Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/493DF3DAFBFA11EEB5974485C4F9AE02.roa
File: 493DF3DAFBFA11EEB5974485C4F9AE02.roa (raw, json)
Hash identifier: M+uWGDJAI+crImWqkKTxoCD6c+smQPaGCUXhFxoMSO0=
Subject key identifier: 90:4E:7D:D9:44:E3:D5:14:4F:A3:CA:6D:A3:F9:26:BE:64:3A:8F:5B
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 35C9
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/493DF3DAFBFA11EEB5974485C4F9AE02.roa
Signing time: Tue 16 Apr 2024 14:08:49 +0000
ROA not before: Tue 16 Apr 2024 14:08:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38710
IP address blocks: 111.88.64.0/21 maxlen: 21
111.88.72.0/21 maxlen: 24
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.144.0/20 maxlen: 24
111.88.164.0/22 maxlen: 24
111.88.168.0/22 maxlen: 24
111.88.184.0/22 maxlen: 24
111.88.188.0/22 maxlen: 24
111.88.232.0/24 maxlen: 24
111.88.233.0/24 maxlen: 24
111.88.234.0/24 maxlen: 24
111.88.235.0/24 maxlen: 24
111.88.236.0/24 maxlen: 24
111.88.237.0/24 maxlen: 24
111.88.238.0/24 maxlen: 24
111.88.239.0/24 maxlen: 24
111.88.240.0/24 maxlen: 24
111.88.241.0/24 maxlen: 24
111.88.242.0/24 maxlen: 24
111.88.243.0/24 maxlen: 24
111.88.244.0/22 maxlen: 22
111.88.244.0/24 maxlen: 24
111.88.245.0/24 maxlen: 24
111.88.246.0/24 maxlen: 24
111.88.247.0/24 maxlen: 24
111.88.248.0/21 maxlen: 21
111.88.248.0/22 maxlen: 22
111.88.248.0/23 maxlen: 24
111.88.250.0/24 maxlen: 24
111.88.251.0/24 maxlen: 24
111.88.252.0/24 maxlen: 24
111.88.253.0/24 maxlen: 24
111.88.254.0/24 maxlen: 24
111.88.255.0/24 maxlen: 24
115.186.1.0/24 maxlen: 24
115.186.10.0/23 maxlen: 24
115.186.12.0/23 maxlen: 24
115.186.14.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.17.0/24 maxlen: 24
115.186.21.0/24 maxlen: 24
115.186.23.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.25.0/24 maxlen: 24
115.186.30.0/23 maxlen: 24
115.186.32.0/20 maxlen: 22
115.186.32.0/24 maxlen: 24
115.186.33.0/24 maxlen: 24
115.186.34.0/24 maxlen: 24
115.186.35.0/24 maxlen: 24
115.186.36.0/22 maxlen: 23
115.186.36.0/23 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.41.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/24 maxlen: 24
115.186.45.0/24 maxlen: 24
115.186.46.0/24 maxlen: 24
115.186.47.0/24 maxlen: 24
115.186.56.0/21 maxlen: 24
115.186.72.0/22 maxlen: 24
115.186.88.0/24 maxlen: 24
115.186.90.0/24 maxlen: 24
115.186.91.0/24 maxlen: 24
115.186.93.0/24 maxlen: 24
115.186.94.0/24 maxlen: 24
115.186.96.0/24 maxlen: 24
115.186.98.0/24 maxlen: 24
115.186.101.0/24 maxlen: 24
115.186.102.0/24 maxlen: 24
115.186.103.0/24 maxlen: 24
115.186.104.0/24 maxlen: 24
115.186.106.0/23 maxlen: 24
115.186.108.0/22 maxlen: 24
115.186.112.0/24 maxlen: 24
115.186.113.0/24 maxlen: 24
115.186.115.0/24 maxlen: 24
115.186.117.0/24 maxlen: 24
115.186.118.0/24 maxlen: 24
115.186.119.0/24 maxlen: 24
115.186.120.0/24 maxlen: 24
115.186.121.0/24 maxlen: 24
115.186.122.0/24 maxlen: 24
115.186.123.0/24 maxlen: 24
115.186.124.0/24 maxlen: 24
115.186.125.0/24 maxlen: 24
115.186.126.0/24 maxlen: 24
117.102.0.0/21 maxlen: 21
117.102.0.0/22 maxlen: 22
117.102.0.0/23 maxlen: 24
117.102.2.0/24 maxlen: 24
117.102.3.0/24 maxlen: 24
117.102.4.0/24 maxlen: 24
117.102.5.0/24 maxlen: 24
117.102.6.0/24 maxlen: 24
117.102.7.0/24 maxlen: 24
117.102.8.0/24 maxlen: 24
117.102.9.0/24 maxlen: 24
117.102.10.0/24 maxlen: 24
117.102.12.0/23 maxlen: 24
117.102.14.0/23 maxlen: 24
117.102.16.0/24 maxlen: 24
117.102.17.0/24 maxlen: 24
117.102.18.0/23 maxlen: 24
117.102.20.0/22 maxlen: 24
117.102.24.0/22 maxlen: 22
117.102.24.0/23 maxlen: 24
117.102.26.0/24 maxlen: 24
117.102.27.0/24 maxlen: 24
117.102.28.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
117.102.32.0/24 maxlen: 24
117.102.33.0/24 maxlen: 24
117.102.34.0/24 maxlen: 24
117.102.35.0/24 maxlen: 24
117.102.36.0/24 maxlen: 24
117.102.37.0/24 maxlen: 24
117.102.38.0/24 maxlen: 24
117.102.39.0/24 maxlen: 24
117.102.40.0/24 maxlen: 24
117.102.41.0/24 maxlen: 24
117.102.42.0/24 maxlen: 24
117.102.43.0/24 maxlen: 24
117.102.44.0/24 maxlen: 24
117.102.45.0/24 maxlen: 24
117.102.46.0/24 maxlen: 24
117.102.47.0/24 maxlen: 24
203.81.192.0/21 maxlen: 22
203.81.192.0/24 maxlen: 24
203.81.193.0/24 maxlen: 24
203.81.194.0/24 maxlen: 24
203.81.195.0/24 maxlen: 24
203.81.196.0/24 maxlen: 24
203.81.197.0/24 maxlen: 24
203.81.198.0/23 maxlen: 24
203.81.208.0/21 maxlen: 24
203.81.230.0/24 maxlen: 24
203.81.232.0/21 maxlen: 24
2406:7000::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 16 Apr 2024 14:50:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13769 (0x35c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Apr 16 14:08:49 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=661e8670-6879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:c5:11:88:ee:72:7a:50:14:54:35:68:67:
44:85:ec:c7:53:32:46:94:61:8c:20:b6:5b:21:80:
25:77:d5:5c:25:cb:4b:0b:bd:97:b3:89:aa:36:3b:
a6:a5:76:28:dc:e5:10:e9:2e:63:47:3b:b9:c1:d0:
fc:ee:f5:7d:8b:25:95:7e:35:17:4f:69:e2:2f:c8:
bf:92:3a:f2:cc:5f:67:c5:df:af:de:15:93:8f:78:
10:ec:08:72:c3:b5:2d:49:93:fc:58:8f:a6:0f:d8:
53:9b:5f:4c:e6:bc:c1:d6:25:bc:bb:96:78:27:8e:
5b:11:3b:dc:de:7e:c7:8f:62:bc:f4:80:1a:a7:84:
ea:53:2e:f9:98:3c:f5:b0:15:16:94:fb:45:e0:8f:
62:db:e0:52:62:63:fb:b5:98:fd:d4:5f:95:b8:1c:
46:90:02:83:85:76:19:e7:be:f5:bf:f6:c1:67:a2:
3b:ed:5a:3a:69:b7:d6:d2:6b:7e:b2:26:7a:32:3d:
f4:a0:89:cc:87:f4:c7:28:87:25:d7:9f:55:1f:88:
93:5e:5b:fc:6a:e8:c0:7d:1f:8b:5e:ee:51:02:1d:
f1:1e:6a:10:13:b5:66:70:f5:3e:74:34:fc:74:ec:
ba:b6:93:65:c5:d0:cb:15:39:69:6a:1a:26:67:c2:
21:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4E:7D:D9:44:E3:D5:14:4F:A3:CA:6D:A3:F9:26:BE:64:3A:8F:5B
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/493DF3DAFBFA11EEB5974485C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.64.0/20
111.88.138.0/23
111.88.144.0/20
111.88.164.0-111.88.171.255
111.88.184.0/21
111.88.232.0-111.88.255.255
115.186.1.0/24
115.186.10.0-115.186.14.255
115.186.16.0/23
115.186.21.0/24
115.186.23.0-115.186.25.255
115.186.30.0-115.186.47.255
115.186.56.0/21
115.186.72.0/22
115.186.88.0/24
115.186.90.0/23
115.186.93.0-115.186.94.255
115.186.96.0/24
115.186.98.0/24
115.186.101.0-115.186.104.255
115.186.106.0-115.186.113.255
115.186.115.0/24
115.186.117.0-115.186.126.255
117.102.0.0-117.102.10.255
117.102.12.0-117.102.28.255
117.102.30.0-117.102.47.255
203.81.192.0/21
203.81.208.0/21
203.81.230.0/24
203.81.232.0/21
IPv6:
2406:7000::/32
Signature Algorithm: sha256WithRSAEncryption
0e:e8:68:11:20:19:be:1f:ec:24:7f:52:d1:3f:71:62:f0:6c:
e5:fa:d6:5e:b6:b1:97:fa:df:52:d7:f0:5f:f6:0f:55:0c:dd:
c6:9c:28:7d:f2:45:f8:63:1b:c0:29:d4:72:95:1d:75:e8:c4:
e5:4f:c2:e2:d9:f1:eb:01:4d:a2:8f:ee:83:9b:e3:62:77:fc:
ec:9f:9e:4d:6e:61:14:7e:1a:84:e5:11:99:f5:27:07:78:46:
0e:3c:15:a4:2d:94:b3:03:9e:9f:a6:15:f0:e9:8e:9d:7b:27:
24:c1:d2:d5:3d:01:93:8c:65:29:e5:c7:ca:f0:ac:38:a6:18:
81:e2:61:62:81:25:85:07:3c:7b:b3:2d:36:f2:c6:4d:e3:c8:
64:87:5f:b1:d9:0a:6f:6a:43:1e:53:f8:a7:bc:cb:ce:e2:9f:
94:91:ac:2c:d0:19:cc:f5:1d:1e:ac:14:ef:a5:3d:d9:24:f0:
78:be:b0:3f:1c:71:88:f0:d8:fe:c0:46:47:70:ad:28:c5:e3:
70:e2:09:a1:c4:09:60:33:7d:4e:ce:7c:a9:4f:8e:0f:9f:c2:
67:d3:16:1c:0d:2d:8f:fe:84:3d:89:68:53:cc:48:90:1b:e8:
65:0d:35:7a:0c:40:12:78:fa:f5:78:4d:c8:e5:0a:9f:12:0d:
91:d4:e0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org