Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/4D077E2E5B9911EFA06D2B3CC4F9AE02.roa
File: 4D077E2E5B9911EFA06D2B3CC4F9AE02.roa (raw, json)
Hash identifier: HcJgBhke7i8WRtYY9RpOMeCYLqEtRidKSJnX91EOA38=
Subject key identifier: 52:3B:1A:7A:30:F1:A6:EB:D0:CD:FA:DE:91:C9:00:F8:3F:0D:4F:1A
Certificate issuer: /CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Certificate serial: 0AAB
Authority key identifier: 92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/4D077E2E5B9911EFA06D2B3CC4F9AE02.roa
Signing time: Fri 16 Aug 2024 08:47:00 +0000
ROA not before: Fri 16 Aug 2024 08:47:00 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 4765
IP address blocks: 61.47.1.0/24 maxlen: 24
61.47.2.0/24 maxlen: 24
61.47.6.0/23 maxlen: 23
61.47.7.0/24 maxlen: 24
61.47.8.0/22 maxlen: 22
61.47.11.0/24 maxlen: 24
61.47.12.0/23 maxlen: 23
61.47.14.0/24 maxlen: 24
61.47.16.0/24 maxlen: 24
61.47.18.0/24 maxlen: 24
61.47.19.0/24 maxlen: 24
61.47.20.0/24 maxlen: 24
61.47.23.0/24 maxlen: 24
61.47.25.0/24 maxlen: 24
61.47.26.0/24 maxlen: 24
61.47.28.0/24 maxlen: 24
61.47.30.0/23 maxlen: 23
61.47.32.0/21 maxlen: 21
61.47.34.0/24 maxlen: 24
61.47.39.0/24 maxlen: 24
61.47.40.0/22 maxlen: 22
61.47.40.0/24 maxlen: 24
61.47.41.0/24 maxlen: 24
61.47.43.0/24 maxlen: 24
61.47.47.0/24 maxlen: 24
61.47.48.0/24 maxlen: 24
61.47.52.0/24 maxlen: 24
61.47.57.0/24 maxlen: 24
61.47.58.0/23 maxlen: 23
61.47.60.0/22 maxlen: 22
61.47.61.0/24 maxlen: 24
61.47.63.0/24 maxlen: 24
61.47.67.0/24 maxlen: 24
61.47.68.0/22 maxlen: 22
61.47.80.0/21 maxlen: 21
61.47.80.0/24 maxlen: 24
61.47.84.0/22 maxlen: 22
61.47.84.0/24 maxlen: 24
61.47.85.0/24 maxlen: 24
61.47.86.0/24 maxlen: 24
61.47.87.0/24 maxlen: 24
61.47.96.0/23 maxlen: 23
61.47.100.0/23 maxlen: 23
61.47.104.0/22 maxlen: 22
61.47.112.0/20 maxlen: 20
61.47.114.0/24 maxlen: 24
61.47.115.0/24 maxlen: 24
61.47.123.0/24 maxlen: 24
61.47.124.0/22 maxlen: 22
203.121.128.0/20 maxlen: 20
203.121.128.0/24 maxlen: 24
203.121.129.0/24 maxlen: 24
203.121.130.0/23 maxlen: 23
203.121.132.0/24 maxlen: 24
203.121.133.0/24 maxlen: 24
203.121.134.0/24 maxlen: 24
203.121.135.0/24 maxlen: 24
203.121.136.0/24 maxlen: 24
203.121.137.0/24 maxlen: 24
203.121.138.0/24 maxlen: 24
203.121.139.0/24 maxlen: 24
203.121.140.0/24 maxlen: 24
203.121.141.0/24 maxlen: 24
203.121.142.0/24 maxlen: 24
203.121.143.0/24 maxlen: 24
203.121.144.0/24 maxlen: 24
203.121.145.0/24 maxlen: 24
203.121.148.0/22 maxlen: 22
203.121.148.0/24 maxlen: 24
203.121.149.0/24 maxlen: 24
203.121.150.0/24 maxlen: 24
203.121.151.0/24 maxlen: 24
203.121.152.0/23 maxlen: 24
203.121.159.0/24 maxlen: 24
203.121.160.0/22 maxlen: 22
203.121.160.0/24 maxlen: 24
203.121.161.0/24 maxlen: 24
203.121.162.0/24 maxlen: 24
203.121.163.0/24 maxlen: 24
203.121.164.0/23 maxlen: 24
203.121.166.0/24 maxlen: 24
203.121.168.0/23 maxlen: 24
203.121.171.0/24 maxlen: 24
203.121.172.0/23 maxlen: 24
203.121.174.0/24 maxlen: 24
203.121.178.0/23 maxlen: 24
203.121.180.0/24 maxlen: 24
203.121.182.0/24 maxlen: 24
203.121.185.0/24 maxlen: 24
203.121.186.0/24 maxlen: 24
203.121.188.0/24 maxlen: 24
203.152.0.0/22 maxlen: 22
203.152.0.0/24 maxlen: 24
203.152.1.0/24 maxlen: 24
203.152.2.0/24 maxlen: 24
203.152.3.0/24 maxlen: 24
203.152.4.0/24 maxlen: 24
203.152.6.0/23 maxlen: 24
203.152.8.0/23 maxlen: 24
203.152.11.0/24 maxlen: 24
203.152.12.0/23 maxlen: 24
203.152.14.0/24 maxlen: 24
203.152.16.0/22 maxlen: 22
203.152.16.0/24 maxlen: 24
203.152.17.0/24 maxlen: 24
203.152.18.0/24 maxlen: 24
203.152.19.0/24 maxlen: 24
203.152.20.0/24 maxlen: 24
203.152.22.0/24 maxlen: 24
203.152.24.0/21 maxlen: 22
203.152.24.0/24 maxlen: 24
203.152.25.0/24 maxlen: 24
203.152.26.0/24 maxlen: 24
203.152.27.0/24 maxlen: 24
203.152.28.0/24 maxlen: 24
203.152.29.0/24 maxlen: 24
203.152.30.0/24 maxlen: 24
203.152.31.0/24 maxlen: 24
203.152.32.0/22 maxlen: 22
203.152.32.0/24 maxlen: 24
203.152.33.0/24 maxlen: 24
203.152.34.0/24 maxlen: 24
203.152.35.0/24 maxlen: 24
203.152.36.0/23 maxlen: 24
203.152.39.0/24 maxlen: 24
203.152.40.0/24 maxlen: 24
203.152.42.0/23 maxlen: 24
203.152.44.0/24 maxlen: 24
203.152.47.0/24 maxlen: 24
203.152.48.0/23 maxlen: 24
203.152.50.0/24 maxlen: 24
203.152.53.0/24 maxlen: 24
203.152.55.0/24 maxlen: 24
203.152.56.0/23 maxlen: 24
203.152.58.0/24 maxlen: 24
203.152.62.0/23 maxlen: 24
221.128.64.0/24 maxlen: 24
221.128.65.0/24 maxlen: 24
221.128.67.0/24 maxlen: 24
221.128.68.0/24 maxlen: 24
221.128.69.0/24 maxlen: 24
221.128.70.0/24 maxlen: 24
221.128.72.0/24 maxlen: 24
221.128.74.0/23 maxlen: 24
221.128.76.0/24 maxlen: 24
221.128.78.0/24 maxlen: 24
221.128.80.0/24 maxlen: 24
221.128.82.0/23 maxlen: 24
221.128.84.0/23 maxlen: 24
221.128.86.0/24 maxlen: 24
221.128.92.0/22 maxlen: 22
221.128.92.0/24 maxlen: 24
221.128.93.0/24 maxlen: 24
221.128.94.0/24 maxlen: 24
221.128.95.0/24 maxlen: 24
221.128.96.0/24 maxlen: 24
221.128.100.0/22 maxlen: 22
221.128.100.0/24 maxlen: 24
221.128.101.0/24 maxlen: 24
221.128.102.0/24 maxlen: 24
221.128.103.0/24 maxlen: 24
221.128.111.0/24 maxlen: 24
221.128.112.0/23 maxlen: 24
221.128.114.0/24 maxlen: 24
221.128.117.0/24 maxlen: 24
221.128.120.0/24 maxlen: 24
221.128.122.0/24 maxlen: 24
221.128.124.0/22 maxlen: 22
221.128.124.0/24 maxlen: 24
221.128.125.0/24 maxlen: 24
221.128.126.0/24 maxlen: 24
221.128.127.0/24 maxlen: 24
2400:1701::/32 maxlen: 32
2400:1701::/48 maxlen: 48
2400:1701:1::/48 maxlen: 48
2400:1701:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Aug 2024 02:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2731 (0xaab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A2/serialNumber=9287F6E82F8F3BA24E09D9C63178A5C0B2DA01DE
Validity
Not Before: Aug 16 08:47:00 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66bf1204-ecce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:14:8c:d8:89:ab:e3:0c:b0:a0:e2:c0:a8:f8:
c4:fe:36:12:b9:84:12:b9:27:ba:d6:58:83:2c:16:
40:3d:be:cd:f8:8b:ed:c4:8b:8a:e2:dc:08:85:b4:
6f:2b:4b:15:c1:e4:28:cd:33:16:9c:71:59:9e:2e:
4d:f5:25:29:84:f7:ed:57:c2:be:75:a7:99:f4:f0:
87:f3:2b:c4:43:4b:36:aa:4c:a0:22:22:1f:f5:83:
19:81:05:82:1f:a7:e4:36:59:4f:80:fa:ae:98:e0:
00:49:fb:39:9f:c5:ad:57:e3:01:58:f5:b8:de:b5:
99:65:17:84:07:a6:bc:7f:97:57:b0:28:29:e8:6d:
bc:92:76:b9:d5:5a:ff:67:34:bc:f6:48:7e:f9:b8:
c5:61:40:19:ed:0e:dc:2c:e6:12:32:f5:c9:a2:59:
2d:61:e3:70:12:77:ed:2d:be:82:0f:1e:3d:22:79:
12:c0:83:b7:01:1e:b8:30:f6:52:55:32:53:b4:9c:
c2:43:28:a7:2a:85:35:5c:1f:9d:ed:a4:d2:ef:dd:
90:92:be:3a:3d:b2:e4:02:8e:c8:62:c3:e7:8f:1b:
99:10:4c:e4:79:b4:16:34:b0:5c:fc:bb:c1:d9:f4:
5b:1b:2e:65:e0:2a:84:6d:16:6e:4a:2b:4b:01:9a:
d3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3B:1A:7A:30:F1:A6:EB:D0:CD:FA:DE:91:C9:00:F8:3F:0D:4F:1A
X509v3 Authority Key Identifier:
keyid:92:87:F6:E8:2F:8F:3B:A2:4E:09:D9:C6:31:78:A5:C0:B2:DA:01:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/kof26C-PO6JOCdnGMXilwLLaAd4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kof26C-PO6JOCdnGMXilwLLaAd4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A2/B5773AAC594211EA936FCE43C4F9AE02/4D077E2E5B9911EFA06D2B3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.47.1.0-61.47.2.255
61.47.6.0-61.47.14.255
61.47.16.0/24
61.47.18.0-61.47.20.255
61.47.23.0/24
61.47.25.0-61.47.26.255
61.47.28.0/24
61.47.30.0-61.47.43.255
61.47.47.0-61.47.48.255
61.47.52.0/24
61.47.57.0-61.47.63.255
61.47.67.0-61.47.71.255
61.47.80.0/21
61.47.96.0/23
61.47.100.0/23
61.47.104.0/22
61.47.112.0/20
203.121.128.0-203.121.145.255
203.121.148.0-203.121.153.255
203.121.159.0-203.121.166.255
203.121.168.0/23
203.121.171.0-203.121.174.255
203.121.178.0-203.121.180.255
203.121.182.0/24
203.121.185.0-203.121.186.255
203.121.188.0/24
203.152.0.0-203.152.4.255
203.152.6.0-203.152.9.255
203.152.11.0-203.152.14.255
203.152.16.0-203.152.20.255
203.152.22.0/24
203.152.24.0-203.152.37.255
203.152.39.0-203.152.40.255
203.152.42.0-203.152.44.255
203.152.47.0-203.152.50.255
203.152.53.0/24
203.152.55.0-203.152.58.255
203.152.62.0/23
221.128.64.0/23
221.128.67.0-221.128.70.255
221.128.72.0/24
221.128.74.0-221.128.76.255
221.128.78.0/24
221.128.80.0/24
221.128.82.0-221.128.86.255
221.128.92.0-221.128.96.255
221.128.100.0/22
221.128.111.0-221.128.114.255
221.128.117.0/24
221.128.120.0/24
221.128.122.0/24
221.128.124.0/22
IPv6:
2400:1701::/32
Signature Algorithm: sha256WithRSAEncryption
14:00:1c:1d:2d:73:26:95:2e:1f:a2:92:fd:47:96:12:40:4f:
62:7f:30:d4:76:3c:c7:22:8b:e0:42:53:7a:9e:b1:34:63:98:
f9:0c:94:f9:25:2e:b9:00:ed:76:77:d1:fd:2c:2e:8a:07:41:
f0:ca:50:36:1c:c8:33:fd:d6:f3:a6:76:e8:a1:c5:5a:3a:ef:
75:14:85:45:54:cc:99:06:93:02:18:bc:b2:fe:5a:c3:42:35:
69:1e:50:77:26:f6:5f:d4:5e:84:28:b8:2e:3c:01:d1:61:2f:
a2:cf:d6:c5:ec:ba:10:3f:1e:6d:03:6d:b2:56:39:27:49:b3:
bd:e9:0d:d1:33:68:3c:69:ea:ca:68:f1:6b:4a:0a:eb:92:2d:
b6:44:4b:08:67:d7:d7:f8:ff:55:d6:4e:a9:be:e1:3c:1b:0d:
06:e4:a2:91:e4:55:ae:70:be:99:8d:28:f6:a1:4c:20:81:0b:
92:54:03:1f:2d:93:fd:0e:09:2c:63:7e:73:c1:03:42:1a:0f:
f7:a4:74:8b:05:cd:ca:88:8c:d8:c3:0c:ed:fb:c4:e2:a5:26:
dc:32:93:c4:0c:1c:8b:26:b8:29:e0:c1:7d:aa:8f:84:d8:95:
56:7c:80:30:c7:af:e5:ae:c3:3f:8a:97:fd:d3:3c:d1:65:8e:
fe:bb:b4:c8
-----BEGIN CERTIFICATE-----
MIIHmzCCBoOgAwIBAgICCqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ3QTIxMTAvBgNVBAUTKDkyODdGNkU4MkY4RjNCQTI0RTA5RDlDNjMxNzhBNUMw
QjJEQTAxREUwHhcNMjQwODE2MDg0NzAwWhcNMjUwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NmJmMTIwNC1lY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2hSM2Imr4wywoOLAqPjE/jYSuYQSuSe61liDLBZAPb7N+IvtxIuK4twIhbRv
K0sVweQozTMWnHFZni5N9SUphPftV8K+daeZ9PCH8yvEQ0s2qkygIiIf9YMZgQWC
H6fkNllPgPqumOAASfs5n8WtV+MBWPW43rWZZReEB6a8f5dXsCgp6G28kna51Vr/
ZzS89kh++bjFYUAZ7Q7cLOYSMvXJolktYeNwEnftLb6CDx49InkSwIO3AR64MPZS
VTJTtJzCQyinKoU1XB+d7aTS792Qkr46PbLkAo7IYsPnjxuZEEzkebQWNLBc/LvB
2fRbGy5l4CqEbRZuSitLAZrTsQIDAQABo4IEvzCCBLswHQYDVR0OBBYEFFI7Gnow
8abr0M363pHJAPg/DU8aMB8GA1UdIwQYMBaAFJKH9ugvjzuiTgnZxjF4pcCy2gHe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMi9CNTc3M0FBQzU5
NDIxMUVBOTM2RkNFNDNDNEY5QUUwMi9rb2YyNkMtUE82Sk9DZG5HTVhpbHdMTGFB
ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tvZjI2Qy1QTzZKT0NkbkdNWGlsd0xMYUFkNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQ3QTIvQjU3NzNBQUM1OTQyMTFFQTkzNkZDRTQzQzRGOUFFMDIvNEQwNzdFMkU1
Qjk5MTFFRkEwNkQyQjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggJHBggrBgEFBQcBBwEB
/wSCAjYwggIyMIICHwQCAAEwggIXMAwDBAA9LwEDBAA9LwIwDAMEAT0vBgMEAD0v
DgMEAD0vEDAMAwQBPS8SAwQAPS8UAwQAPS8XMAwDBAA9LxkDBAA9LxoDBAA9Lxww
DAMEAT0vHgMEAj0vKDAMAwQAPS8vAwQAPS8wAwQAPS80MAwDBAA9LzkDBAY9LwAw
DAMEAD0vQwMEAz0vQAMEAz0vUAMEAT0vYAMEAT0vZAMEAj0vaAMEBD0vcDAMAwQH
y3mAAwQBy3mQMAwDBALLeZQDBAHLeZgwDAMEAMt5nwMEAMt5pgMEAct5qDAMAwQA
y3mrAwQAy3muMAwDBAHLebIDBADLebQDBADLebYwDAMEAMt5uQMEAMt5ugMEAMt5
vDALAwMDy5gDBADLmAQwDAMEAcuYBgMEAcuYCDAMAwQAy5gLAwQAy5gOMAwDBATL
mBADBADLmBQDBADLmBYwDAMEA8uYGAMEAcuYJDAMAwQAy5gnAwQAy5goMAwDBAHL
mCoDBADLmCwwDAMEAMuYLwMEAMuYMgMEAMuYNTAMAwQAy5g3AwQAy5g6AwQBy5g+
AwQB3YBAMAwDBADdgEMDBADdgEYDBADdgEgwDAMEAd2ASgMEAN2ATAMEAN2ATgME
AN2AUDAMAwQB3YBSAwQA3YBWMAwDBALdgFwDBADdgGADBALdgGQwDAMEAN2AbwME
AN2AcgMEAN2AdQMEAN2AeAMEAN2AegMEAt2AfDANBAIAAjAHAwUAJAAXATANBgkq
hkiG9w0BAQsFAAOCAQEAFAAcHS1zJpUuH6KS/UeWEkBPYn8w1HY8xyKL4EJTep6x
NGOY+QyU+SUuuQDtdnfR/SwuigdB8MpQNhzIM/3W86Z26KHFWjrvdRSFRVTMmQaT
Ahi8sv5aw0I1aR5Qdyb2X9RehCi4LjwB0WEvos/Wxey6ED8ebQNtslY5J0mzvekN
0TNoPGnqymjxa0oK65IttkRLCGfX1/j/VdZOqb7hPBsNBuSikeRVrnC+mY0o9qFM
IIELklQDHy2T/Q4JLGN+c8EDQhoP96R0iwXNyoiM2MMM7fvE4qUm3DKTxAwciya4
KeDBfaqPhNiVVnyAMMev5a7DP4qX/dM80WWO/ru0yA==
-----END CERTIFICATE-----
Generated at Wed Aug 21 06:08:46 2024 by rpki-client on console-fra.rpki-client.org