Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/846D47BA6F3D11EF977F3C25C4F9AE02.roa
File: 846D47BA6F3D11EF977F3C25C4F9AE02.roa (raw, json)
Hash identifier: xvQDMCqmNpUiLrulzax3Pyop1NFQkOsxAQPHzwp5iVU=
Subject key identifier: EE:E1:36:9E:A1:5B:B3:31:39:F5:C4:E0:0F:F4:71:14:36:F7:B5:5E
Certificate issuer: /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Certificate serial: 04
Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/846D47BA6F3D11EF977F3C25C4F9AE02.roa
Signing time: Tue 10 Sep 2024 09:36:06 +0000
ROA not before: Tue 10 Sep 2024 09:36:06 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 17439
IP address blocks: 103.30.152.0/23 maxlen: 23
103.30.152.0/24 maxlen: 24
103.30.154.0/24 maxlen: 24
103.30.155.0/24 maxlen: 24
123.108.32.0/19 maxlen: 24
124.153.64.0/19 maxlen: 24
124.153.96.0/19 maxlen: 24
180.179.0.0/21 maxlen: 24
180.179.8.0/21 maxlen: 24
180.179.16.0/20 maxlen: 24
180.179.32.0/19 maxlen: 24
180.179.64.0/19 maxlen: 24
180.179.96.0/19 maxlen: 23
180.179.96.0/20 maxlen: 24
180.179.112.0/21 maxlen: 24
180.179.120.0/22 maxlen: 24
180.179.124.0/23 maxlen: 24
180.179.128.0/19 maxlen: 20
180.179.128.0/24 maxlen: 24
180.179.129.0/24 maxlen: 24
180.179.130.0/24 maxlen: 24
180.179.132.0/24 maxlen: 24
180.179.133.0/24 maxlen: 24
180.179.134.0/24 maxlen: 24
180.179.135.0/24 maxlen: 24
180.179.136.0/23 maxlen: 24
180.179.138.0/24 maxlen: 24
180.179.139.0/24 maxlen: 24
180.179.140.0/23 maxlen: 24
180.179.142.0/24 maxlen: 24
180.179.143.0/24 maxlen: 24
180.179.144.0/24 maxlen: 24
180.179.145.0/24 maxlen: 24
180.179.146.0/24 maxlen: 24
180.179.149.0/24 maxlen: 24
180.179.151.0/24 maxlen: 24
180.179.153.0/24 maxlen: 24
180.179.154.0/24 maxlen: 24
180.179.155.0/24 maxlen: 24
180.179.156.0/24 maxlen: 24
180.179.157.0/24 maxlen: 24
180.179.158.0/24 maxlen: 24
180.179.159.0/24 maxlen: 24
180.179.160.0/19 maxlen: 20
180.179.160.0/24 maxlen: 24
180.179.161.0/24 maxlen: 24
180.179.162.0/23 maxlen: 23
180.179.164.0/24 maxlen: 24
180.179.165.0/24 maxlen: 24
180.179.166.0/24 maxlen: 24
180.179.167.0/24 maxlen: 24
180.179.168.0/24 maxlen: 24
180.179.169.0/24 maxlen: 24
180.179.170.0/23 maxlen: 23
180.179.172.0/24 maxlen: 24
180.179.173.0/24 maxlen: 24
180.179.174.0/24 maxlen: 24
180.179.175.0/24 maxlen: 24
180.179.177.0/24 maxlen: 24
180.179.178.0/24 maxlen: 24
180.179.179.0/24 maxlen: 24
180.179.180.0/24 maxlen: 24
180.179.182.0/23 maxlen: 23
180.179.184.0/24 maxlen: 24
180.179.185.0/24 maxlen: 24
180.179.186.0/24 maxlen: 24
180.179.192.0/19 maxlen: 20
180.179.192.0/22 maxlen: 22
180.179.192.0/24 maxlen: 24
180.179.193.0/24 maxlen: 24
180.179.194.0/24 maxlen: 24
180.179.195.0/24 maxlen: 24
180.179.196.0/22 maxlen: 22
180.179.196.0/24 maxlen: 24
180.179.197.0/24 maxlen: 24
180.179.198.0/24 maxlen: 24
180.179.199.0/24 maxlen: 24
180.179.200.0/22 maxlen: 22
180.179.200.0/24 maxlen: 24
180.179.201.0/24 maxlen: 24
180.179.202.0/24 maxlen: 24
180.179.203.0/24 maxlen: 24
180.179.204.0/22 maxlen: 23
180.179.206.0/23 maxlen: 24
180.179.208.0/24 maxlen: 24
180.179.209.0/24 maxlen: 24
180.179.211.0/24 maxlen: 24
180.179.212.0/24 maxlen: 24
180.179.213.0/24 maxlen: 24
180.179.214.0/24 maxlen: 24
180.179.215.0/24 maxlen: 24
180.179.216.0/24 maxlen: 24
180.179.217.0/24 maxlen: 24
180.179.218.0/24 maxlen: 24
180.179.219.0/24 maxlen: 24
180.179.220.0/24 maxlen: 24
180.179.221.0/24 maxlen: 24
180.179.222.0/24 maxlen: 24
180.179.223.0/24 maxlen: 24
180.179.224.0/19 maxlen: 20
180.179.224.0/23 maxlen: 23
180.179.224.0/24 maxlen: 24
180.179.226.0/24 maxlen: 24
180.179.227.0/24 maxlen: 24
180.179.228.0/24 maxlen: 24
180.179.229.0/24 maxlen: 24
180.179.230.0/24 maxlen: 24
180.179.231.0/24 maxlen: 24
180.179.232.0/24 maxlen: 24
180.179.233.0/24 maxlen: 24
180.179.234.0/24 maxlen: 24
180.179.235.0/24 maxlen: 24
180.179.236.0/24 maxlen: 24
180.179.237.0/24 maxlen: 24
180.179.239.0/24 maxlen: 24
180.179.240.0/20 maxlen: 21
180.179.240.0/24 maxlen: 24
180.179.242.0/24 maxlen: 24
180.179.243.0/24 maxlen: 24
180.179.244.0/24 maxlen: 24
180.179.245.0/24 maxlen: 24
180.179.246.0/24 maxlen: 24
180.179.247.0/24 maxlen: 24
180.179.248.0/24 maxlen: 24
180.179.249.0/24 maxlen: 24
180.179.253.0/24 maxlen: 24
180.179.255.0/24 maxlen: 24
202.87.32.0/19 maxlen: 24
2401:8800::/40 maxlen: 40
2401:8800:200::/40 maxlen: 40
2401:8800:400::/40 maxlen: 40
2401:8800:600::/40 maxlen: 40
2401:8800:800::/40 maxlen: 40
2401:8800:a00::/40 maxlen: 40
2401:8800:a00::/48 maxlen: 48
2401:8800:a03::/48 maxlen: 48
2401:8800:c00::/40 maxlen: 40
2401:8800:c05::/48 maxlen: 48
2401:8800:e00::/40 maxlen: 40
2401:8800:1000::/40 maxlen: 40
2401:8800:1100::/40 maxlen: 40
2401:8800:1200::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 11 Sep 2024 07:51:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Validity
Not Before: Sep 10 09:36:06 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66e01306-234f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ef:31:5b:bb:3a:b0:2a:72:a0:83:3f:9e:32:
05:3f:80:b1:72:ca:7c:e6:31:76:57:83:30:22:bb:
1f:83:76:b2:91:4b:28:62:b8:8e:d1:12:44:2f:2f:
f7:eb:d7:b1:a7:09:10:a7:58:f2:c6:ae:7d:6d:69:
c7:2d:44:c9:f8:eb:62:34:86:7d:22:b3:6a:32:fd:
bb:13:7d:25:ec:d0:c1:aa:bb:96:cd:16:c8:e6:69:
c1:3d:76:82:1f:20:29:e3:23:7e:fe:6d:a9:65:63:
61:5d:3a:1e:61:70:9a:ae:8b:d1:0a:27:1e:5c:a0:
b4:13:b2:ed:c4:15:67:c0:3e:eb:d8:b0:52:de:56:
86:ca:81:2c:c4:40:89:f2:c1:a4:25:09:52:fd:eb:
06:aa:c9:57:cd:00:5c:f3:0f:6f:da:b6:ce:75:af:
68:df:fd:48:b0:8e:d6:60:fe:95:9e:73:df:68:b6:
4d:75:1e:fc:d0:2b:5d:5b:f3:c9:83:11:b2:09:7f:
42:8b:2e:77:1c:fb:4e:4a:35:9e:67:5a:95:64:79:
02:96:c1:88:de:fe:67:84:25:9e:2c:3f:02:8c:c4:
3e:61:53:d1:94:95:9e:e3:d4:4d:e9:6d:3f:a0:c3:
01:37:59:ab:16:26:0d:41:b7:cd:17:b5:35:c3:be:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E1:36:9E:A1:5B:B3:31:39:F5:C4:E0:0F:F4:71:14:36:F7:B5:5E
X509v3 Authority Key Identifier:
keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/846D47BA6F3D11EF977F3C25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.30.152.0/22
123.108.32.0/19
124.153.64.0/18
180.179.0.0/16
202.87.32.0/19
IPv6:
2401:8800::/40
2401:8800:200::/40
2401:8800:400::/40
2401:8800:600::/40
2401:8800:800::/40
2401:8800:a00::/40
2401:8800:c00::/40
2401:8800:e00::/40
2401:8800:1000::-2401:8800:12ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5d:9b:83:29:ca:83:8a:41:3e:b5:52:d6:11:2c:f8:41:17:c1:
5d:92:94:28:0b:46:ed:53:28:89:48:9f:72:08:ea:86:32:af:
57:65:c3:81:99:94:dc:66:fc:6f:b7:e7:71:37:cf:6c:84:0e:
5e:53:04:ae:da:ac:db:db:82:5a:85:ef:1b:02:c6:f8:f3:cd:
60:4a:36:38:60:81:6d:79:2b:81:73:a1:9c:bb:3d:c3:8f:43:
a5:b6:ec:67:6c:43:5b:70:67:94:0c:b8:71:8f:3a:a3:3d:4c:
a7:26:d3:da:e2:59:23:3c:57:5c:b8:4e:84:8e:a6:d5:c9:15:
f4:cc:38:12:de:36:ad:c6:58:ed:b6:e0:c1:d3:79:db:aa:e5:
19:41:1c:d7:f2:51:fe:e0:ec:fd:0d:a7:a8:3b:28:a6:ba:03:
2d:c1:1f:4f:fc:df:76:de:5f:55:4d:d0:23:da:48:5d:99:78:
11:19:2b:90:fb:be:8a:f3:4e:46:fc:f7:8c:9c:f4:d3:0b:fa:
e4:27:87:fa:c6:c3:54:a4:44:30:5c:ff:82:5d:ff:22:83:3d:
09:f7:5c:73:e5:3f:cb:6e:10:36:b0:e9:a9:eb:f3:40:da:6e:
84:78:21:5d:c9:69:9d:b9:c4:e0:ea:7b:3f:38:37:6f:84:69:
b0:ac:4a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 10:41:58 2024 by rpki-client on console-ams.rpki-client.org