Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/55C36A728CF511EF93E5A521C4F9AE02.roa
File: 55C36A728CF511EF93E5A521C4F9AE02.roa (raw, json)
Hash identifier: 4GHzg4e7D73M6rAtgQpds3ifbnnpGpGslVqS/JUdmWQ=
Subject key identifier: 0E:4D:12:2A:4A:7A:2A:EE:E1:E0:6D:BD:CE:56:C7:BF:A4:78:F8:76
Certificate issuer: /CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B
Certificate serial: 0A0C
Authority key identifier: A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/55C36A728CF511EF93E5A521C4F9AE02.roa
Signing time: Fri 18 Oct 2024 02:04:41 +0000
ROA not before: Fri 18 Oct 2024 02:04:41 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 9229
IP address blocks: 202.174.128.0/19 maxlen: 19
202.174.130.0/24 maxlen: 24
202.174.136.0/24 maxlen: 24
202.174.137.0/24 maxlen: 24
202.174.138.0/24 maxlen: 24
202.174.139.0/24 maxlen: 24
202.174.140.0/24 maxlen: 24
202.174.141.0/24 maxlen: 24
202.174.142.0/24 maxlen: 24
202.174.143.0/24 maxlen: 24
202.174.144.0/24 maxlen: 24
202.174.145.0/24 maxlen: 24
202.174.146.0/24 maxlen: 24
202.174.147.0/24 maxlen: 24
202.174.148.0/24 maxlen: 24
202.174.149.0/24 maxlen: 24
202.174.150.0/24 maxlen: 24
202.174.151.0/24 maxlen: 24
202.174.152.0/24 maxlen: 24
202.174.153.0/24 maxlen: 24
202.174.154.0/24 maxlen: 24
202.174.155.0/24 maxlen: 24
202.174.156.0/24 maxlen: 24
202.174.157.0/24 maxlen: 24
202.174.158.0/24 maxlen: 24
202.174.159.0/24 maxlen: 24
203.88.64.0/19 maxlen: 19
203.88.64.0/24 maxlen: 24
203.88.65.0/24 maxlen: 24
203.88.66.0/24 maxlen: 24
203.88.67.0/24 maxlen: 24
203.88.68.0/24 maxlen: 24
203.88.69.0/24 maxlen: 24
203.88.70.0/24 maxlen: 24
203.88.71.0/24 maxlen: 24
203.88.72.0/24 maxlen: 24
203.88.73.0/24 maxlen: 24
203.88.74.0/24 maxlen: 24
203.88.75.0/24 maxlen: 24
203.88.76.0/24 maxlen: 24
203.88.77.0/24 maxlen: 24
203.88.78.0/24 maxlen: 24
203.88.79.0/24 maxlen: 24
203.88.80.0/24 maxlen: 24
203.88.81.0/24 maxlen: 24
203.88.82.0/24 maxlen: 24
203.88.83.0/24 maxlen: 24
203.88.84.0/24 maxlen: 24
203.88.85.0/24 maxlen: 24
203.88.86.0/24 maxlen: 24
203.88.87.0/24 maxlen: 24
203.88.88.0/24 maxlen: 24
203.88.89.0/24 maxlen: 24
203.88.90.0/24 maxlen: 24
203.88.91.0/24 maxlen: 24
203.88.92.0/24 maxlen: 24
203.88.93.0/24 maxlen: 24
203.88.94.0/24 maxlen: 24
203.88.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 18 Oct 2024 03:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2572 (0xa0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3E27/serialNumber=A272ACAFE8FAA4F2A9700A6FC11425908C743D4B
Validity
Not Before: Oct 18 02:04:41 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6711c238-ce27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:56:45:4f:2a:4a:62:15:1d:92:e2:f0:33:
36:41:b9:24:35:b0:a0:4f:e3:59:7c:5c:82:b4:2e:
0d:81:a0:cb:ab:0b:cd:b6:c6:c4:9d:69:8f:7c:a3:
a7:e0:d0:15:d0:78:db:7c:5a:c0:55:4d:5d:4b:1d:
20:c6:1c:c0:6f:80:5c:26:50:70:e9:cb:5b:e7:15:
8f:68:95:a1:f1:87:ed:5a:86:7b:fc:dd:96:c0:1f:
b2:bb:47:75:86:17:b1:c1:95:14:c1:7e:a2:db:e7:
40:d3:c1:57:77:b4:ab:7e:6f:98:21:66:91:83:34:
e0:eb:11:85:84:72:48:b0:4d:2d:a1:24:13:98:d3:
ef:78:53:87:23:63:16:be:c6:de:65:0e:27:20:68:
0c:f3:e9:fb:8e:a0:b6:f7:f8:6d:fb:04:c8:66:a4:
0e:ed:c2:fe:d9:61:da:fe:4c:63:b3:21:76:1e:55:
24:dd:af:cf:48:80:92:d9:71:21:5b:14:c6:fe:ff:
f4:a4:cb:94:36:5b:51:2e:9b:f2:60:5a:01:e7:ae:
f9:7d:7f:7b:86:b0:89:fa:08:16:64:6a:48:56:f7:
c9:c9:b0:d4:79:16:25:ff:00:e6:de:6e:8c:e5:68:
e3:28:74:13:d6:37:c4:74:b7:e0:28:96:f4:da:f4:
93:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4D:12:2A:4A:7A:2A:EE:E1:E0:6D:BD:CE:56:C7:BF:A4:78:F8:76
X509v3 Authority Key Identifier:
keyid:A2:72:AC:AF:E8:FA:A4:F2:A9:70:0A:6F:C1:14:25:90:8C:74:3D:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/onKsr-j6pPKpcApvwRQlkIx0PUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/onKsr-j6pPKpcApvwRQlkIx0PUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E27/F38887666F3A11EA9840133DC4F9AE02/55C36A728CF511EF93E5A521C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.174.128.0/19
203.88.64.0/19
Signature Algorithm: sha256WithRSAEncryption
44:9e:44:28:e7:9b:b6:07:8a:82:43:9f:6e:8f:a4:7f:10:21:
a0:a3:89:3c:00:81:6e:2d:39:3d:a4:89:ea:fd:69:19:e7:14:
9c:b8:6f:26:6f:49:cf:d9:5b:34:41:26:4c:b8:0e:e7:60:94:
f8:ea:04:fb:ff:4d:e2:a0:7a:5a:60:05:35:a0:b9:59:98:b9:
65:63:0c:e0:d8:73:e3:ab:16:42:0d:2d:68:cd:2b:c7:fb:05:
0a:8b:9d:0e:5b:a6:32:aa:7b:2d:39:26:31:e8:82:62:2b:e9:
56:1d:da:fc:6c:35:70:91:bb:ce:bb:c0:a5:db:f8:fd:89:2c:
b3:27:6b:4c:6c:ec:c4:8d:9b:68:7b:34:9e:88:72:d3:6e:4d:
31:9b:39:f3:db:1b:5e:9a:03:ca:f9:43:56:2c:51:6b:56:d6:
2c:75:f0:4f:18:4b:85:02:60:ef:a0:33:0c:f9:83:01:07:ee:
c6:f4:39:e8:8e:74:9d:f4:d1:f2:7b:b5:4a:96:fe:55:a1:b9:
b3:2d:d5:c7:fa:03:02:3a:bd:6b:50:8d:2a:a0:8d:88:92:af:
60:cf:b7:c1:6e:2d:eb:08:9b:33:08:65:2b:ce:38:3c:26:3d:
72:61:f7:22:6c:48:9e:33:88:b4:0d:06:54:50:cc:da:d8:ca:
ee:e0:cd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 05:29:01 2024 by rpki-client on console-fra.rpki-client.org