Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A9EA8D1C06AD11EEA78F4114C4F9AE02.roa
File: A9EA8D1C06AD11EEA78F4114C4F9AE02.roa (raw, json)
Hash identifier: V6rBsoUqKAtxC9h3zwL7NbkT4OP/AtjZMAzqDjdw//Q=
Subject key identifier: E4:E1:FF:1E:B9:1E:7B:5C:C5:56:C6:04:DA:C5:53:BD:29:03:9F:C8
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0C27
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A9EA8D1C06AD11EEA78F4114C4F9AE02.roa
Signing time: Tue 20 Jun 2023 16:34:20 +0000
ROA not before: Tue 20 Jun 2023 16:34:20 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 9387
IP address blocks: 103.11.60.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.248.0/22 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.179.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3111 (0xc27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jun 20 16:34:20 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6491d50c-a54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:40:4a:7b:17:2c:b7:21:9d:f8:51:2e:e9:77:
ac:3e:77:9d:04:a5:94:ad:51:cb:f6:21:8b:56:ca:
2b:33:cf:49:b0:d0:09:93:31:bc:66:85:a4:04:5b:
aa:68:49:6b:fd:88:b5:27:31:01:92:7d:93:34:fc:
50:56:da:fa:d4:7e:c4:9c:a5:c7:d4:b3:52:96:4e:
8c:4b:8f:71:24:df:8d:16:9b:14:6e:db:a7:73:1b:
73:28:25:d6:5f:2e:cd:b7:58:f8:73:2d:d7:36:4c:
db:08:a4:78:5d:b8:ee:20:2e:ab:d0:62:98:bd:23:
aa:8f:2d:18:2b:7f:b3:32:15:b4:02:08:8b:f9:39:
52:33:ad:c8:2c:3f:36:3e:a9:3b:ec:e4:95:70:67:
41:dd:c8:ba:02:35:a2:d8:99:61:5d:6e:e9:9d:b4:
1b:fd:44:47:95:53:f0:c5:09:12:ac:24:db:06:40:
cb:c6:03:6f:57:61:db:47:97:02:49:c8:0d:ae:79:
fe:a1:ce:0e:84:e9:ac:49:16:03:19:1d:54:f2:d2:
be:f1:f8:a2:e6:dc:66:1a:6b:d3:37:5f:4a:6c:a5:
06:70:30:78:ed:29:1c:c2:73:5e:17:65:c2:cf:f6:
a0:10:bd:9d:ac:dc:17:5d:6b:e2:a5:e7:19:e2:46:
87:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E1:FF:1E:B9:1E:7B:5C:C5:56:C6:04:DA:C5:53:BD:29:03:9F:C8
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A9EA8D1C06AD11EEA78F4114C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.60.0/24
113.203.208.0/24
113.203.211.0-113.203.216.255
113.203.219.0/24
113.203.222.0/24
113.203.225.0/24
113.203.228.0/22
113.203.234.0-113.203.240.255
113.203.243.0/24
113.203.248.0/22
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.149.0/24
180.178.151.0/24
180.178.168.0/24
180.178.170.0-180.178.172.255
180.178.174.0/23
180.178.178.0-180.178.183.255
180.178.188.0/22
223.29.227.0-223.29.231.255
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
54:9a:83:4c:1e:98:1f:f5:ee:d0:f7:d2:68:d5:0d:00:4b:d3:
20:f9:5d:8f:b9:71:b3:8d:1b:f8:58:fb:29:f2:36:20:70:3c:
9b:2d:d7:41:c2:80:ba:09:c4:ed:ed:d1:6d:3f:86:68:9c:ba:
51:cb:83:a0:d5:10:a1:84:55:2c:19:79:0d:6f:77:96:3d:e2:
6e:77:52:73:50:43:d3:b8:30:d8:35:b5:ab:e5:01:fe:9c:dd:
b8:a3:3d:d0:60:a0:10:6c:90:3b:9d:55:58:a4:88:83:17:ef:
03:88:91:f2:80:40:4d:76:fc:95:7a:c7:dc:d7:14:9d:62:66:
1b:08:cb:d8:ed:91:33:87:c1:d4:79:6d:2d:dd:2b:8e:6b:ca:
22:f3:47:f6:59:ef:50:1b:e8:0a:2f:ea:a1:21:1f:30:4f:ae:
d7:db:b7:10:17:25:6f:b5:df:7b:0e:6e:cd:78:e7:6f:58:44:
47:5e:70:cd:aa:00:ce:33:15:6c:08:cf:2b:52:6b:e5:9c:ff:
f1:6e:12:82:d0:91:87:f0:54:33:a5:88:fc:33:70:1b:8e:37:
66:61:36:2d:56:3f:3e:30:58:71:11:e2:8f:5c:a4:38:fa:17:
f5:9e:c3:89:a1:41:8b:a0:21:57:e3:ef:8c:30:f4:21:c5:c9:
59:3a:9b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:12 2023 by rpki-client on console-fra.rpki-client.org