Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/AC7B0B8E2FB411EF990F7E27C4F9AE02.roa
File: AC7B0B8E2FB411EF990F7E27C4F9AE02.roa (raw, json)
Hash identifier: WkJVFVdJrG7aKbZSRiB8iWhhrMxGLF4PeBU2YZ5mLU0=
Subject key identifier: 6D:E7:40:45:5B:5A:8A:15:74:3E:31:B4:D5:57:A2:E4:A1:D3:D2:31
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 364A
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/AC7B0B8E2FB411EF990F7E27C4F9AE02.roa
Signing time: Fri 21 Jun 2024 09:57:31 +0000
ROA not before: Fri 21 Jun 2024 09:57:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38710
IP address blocks: 111.88.72.0/21 maxlen: 21
111.88.72.0/23 maxlen: 24
111.88.74.0/23 maxlen: 24
111.88.76.0/22 maxlen: 24
111.88.96.0/19 maxlen: 19
111.88.138.0/24 maxlen: 24
111.88.139.0/24 maxlen: 24
111.88.144.0/20 maxlen: 24
111.88.164.0/22 maxlen: 24
111.88.168.0/22 maxlen: 24
111.88.184.0/22 maxlen: 24
111.88.188.0/22 maxlen: 24
111.88.232.0/24 maxlen: 24
111.88.233.0/24 maxlen: 24
111.88.234.0/24 maxlen: 24
111.88.235.0/24 maxlen: 24
111.88.236.0/24 maxlen: 24
111.88.237.0/24 maxlen: 24
111.88.238.0/24 maxlen: 24
111.88.239.0/24 maxlen: 24
111.88.240.0/24 maxlen: 24
111.88.241.0/24 maxlen: 24
111.88.242.0/24 maxlen: 24
111.88.243.0/24 maxlen: 24
111.88.244.0/22 maxlen: 22
111.88.244.0/24 maxlen: 24
111.88.245.0/24 maxlen: 24
111.88.246.0/24 maxlen: 24
111.88.247.0/24 maxlen: 24
111.88.248.0/21 maxlen: 21
111.88.248.0/22 maxlen: 22
111.88.248.0/23 maxlen: 24
111.88.250.0/24 maxlen: 24
111.88.251.0/24 maxlen: 24
111.88.252.0/24 maxlen: 24
111.88.253.0/24 maxlen: 24
111.88.254.0/24 maxlen: 24
111.88.255.0/24 maxlen: 24
115.186.1.0/24 maxlen: 24
115.186.10.0/23 maxlen: 24
115.186.12.0/23 maxlen: 24
115.186.14.0/24 maxlen: 24
115.186.16.0/24 maxlen: 24
115.186.17.0/24 maxlen: 24
115.186.19.0/24 maxlen: 24
115.186.21.0/24 maxlen: 24
115.186.23.0/24 maxlen: 24
115.186.24.0/23 maxlen: 23
115.186.25.0/24 maxlen: 24
115.186.30.0/23 maxlen: 24
115.186.32.0/20 maxlen: 22
115.186.32.0/24 maxlen: 24
115.186.33.0/24 maxlen: 24
115.186.34.0/24 maxlen: 24
115.186.35.0/24 maxlen: 24
115.186.36.0/22 maxlen: 23
115.186.36.0/23 maxlen: 24
115.186.40.0/24 maxlen: 24
115.186.41.0/24 maxlen: 24
115.186.42.0/24 maxlen: 24
115.186.43.0/24 maxlen: 24
115.186.44.0/24 maxlen: 24
115.186.45.0/24 maxlen: 24
115.186.46.0/24 maxlen: 24
115.186.47.0/24 maxlen: 24
115.186.56.0/21 maxlen: 23
115.186.56.0/22 maxlen: 24
115.186.60.0/23 maxlen: 24
115.186.63.0/24 maxlen: 24
115.186.64.0/19 maxlen: 24
115.186.96.0/20 maxlen: 24
115.186.112.0/20 maxlen: 24
117.102.0.0/21 maxlen: 21
117.102.0.0/22 maxlen: 22
117.102.0.0/23 maxlen: 24
117.102.2.0/24 maxlen: 24
117.102.3.0/24 maxlen: 24
117.102.4.0/24 maxlen: 24
117.102.5.0/24 maxlen: 24
117.102.6.0/24 maxlen: 24
117.102.7.0/24 maxlen: 24
117.102.8.0/24 maxlen: 24
117.102.9.0/24 maxlen: 24
117.102.10.0/24 maxlen: 24
117.102.12.0/23 maxlen: 24
117.102.14.0/23 maxlen: 24
117.102.16.0/24 maxlen: 24
117.102.17.0/24 maxlen: 24
117.102.18.0/23 maxlen: 24
117.102.20.0/22 maxlen: 24
117.102.24.0/22 maxlen: 22
117.102.24.0/23 maxlen: 24
117.102.26.0/24 maxlen: 24
117.102.27.0/24 maxlen: 24
117.102.28.0/24 maxlen: 24
117.102.29.0/24 maxlen: 24
117.102.30.0/24 maxlen: 24
117.102.31.0/24 maxlen: 24
117.102.32.0/24 maxlen: 24
117.102.33.0/24 maxlen: 24
117.102.34.0/24 maxlen: 24
117.102.35.0/24 maxlen: 24
117.102.36.0/24 maxlen: 24
117.102.37.0/24 maxlen: 24
117.102.38.0/24 maxlen: 24
117.102.39.0/24 maxlen: 24
117.102.40.0/24 maxlen: 24
117.102.41.0/24 maxlen: 24
117.102.42.0/24 maxlen: 24
117.102.43.0/24 maxlen: 24
117.102.44.0/24 maxlen: 24
117.102.45.0/24 maxlen: 24
117.102.46.0/24 maxlen: 24
117.102.47.0/24 maxlen: 24
203.81.192.0/21 maxlen: 22
203.81.192.0/24 maxlen: 24
203.81.193.0/24 maxlen: 24
203.81.194.0/24 maxlen: 24
203.81.195.0/24 maxlen: 24
203.81.196.0/24 maxlen: 24
203.81.197.0/24 maxlen: 24
203.81.198.0/23 maxlen: 24
203.81.208.0/20 maxlen: 24
203.81.224.0/20 maxlen: 24
2406:7000::/32 maxlen: 32
2406:7000::/48 maxlen: 48
2406:7000:1::/48 maxlen: 48
2406:7000:2::/48 maxlen: 48
2406:7000:3::/48 maxlen: 48
2406:7000:4::/48 maxlen: 48
2406:7000:5::/48 maxlen: 48
2406:7000:6::/48 maxlen: 48
2406:7000:7::/48 maxlen: 48
2406:7000:8::/48 maxlen: 48
2406:7000:9::/48 maxlen: 48
2406:7000:a::/48 maxlen: 48
2406:7000:b::/48 maxlen: 48
2406:7000:c::/48 maxlen: 48
2406:7000:d::/48 maxlen: 48
2406:7000:e::/48 maxlen: 48
2406:7000:f::/48 maxlen: 48
2406:7000:10::/48 maxlen: 48
2406:7000:11::/48 maxlen: 48
2406:7000:12::/48 maxlen: 48
2406:7000:13::/48 maxlen: 48
2406:7000:14::/48 maxlen: 48
2406:7000:15::/48 maxlen: 48
2406:7000:16::/48 maxlen: 48
2406:7000:17::/48 maxlen: 48
2406:7000:18::/48 maxlen: 48
2406:7000:19::/48 maxlen: 48
2406:7000:1a::/48 maxlen: 48
2406:7000:1b::/48 maxlen: 48
2406:7000:1c::/48 maxlen: 48
2406:7000:1d::/48 maxlen: 48
2406:7000:1e::/48 maxlen: 48
2406:7000:1f::/48 maxlen: 48
2406:7000:20::/48 maxlen: 48
2406:7000:21::/48 maxlen: 48
2406:7000:22::/48 maxlen: 48
2406:7000:23::/48 maxlen: 48
2406:7000:24::/48 maxlen: 48
2406:7000:25::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 24 Jul 2024 20:08:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13898 (0x364a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Jun 21 09:57:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66754e8a-e2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:79:51:12:ed:a2:ab:19:b8:b0:43:3b:04:74:
7b:2f:9c:81:b5:32:d1:dc:8a:d3:c6:44:0c:b2:46:
11:d7:a6:1d:4f:d0:ee:37:23:4d:06:22:00:12:0e:
b2:1a:f7:5f:f9:ee:7d:1a:6b:73:79:fe:3f:a8:81:
a7:11:45:5e:94:5f:60:d8:a7:c7:90:f3:4e:cf:16:
2b:fd:49:12:de:b0:d0:24:75:b9:e4:4f:21:c9:f7:
67:59:d8:56:f1:a1:f1:9e:07:cd:92:af:84:a7:21:
e4:13:c4:20:4a:0b:30:0c:d3:bd:bd:2c:21:f9:63:
00:58:1e:13:4d:d6:36:c9:8b:3a:2e:42:10:50:04:
41:01:32:ee:b7:0a:1a:ef:5d:aa:cb:c2:ba:02:bf:
47:f4:4a:74:71:ef:eb:41:6d:2b:1f:40:34:71:0f:
97:de:16:99:6f:ad:32:37:ec:00:f4:f3:35:4e:f9:
7b:92:f6:a7:3e:6f:7d:41:81:81:2c:36:2d:dc:82:
36:f7:1c:69:45:5f:ad:3c:3c:71:3e:fb:b0:aa:f9:
dd:a1:0d:13:5b:61:91:42:77:a4:59:3c:f0:19:d0:
23:e7:c3:df:d5:db:0b:be:5b:d1:fa:5a:5b:ed:33:
32:3f:eb:fb:58:6e:18:a0:96:b4:68:e1:58:e2:2a:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E7:40:45:5B:5A:8A:15:74:3E:31:B4:D5:57:A2:E4:A1:D3:D2:31
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/AC7B0B8E2FB411EF990F7E27C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.88.72.0/21
111.88.96.0/19
111.88.138.0/23
111.88.144.0/20
111.88.164.0-111.88.171.255
111.88.184.0/21
111.88.232.0-111.88.255.255
115.186.1.0/24
115.186.10.0-115.186.14.255
115.186.16.0/23
115.186.19.0/24
115.186.21.0/24
115.186.23.0-115.186.25.255
115.186.30.0-115.186.47.255
115.186.56.0-115.186.127.255
117.102.0.0-117.102.10.255
117.102.12.0-117.102.47.255
203.81.192.0/21
203.81.208.0-203.81.239.255
IPv6:
2406:7000::/32
Signature Algorithm: sha256WithRSAEncryption
78:a7:19:5b:0d:08:22:e0:2c:7a:11:b9:67:72:15:75:18:8f:
89:b0:02:32:89:b3:f1:2e:3d:4b:e8:22:25:d9:0f:2c:d1:fa:
1c:ff:78:19:c2:07:75:a6:c1:31:5d:7f:6a:25:42:ab:82:08:
1f:4d:88:30:c1:d4:5c:95:26:d7:e5:54:53:49:d9:96:c3:92:
03:f5:1b:a3:bd:94:62:bd:00:a5:46:d0:d1:15:68:99:8b:d0:
8f:e3:4e:77:87:9a:4e:e0:c0:f8:97:f5:93:b6:0f:2a:73:7e:
34:19:d6:6b:80:64:d3:bb:c4:07:61:bd:46:9c:c8:7e:57:ed:
02:9d:6b:c9:27:8a:06:88:31:8a:4f:f2:9a:fe:25:40:19:fd:
ce:1a:7c:ad:89:70:90:ba:17:ea:82:8d:89:8d:07:c0:89:65:
70:97:11:7b:15:6e:3e:58:62:70:7a:1e:ba:bd:cc:3e:d1:64:
7a:06:83:57:0e:41:49:5c:06:d7:86:c5:23:29:22:6e:83:2f:
98:d1:3a:03:a5:32:1e:99:fe:49:3a:ef:a5:38:53:30:ea:4a:
10:9d:bd:db:8c:a9:63:96:3c:55:5f:70:26:dc:b5:e6:20:3a:
4b:17:85:94:29:ad:cf:3f:8c:b2:58:70:9a:69:71:d7:d4:63:
8e:7b:ae:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 00:10:05 2024 by rpki-client on console-fra.rpki-client.org