Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/D3FB6BAE799711EF8FA44A7DC4F9AE02.roa
File: D3FB6BAE799711EF8FA44A7DC4F9AE02.roa (raw, json)
Hash identifier: y9B+8UFZn+Nm3vdJ1uHtjDByp6EXGKqSVuHUmXQzrXg=
Subject key identifier: 80:A0:7B:33:C2:33:B6:AD:A2:F8:C4:4F:A3:49:4A:E8:0C:77:E4:3D
Certificate issuer: /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial: 0730
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/D3FB6BAE799711EF8FA44A7DC4F9AE02.roa
Signing time: Mon 28 Oct 2024 21:52:32 +0000
ROA not before: Mon 28 Oct 2024 21:52:32 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 135607
IP address blocks: 61.245.4.0/24 maxlen: 24
61.245.5.0/24 maxlen: 24
61.245.6.0/24 maxlen: 24
61.245.7.0/24 maxlen: 24
61.245.8.0/24 maxlen: 24
61.245.9.0/24 maxlen: 24
61.245.12.0/24 maxlen: 24
61.245.13.0/24 maxlen: 24
61.245.14.0/24 maxlen: 24
61.245.15.0/24 maxlen: 24
61.245.16.0/24 maxlen: 24
61.245.17.0/24 maxlen: 24
61.245.18.0/24 maxlen: 24
61.245.19.0/24 maxlen: 24
61.245.20.0/24 maxlen: 24
61.245.21.0/24 maxlen: 24
61.245.22.0/24 maxlen: 24
61.245.23.0/24 maxlen: 24
61.245.24.0/24 maxlen: 24
61.245.25.0/24 maxlen: 24
61.245.26.0/24 maxlen: 24
61.245.27.0/24 maxlen: 24
61.245.28.0/24 maxlen: 24
61.245.29.0/24 maxlen: 24
61.245.30.0/24 maxlen: 24
61.245.121.0/24 maxlen: 24
61.245.122.0/24 maxlen: 24
61.245.123.0/24 maxlen: 24
103.76.160.0/23 maxlen: 23
103.76.160.0/24 maxlen: 24
103.76.161.0/24 maxlen: 24
103.100.100.0/23 maxlen: 23
103.100.100.0/24 maxlen: 24
103.100.101.0/24 maxlen: 24
126.209.0.0/24 maxlen: 24
126.209.1.0/24 maxlen: 24
126.209.2.0/24 maxlen: 24
126.209.3.0/24 maxlen: 24
126.209.4.0/24 maxlen: 24
126.209.5.0/24 maxlen: 24
126.209.6.0/24 maxlen: 24
126.209.7.0/24 maxlen: 24
126.209.8.0/24 maxlen: 24
126.209.9.0/24 maxlen: 24
126.209.10.0/24 maxlen: 24
126.209.11.0/24 maxlen: 24
126.209.12.0/24 maxlen: 24
126.209.13.0/24 maxlen: 24
126.209.14.0/24 maxlen: 24
126.209.15.0/24 maxlen: 24
126.209.16.0/24 maxlen: 24
126.209.17.0/24 maxlen: 24
126.209.18.0/24 maxlen: 24
126.209.19.0/24 maxlen: 24
126.209.20.0/24 maxlen: 24
126.209.21.0/24 maxlen: 24
126.209.22.0/24 maxlen: 24
126.209.23.0/24 maxlen: 24
126.209.24.0/24 maxlen: 24
126.209.25.0/24 maxlen: 24
126.209.26.0/24 maxlen: 24
126.209.27.0/24 maxlen: 24
126.209.28.0/24 maxlen: 24
126.209.29.0/24 maxlen: 24
126.209.30.0/24 maxlen: 24
126.209.31.0/24 maxlen: 24
126.209.32.0/24 maxlen: 24
126.209.33.0/24 maxlen: 24
126.209.34.0/24 maxlen: 24
126.209.35.0/24 maxlen: 24
126.209.36.0/24 maxlen: 24
126.209.37.0/24 maxlen: 24
126.209.38.0/24 maxlen: 24
126.209.39.0/24 maxlen: 24
126.209.40.0/24 maxlen: 24
126.209.41.0/24 maxlen: 24
126.209.42.0/24 maxlen: 24
126.209.43.0/24 maxlen: 24
126.209.44.0/24 maxlen: 24
126.209.45.0/24 maxlen: 24
126.209.46.0/24 maxlen: 24
126.209.47.0/24 maxlen: 24
126.209.48.0/24 maxlen: 24
126.209.49.0/24 maxlen: 24
126.209.50.0/24 maxlen: 24
126.209.51.0/24 maxlen: 24
126.209.52.0/24 maxlen: 24
126.209.53.0/24 maxlen: 24
126.209.54.0/24 maxlen: 24
126.209.55.0/24 maxlen: 24
126.209.56.0/24 maxlen: 24
126.209.57.0/24 maxlen: 24
126.209.58.0/24 maxlen: 24
126.209.59.0/24 maxlen: 24
126.209.61.0/24 maxlen: 24
126.209.62.0/24 maxlen: 24
126.209.63.0/24 maxlen: 24
2401:e740::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 08 Nov 2024 07:23:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Validity
Not Before: Oct 28 21:52:32 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=672007a0-c30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3d:83:0a:25:a6:27:f3:06:ce:45:b7:7d:10:
f3:b7:66:e3:ef:86:2b:cf:3d:64:e8:2d:b2:4f:f1:
98:f7:26:f1:8f:e5:fa:ee:23:5c:0d:dc:69:42:6d:
69:83:5f:67:d0:a7:55:0a:60:ac:d9:f9:7d:8d:2f:
5f:7f:df:0f:e7:b4:25:12:87:f3:24:6f:1b:0a:39:
fd:e2:89:5b:ba:19:e4:4e:92:ad:b6:72:45:ed:07:
4f:a7:13:b2:28:6f:cc:be:71:38:05:2c:c9:5c:71:
d7:46:b2:3b:e9:4b:ae:e2:b6:5d:57:fb:57:fd:39:
34:1f:71:d9:0f:fd:d1:e1:de:a0:5b:2d:7c:75:80:
2f:8c:25:10:bc:79:82:c6:78:77:63:06:d3:c1:76:
f9:e2:49:f6:6a:4a:06:a7:4d:14:29:31:ab:b3:41:
a6:a0:f4:bf:95:a9:78:c2:8f:93:72:29:33:13:a2:
bd:98:bf:6a:2e:db:1f:f3:95:59:0c:ba:6e:44:4b:
c0:77:bf:7d:88:79:3f:e3:10:aa:05:14:e7:a6:87:
8b:e6:ea:1d:7e:91:ed:15:50:2a:a3:fb:a9:3c:4c:
a2:e6:e6:ce:77:58:ae:d3:95:d4:1a:96:3f:46:ca:
75:8c:bc:2a:e9:83:65:95:ac:0c:fe:90:3b:43:f1:
46:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A0:7B:33:C2:33:B6:AD:A2:F8:C4:4F:A3:49:4A:E8:0C:77:E4:3D
X509v3 Authority Key Identifier:
keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/D3FB6BAE799711EF8FA44A7DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.245.4.0-61.245.9.255
61.245.12.0-61.245.30.255
61.245.121.0-61.245.123.255
103.76.160.0/23
103.100.100.0/23
126.209.0.0-126.209.59.255
126.209.61.0-126.209.63.255
IPv6:
2401:e740::/32
Signature Algorithm: sha256WithRSAEncryption
75:eb:ff:a4:ea:93:58:9a:3d:f4:ed:cd:53:1d:d6:cc:c8:11:
e8:77:85:0d:13:d8:64:03:c1:8a:ae:27:0f:78:13:41:b5:01:
da:f7:4f:fa:6c:ff:99:72:93:b7:5a:a1:dd:60:d0:54:50:ed:
b9:40:a9:75:57:01:4e:a4:4c:84:4e:52:74:60:de:1f:6c:3f:
83:de:44:76:8f:97:4e:92:52:f7:87:38:2c:a0:67:00:09:e4:
c8:cb:38:60:03:8c:c2:5b:96:27:d9:8e:96:d7:e9:65:6d:41:
7f:02:5a:0b:86:68:e9:14:6b:d5:80:1b:d4:d9:53:a6:2f:ce:
5b:3f:76:6f:0e:15:b5:66:1e:ec:99:e5:8a:b5:30:6c:1a:c2:
ed:1d:e8:40:90:37:0e:5f:e3:a7:19:19:dc:17:0d:61:b7:cb:
54:78:a1:7c:ac:93:6d:75:c1:66:a0:ee:e6:31:bf:b8:3c:7c:
e6:46:f2:fc:c9:85:5a:33:df:e5:c5:de:fd:30:02:01:c5:17:
ac:5f:ba:a3:09:4d:06:ab:aa:1b:e7:49:2d:6a:b3:e3:32:ce:
96:4d:13:b5:75:f9:ef:77:4c:d9:e5:84:c2:e5:88:18:62:58:
ca:53:e6:a9:45:66:6b:7f:75:cd:da:bd:52:d3:a7:df:22:43:
06:ca:59:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 8 10:13:29 2024 by rpki-client on console-ams.rpki-client.org