Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/5C1126766ABD11EFB0544D38C4F9AE02.roa
File: 5C1126766ABD11EFB0544D38C4F9AE02.roa (raw, json)
Hash identifier: etADniUNIzWigD7C4SvCko2RRqHCDmAkoRqY+QdgUdY=
Subject key identifier: AC:11:04:73:D7:F1:08:FB:76:C4:7D:5D:5C:B7:C9:BD:EC:1C:5E:AF
Certificate issuer: /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial: 1C42
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/5C1126766ABD11EFB0544D38C4F9AE02.roa
Signing time: Thu 05 Sep 2024 01:52:53 +0000
ROA not before: Thu 05 Sep 2024 01:52:53 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 132165
IP address blocks: 43.245.128.0/24 maxlen: 24
43.245.129.0/24 maxlen: 24
43.245.130.0/24 maxlen: 24
43.245.131.0/24 maxlen: 24
103.12.120.0/24 maxlen: 24
103.12.121.0/24 maxlen: 24
103.12.122.0/24 maxlen: 24
103.12.123.0/24 maxlen: 24
111.119.160.0/24 maxlen: 24
111.119.161.0/24 maxlen: 24
111.119.162.0/24 maxlen: 24
111.119.163.0/24 maxlen: 24
111.119.164.0/24 maxlen: 24
111.119.165.0/24 maxlen: 24
111.119.166.0/24 maxlen: 24
111.119.167.0/24 maxlen: 24
113.203.192.0/24 maxlen: 24
113.203.193.0/24 maxlen: 24
113.203.195.0/24 maxlen: 24
113.203.200.0/24 maxlen: 24
113.203.201.0/24 maxlen: 24
113.203.202.0/24 maxlen: 24
113.203.203.0/24 maxlen: 24
113.203.204.0/24 maxlen: 24
113.203.205.0/24 maxlen: 24
113.203.207.0/24 maxlen: 24
115.42.64.0/24 maxlen: 24
115.42.65.0/24 maxlen: 24
115.42.66.0/24 maxlen: 24
115.42.67.0/24 maxlen: 24
115.42.71.0/24 maxlen: 24
118.103.226.0/24 maxlen: 24
118.103.227.0/24 maxlen: 24
118.103.228.0/24 maxlen: 24
118.103.229.0/24 maxlen: 24
118.103.230.0/24 maxlen: 24
118.103.231.0/24 maxlen: 24
118.103.232.0/24 maxlen: 24
118.103.233.0/24 maxlen: 24
118.103.234.0/24 maxlen: 24
118.103.235.0/24 maxlen: 24
118.103.236.0/24 maxlen: 24
118.103.237.0/24 maxlen: 24
118.103.238.0/24 maxlen: 24
118.103.239.0/24 maxlen: 24
2406:d00::/48 maxlen: 48
2406:d00:2222::/48 maxlen: 48
2406:d00:5555::/48 maxlen: 48
2406:d00:aaaa::/48 maxlen: 48
2406:d00:bbbb::/48 maxlen: 48
2406:d00:ccaa::/47 maxlen: 48
2406:d00:ccc0::/46 maxlen: 48
2406:d00:cccc::/46 maxlen: 48
2406:d00:cce0::/48 maxlen: 48
2406:d00:ccea::/48 maxlen: 48
2406:d00:ddc1::/48 maxlen: 48
2406:d00:ddcc::/48 maxlen: 48
2406:d00:ddd1::/48 maxlen: 48
2406:d00:dddd::/48 maxlen: 48
2406:d00:ddf1::/48 maxlen: 48
2406:d00:ddff::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 09 Sep 2024 07:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7234 (0x1c42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Validity
Not Before: Sep 5 01:52:53 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=66d90ef5-b318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e8:dc:07:54:b1:d7:32:e4:58:ab:fd:67:62:
b4:3f:65:f3:93:59:1c:81:42:00:f7:26:39:be:c7:
5c:96:e4:a7:7f:5d:50:29:0c:fc:54:f0:23:97:43:
65:19:0b:cc:97:9f:a3:20:c2:be:08:e9:43:3d:e3:
d0:46:ce:99:dc:5d:cd:2f:03:83:18:4b:61:22:3c:
cb:bf:ec:59:31:7d:ca:d2:dd:ae:d4:69:70:f8:2d:
a5:77:23:c1:8e:28:02:41:2b:09:ab:a4:ca:08:11:
a8:d2:8c:e4:63:70:d7:af:12:8f:93:d0:9a:2b:a1:
90:71:0e:f2:8a:fe:2a:4e:96:25:3b:16:09:2b:04:
5e:12:f9:8c:1b:15:fa:f0:db:b4:10:c4:10:99:27:
26:5d:cc:38:fd:fd:0d:aa:06:19:33:2c:be:88:7a:
17:3e:b4:8c:5e:17:36:32:fb:48:98:12:19:70:13:
50:c2:96:2c:ee:d2:23:a0:66:14:f4:81:da:67:43:
cb:1b:f0:c3:1d:8a:12:87:db:51:f8:75:e8:c7:e1:
6f:2a:6f:00:5a:bb:48:b6:7e:a6:69:38:ca:5e:c0:
ba:02:f5:7e:e5:1b:a0:31:80:53:5d:0a:53:30:7a:
fb:b6:c9:bd:9b:b6:65:cb:57:33:55:e3:f2:ee:41:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:11:04:73:D7:F1:08:FB:76:C4:7D:5D:5C:B7:C9:BD:EC:1C:5E:AF
X509v3 Authority Key Identifier:
keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/5C1126766ABD11EFB0544D38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.245.128.0/22
103.12.120.0/22
111.119.160.0/21
113.203.192.0/23
113.203.195.0/24
113.203.200.0-113.203.205.255
113.203.207.0/24
115.42.64.0/22
115.42.71.0/24
118.103.226.0-118.103.239.255
IPv6:
2406:d00::/48
2406:d00:2222::/48
2406:d00:5555::/48
2406:d00:aaaa::/48
2406:d00:bbbb::/48
2406:d00:ccaa::/47
2406:d00:ccc0::/46
2406:d00:cccc::/46
2406:d00:cce0::/48
2406:d00:ccea::/48
2406:d00:ddc1::/48
2406:d00:ddcc::/48
2406:d00:ddd1::/48
2406:d00:dddd::/48
2406:d00:ddf1::/48
2406:d00:ddff::/48
Signature Algorithm: sha256WithRSAEncryption
0e:54:8b:bc:a4:37:26:2f:5c:48:e3:2a:37:02:da:5f:a6:a8:
0b:43:63:6a:64:5a:f9:d0:00:0a:e9:2b:e5:77:eb:41:81:47:
60:ad:04:8e:0b:ee:10:6e:eb:4f:1e:3a:ac:27:a3:e5:dc:6b:
54:db:80:b5:9f:ad:03:bf:39:bc:d1:83:34:d1:45:39:a4:8e:
2b:ae:c6:1f:64:01:42:61:bc:e5:fe:30:4e:fd:7f:90:e4:4c:
4a:1c:c8:5e:7d:99:16:90:b2:f9:f1:a5:ba:ad:87:4e:f6:5e:
20:9c:cb:78:ee:9e:9f:b0:f5:be:f2:f2:2b:55:54:68:5c:8a:
2f:d1:21:d0:49:4c:1a:87:3d:4d:65:23:21:8e:3c:84:63:68:
f0:52:7e:7f:45:cf:fd:b6:96:ff:d3:93:89:0f:e6:06:c3:49:
27:b8:72:4a:a7:90:a4:8a:21:49:5b:01:37:7d:46:8b:b8:b4:
24:72:35:c8:36:fc:ed:a5:09:bb:93:a9:e2:ca:bf:45:58:2b:
d2:1b:7f:bf:06:7d:09:79:2d:36:4d:d4:86:b0:5c:bf:00:f0:
df:b8:fe:e8:03:a9:38:cf:5e:ce:14:fa:08:a2:76:18:07:7a:
1e:c2:4f:55:c7:4c:ef:60:53:7b:fd:e3:2c:fd:74:6d:fd:64:
47:88:eb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 10:15:51 2024 by rpki-client on console-ams.rpki-client.org