen: 24
202.181.138.0/24 maxlen: 24
202.181.139.0/24 maxlen: 24
202.181.140.0/24 maxlen: 24
202.181.141.0/24 maxlen: 24
202.181.142.0/24 maxlen: 24
202.181.143.0/24 maxlen: 24
202.181.148.0/24 maxlen: 24
202.181.150.0/24 maxlen: 24
202.181.151.0/24 maxlen: 24
202.181.152.0/24 maxlen: 24
202.181.153.0/24 maxlen: 24
202.181.154.0/24 maxlen: 24
202.181.156.0/24 maxlen: 24
202.181.157.0/24 maxlen: 24
202.181.158.0/24 maxlen: 24
202.181.159.0/24 maxlen: 24
202.181.160.0/24 maxlen: 24
202.181.161.0/24 maxlen: 24
202.181.162.0/24 maxlen: 24
202.181.163.0/24 maxlen: 24
202.181.164.0/24 maxlen: 24
202.181.165.0/24 maxlen: 24
202.181.166.0/24 maxlen: 24
202.181.167.0/24 maxlen: 24
202.181.168.0/24 maxlen: 24
202.181.169.0/24 maxlen: 24
202.181.170.0/24 maxlen: 24
202.181.171.0/24 maxlen: 24
202.181.172.0/24 maxlen: 24
202.181.173.0/24 maxlen: 24
202.181.174.0/24 maxlen: 24
202.181.175.0/24 maxlen: 24
202.181.176.0/24 maxlen: 24
202.181.178.0/24 maxlen: 24
202.181.179.0/24 maxlen: 24
202.181.180.0/24 maxlen: 24
202.181.181.0/24 maxlen: 24
202.181.182.0/24 maxlen: 24
202.181.183.0/24 maxlen: 24
202.181.184.0/24 maxlen: 24
202.181.185.0/24 maxlen: 24
202.181.186.0/24 maxlen: 24
202.181.187.0/24 maxlen: 24
202.181.189.0/24 maxlen: 24
202.181.190.0/24 maxlen: 24
202.181.191.0/24 maxlen: 24
202.181.192.0/24 maxlen: 24
202.181.193.0/24 maxlen: 24
202.181.194.0/24 maxlen: 24
202.181.195.0/24 maxlen: 24
202.181.196.0/24 maxlen: 24
202.181.197.0/24 maxlen: 24
202.181.198.0/24 maxlen: 24
202.181.199.0/24 maxlen: 24
202.181.200.0/24 maxlen: 24
202.181.201.0/24 maxlen: 24
202.181.202.0/24 maxlen: 24
202.181.203.0/24 maxlen: 24
202.181.205.0/24 maxlen: 24
202.181.206.0/24 maxlen: 24
202.181.207.0/24 maxlen: 24
202.181.208.0/24 maxlen: 24
202.181.209.0/24 maxlen: 24
202.181.210.0/24 maxlen: 24
202.181.211.0/24 maxlen: 24
202.181.212.0/24 maxlen: 24
202.181.213.0/24 maxlen: 24
202.181.214.0/24 maxlen: 24
202.181.215.0/24 maxlen: 24
202.181.216.0/24 maxlen: 24
202.181.217.0/24 maxlen: 24
202.181.219.0/24 maxlen: 24
202.181.220.0/24 maxlen: 24
202.181.221.0/24 maxlen: 24
202.181.222.0/24 maxlen: 24
202.181.223.0/24 maxlen: 24
202.181.224.0/24 maxlen: 24
202.181.225.0/24 maxlen: 24
202.181.226.0/24 maxlen: 24
202.181.227.0/24 maxlen: 24
202.181.228.0/24 maxlen: 24
202.181.229.0/24 maxlen: 24
202.181.230.0/24 maxlen: 24
202.181.231.0/24 maxlen: 24
202.181.233.0/24 maxlen: 24
202.181.234.0/24 maxlen: 24
202.181.235.0/24 maxlen: 24
202.181.236.0/24 maxlen: 24
202.181.237.0/24 maxlen: 24
202.181.238.0/24 maxlen: 24
202.181.239.0/24 maxlen: 24
202.181.240.0/24 maxlen: 24
202.181.241.0/24 maxlen: 24
202.181.242.0/24 maxlen: 24
202.181.243.0/24 maxlen: 24
202.181.244.0/24 maxlen: 24
202.181.245.0/24 maxlen: 24
202.181.246.0/24 maxlen: 24
202.181.247.0/24 maxlen: 24
202.181.248.0/23 maxlen: 24
2405:5d00::/64 maxlen: 64
Validation: Failed, certificate revoked on Mon 15 Jan 2024 07:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13200 (0x3390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Validity
Not Before: Dec 21 05:21:03 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6583cb3e-cc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:93:42:6d:3f:6e:5d:1f:df:21:92:ad:6b:
97:74:7a:ce:0e:56:99:19:a9:f9:be:a0:3f:ce:95:
93:d9:ca:3e:8e:b6:c6:da:1e:ac:e2:60:ac:fa:28:
90:dd:f1:d8:6b:2d:35:b0:26:06:3d:81:d5:26:cd:
cf:ea:64:76:04:e7:1d:73:ce:bf:f7:78:9e:a0:c3:
6a:10:86:47:7b:c5:e0:08:2e:06:87:55:f2:df:6f:
14:17:d8:fc:52:19:1c:7e:45:7a:7b:ba:5d:8f:52:
2c:ca:37:4d:23:a6:1b:f8:d7:4c:b5:05:a1:f0:ad:
12:46:7e:49:ff:37:c7:0b:e5:5f:80:9e:ff:3b:2b:
55:b0:e3:24:2f:a5:ea:a7:d1:22:04:52:20:88:0f:
3e:48:b1:d2:df:e9:30:84:b0:a7:9f:6d:55:71:ff:
04:01:63:2a:73:e9:fb:56:fb:bb:e0:a3:df:84:78:
1b:56:ce:58:46:01:83:4c:f6:c2:bf:9a:44:06:fa:
43:0a:eb:23:51:38:5e:09:cd:16:80:1e:8a:38:ba:
10:4e:7c:1c:08:53:8d:2b:0c:35:96:90:44:fb:be:
a1:9b:a3:e0:dd:c5:90:7f:af:22:43:56:45:ab:ef:
43:df:e4:6e:38:3e:63:1a:b8:31:c7:1c:d6:c5:aa:
15:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:92:51:53:2B:46:DF:F5:84:16:C3:CE:2D:3B:74:6F:07:63:2B:DB
X509v3 Authority Key Identifier:
keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/BB85CCC49FC011EEA6B3B663C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.18.96.0/24
117.18.98.0/24
117.18.101.0-117.18.103.255
117.18.105.0-117.18.108.255
117.18.110.0/24
117.18.112.0-117.18.116.255
117.18.119.0-117.18.121.255
117.18.124.0-117.18.126.255
202.181.137.0-202.181.143.255
202.181.148.0/24
202.181.150.0-202.181.154.255
202.181.156.0-202.181.176.255
202.181.178.0-202.181.187.255
202.181.189.0-202.181.203.255
202.181.205.0-202.181.217.255
202.181.219.0-202.181.231.255
202.181.233.0-202.181.249.255
IPv6:
2405:5d00::/64
Signature Algorithm: sha256WithRSAEncryption
0b:75:43:21:e6:e4:e2:a3:58:b6:22:e7:e1:5d:28:34:bf:61:
32:c0:a0:7d:a1:89:94:ae:df:cc:a2:20:5d:f7:f3:f8:20:d4:
6a:9c:10:86:62:b8:b5:76:c4:4f:65:af:4f:99:c2:4a:72:10:
d8:3d:bd:0e:4a:59:9a:57:5a:18:bf:45:53:02:13:26:e9:38:
30:fc:0e:cb:c7:4e:4a:32:33:2c:eb:91:46:57:4a:3a:51:a9:
bd:1d:92:e4:0e:d9:79:86:87:db:d2:5d:3c:f5:dc:3b:4e:93:
8e:d8:03:d9:28:bf:4a:ba:24:b5:8c:23:c6:17:da:ec:50:b6:
81:42:db:5f:56:8c:be:34:c0:04:f2:79:8d:f5:df:a2:52:6c:
1f:98:10:a1:28:80:62:b6:d6:8d:c4:79:24:b3:d0:bc:9d:cb:
14:84:d3:17:ef:a0:81:da:8c:4d:2b:ed:23:da:fc:be:7b:aa:
0d:1e:2e:06:99:d3:29:69:f8:c5:43:25:c3:57:82:9b:1f:35:
8b:0f:e7:ee:c8:ad:07:78:54:0b:71:34:da:7f:8b:78:c7:db:
8f:ee:ef:80:5e:fb:0e:60:ed:49:9f:fe:85:cb:25:06:97:75:
1f:11:4c:6c:d9:38:7b:00:99:80:dc:15:2a:f7:a8:e3:d3:34:
90:24:01:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 11:45:09 2024 by rpki-client on console-ams.rpki-client.org