Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/92E2A76836CC11EEBA35896BC4F9AE02.roa
File: 92E2A76836CC11EEBA35896BC4F9AE02.roa (raw, json)
Hash identifier: BY8XeqZt9hvTgRPDumQHL8/wDLyddgYNhlami0SOjZo=
Subject key identifier: 8A:7D:73:5C:50:1E:DE:23:48:92:8E:5A:3C:CF:CF:97:D5:D0:9C:43
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0CAD
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/92E2A76836CC11EEBA35896BC4F9AE02.roa
Signing time: Wed 09 Aug 2023 15:51:16 +0000
ROA not before: Wed 09 Aug 2023 15:51:16 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 9387
IP address blocks: 43.254.12.0/22 maxlen: 24
103.11.60.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.248.0/22 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.176.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.185.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3245 (0xcad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 9 15:51:16 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64d3b5f4-03bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9a:ea:f4:d7:88:89:7e:93:a1:25:93:87:8f:
17:87:0e:92:f3:1b:85:5b:95:84:44:d3:bb:0b:97:
ce:57:68:da:a3:c7:7a:8f:0f:52:b1:76:4e:f3:39:
23:d6:89:70:f9:a7:aa:d1:be:e6:69:28:6a:d3:53:
29:68:cd:87:b3:89:17:0c:66:b1:6d:3b:04:f2:53:
4a:c2:36:5f:5d:71:1f:ea:8c:a9:4e:a3:c0:d1:53:
f7:ff:8b:50:3e:52:1d:fc:bb:74:00:7d:76:88:e6:
66:85:ef:e8:59:3f:94:b6:44:f6:85:c9:a9:42:a5:
1d:14:2b:2b:d3:8f:9c:da:99:1b:7b:44:f5:57:4d:
5c:d9:8d:11:2c:e1:02:05:b9:40:7f:ac:38:36:46:
6d:0a:18:c7:93:ce:38:22:b8:4e:ca:0e:df:c3:d2:
ce:17:83:1e:4c:ed:c8:4e:21:ca:d9:36:5f:3d:04:
21:ec:cd:5b:95:e4:ed:45:af:6f:a6:4e:cf:a4:59:
7d:b9:4a:e2:cf:96:c5:cc:86:dc:33:bc:a7:5c:76:
5d:94:8e:c0:24:71:f0:df:16:07:9b:4e:27:42:07:
25:12:30:8d:46:ce:95:8f:d2:f5:05:60:e7:f2:b7:
18:76:ee:54:5b:a4:be:64:8a:78:4c:4f:ac:ef:ba:
17:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7D:73:5C:50:1E:DE:23:48:92:8E:5A:3C:CF:CF:97:D5:D0:9C:43
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/92E2A76836CC11EEBA35896BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.12.0/22
103.11.60.0/24
113.203.212.0-113.203.216.255
113.203.218.0-113.203.220.255
113.203.222.0/24
113.203.225.0/24
113.203.228.0/22
113.203.234.0-113.203.240.255
113.203.243.0/24
113.203.248.0/22
113.203.253.0-113.203.254.255
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.148.0/23
180.178.151.0/24
180.178.162.0/24
180.178.164.0/22
180.178.172.0-180.178.176.255
180.178.178.0/24
180.178.180.0/22
180.178.185.0/24
180.178.187.0-180.178.191.255
223.29.226.0-223.29.231.255
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
98:62:3b:a2:71:4a:a3:11:4f:73:c2:7b:ba:1c:72:ba:16:c4:
88:29:01:8a:fa:73:c6:94:4d:e3:9d:ea:24:fd:be:02:3d:c4:
cd:d2:16:dd:30:b9:d1:e3:58:ff:b1:8a:21:0d:ac:0c:36:50:
01:94:af:12:6e:21:4b:8c:a4:ab:9e:5f:47:89:b8:18:cf:7c:
48:8a:b8:2b:1c:ce:1f:86:83:f7:01:6d:bf:99:08:df:1b:7d:
ad:0f:8f:89:92:e0:b9:7c:21:a3:8f:31:dc:ed:d3:2f:e8:93:
b1:ec:be:48:32:88:45:36:ef:46:71:46:cf:6b:e3:b8:58:83:
5d:e3:5b:95:ea:f9:76:55:0c:9c:cf:14:8a:42:9a:91:02:bd:
c4:d0:b6:ec:8d:1e:3b:59:ca:a9:69:c5:ef:73:15:5d:6f:a9:
54:9d:b0:7b:d3:b9:f6:29:59:7f:b1:e4:16:5d:8e:b0:ea:81:
8a:c3:c7:a3:34:ff:db:66:12:48:03:ee:7c:a7:60:ee:c0:a0:
cb:4a:3c:e8:a0:88:0e:63:c0:f2:0d:e8:5f:5e:5a:41:82:96:
7f:49:b0:8f:32:e1:8c:5f:c5:2e:fe:1f:5e:58:f8:d7:d5:f4:
31:c6:9e:e3:9a:b8:c4:ca:3d:85:9c:62:40:da:5b:97:99:c6:
31:68:97:a4
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgICDK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwODA5MTU1MTE2WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGQzYjVmNC0wM2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwprq9NeIiX6ToSWTh48Xhw6S8xuFW5WERNO7C5fOV2jao8d6jw9SsXZO8zkj
1olw+aeq0b7maShq01MpaM2Hs4kXDGaxbTsE8lNKwjZfXXEf6oypTqPA0VP3/4tQ
PlId/Lt0AH12iOZmhe/oWT+UtkT2hcmpQqUdFCsr04+c2pkbe0T1V01c2Y0RLOEC
BblAf6w4NkZtChjHk844IrhOyg7fw9LOF4MeTO3ITiHK2TZfPQQh7M1bleTtRa9v
pk7PpFl9uUriz5bFzIbcM7ynXHZdlI7AJHHw3xYHm04nQgclEjCNRs6Vj9L1BWDn
8rcYdu5UW6S+ZIp4TE+s77oXmQIDAQABo4IDbDCCA2gwHQYDVR0OBBYEFIp9c1xQ
Ht4jSJKOWjzPz5fV0JxDMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvOTJFMkE3Njgz
NkNDMTFFRUJBMzU4OTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgfUGCCsGAQUFBwEHAQH/
BIHlMIHiMIHfBAIAATCB2AMEAiv+DAMEAGcLPDAMAwQCccvUAwQAccvYMAwDBAFx
y9oDBABxy9wDBABxy94DBABxy+EDBAJxy+QwDAMEAXHL6gMEAHHL8AMEAHHL8wME
AnHL+DAMAwQAccv9AwQAccv+AwQBtLKAMAwDBAK0soQDBAK0sogDBAG0spQDBAC0
spcDBAC0sqIDBAK0sqQwDAMEArSyrAMEALSysAMEALSysgMEArSytAMEALSyuTAM
AwQAtLK7AwQGtLKAMAwDBAHfHeIDBAPfHeAwDAMEAN8d6wMEAN8d7jANBgkqhkiG
9w0BAQsFAAOCAQEAmGI7onFKoxFPc8J7uhxyuhbEiCkBivpzxpRN453qJP2+Aj3E
zdIW3TC50eNY/7GKIQ2sDDZQAZSvEm4hS4ykq55fR4m4GM98SIq4KxzOH4aD9wFt
v5kI3xt9rQ+PiZLguXwho48x3O3TL+iTsey+SDKIRTbvRnFGz2vjuFiDXeNbler5
dlUMnM8UikKakQK9xNC27I0eO1nKqWnF73MVXW+pVJ2we9O59ilZf7HkFl2OsOqB
isPHozT/22YSSAPufKdg7sCgy0o86KCIDmPA8g3oX15aQYKWf0mwjzLhjF/FLv4f
Xlj419X0Mcae45q4xMo9hZxiQNpbl5nGMWiXpA==
-----END CERTIFICATE-----
Generated at Sun Aug 27 17:27:47 2023 by rpki-client on console-fra.rpki-client.org