Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B0FFD1EAC69911EF900C4A37C4F9AE02.roa
File: B0FFD1EAC69911EF900C4A37C4F9AE02.roa (raw, json)
Hash identifier: 6vVuHdISsgIQUoKcLPZClEx0h7lvvSwduPMYT3cUwG0=
Subject key identifier: 47:BF:70:6E:41:C5:47:4B:B7:A0:F0:97:F2:46:9F:D8:03:B6:84:1B
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 204C
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B0FFD1EAC69911EF900C4A37C4F9AE02.roa
Signing time: Mon 30 Dec 2024 10:34:47 +0000
ROA not before: Mon 30 Dec 2024 10:34:47 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.52.0/24 maxlen: 24
115.167.53.0/24 maxlen: 24
115.167.54.0/24 maxlen: 24
115.167.55.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Dec 2024 10:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8268 (0x204c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 30 10:34:47 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67727747-503e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d3:f0:cf:ec:f1:e6:46:10:47:46:c3:f1:74:
21:ef:6e:56:9a:a9:61:2b:12:e4:03:73:ff:10:fe:
56:0d:eb:b0:05:98:9b:b9:79:7a:ec:e7:f3:1c:dd:
35:fe:90:89:4c:e1:8a:b3:91:12:dc:0e:08:b0:05:
11:34:b7:9c:c7:37:b1:20:3c:00:f1:93:0f:1d:c8:
bc:4c:a2:d8:c9:34:1c:e5:ee:95:eb:c3:f2:07:7c:
e4:cc:ac:ee:25:47:f9:9e:7b:0c:6e:d5:f2:7b:9a:
0f:93:6b:fa:c2:42:d1:8b:c8:e9:72:ce:7a:a5:c0:
99:0d:3e:12:52:2e:1d:51:67:fc:80:24:54:8d:9b:
bc:36:10:60:83:f4:ea:8e:36:2d:dc:d5:84:b9:c7:
2e:82:01:49:15:79:08:86:00:42:4c:93:a1:a8:a3:
0d:8f:fa:e1:21:0e:67:78:f8:c2:e4:7c:38:a7:ec:
eb:8e:2a:82:59:57:f6:12:0f:e8:5e:a2:03:3e:19:
cd:cd:14:e5:d9:f7:91:b5:50:d4:a5:ba:98:25:e3:
f0:6b:0a:01:1b:ea:6b:44:ae:76:59:93:88:a8:62:
6e:c0:3b:97:e1:6a:0b:f8:10:ce:e9:40:26:79:76:
10:aa:6a:17:34:6c:59:59:91:9f:a5:09:83:1a:17:
46:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BF:70:6E:41:C5:47:4B:B7:A0:F0:97:F2:46:9F:D8:03:B6:84:1B
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B0FFD1EAC69911EF900C4A37C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.225.0-43.226.227.255
103.151.27.0/24
113.203.224.0/23
113.203.227.0/24
113.203.243.0/24
115.167.3.0/24
115.167.5.0/24
115.167.9.0/24
115.167.12.0/22
115.167.28.0/24
115.167.52.0/22
115.167.101.0/24
115.167.103.0/24
175.110.111.0/24
180.178.165.0/24
180.178.167.0-180.178.168.255
223.29.231.0/24
223.29.235.0/24
223.29.237.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
78:bf:7b:48:29:e7:b5:af:f4:20:a2:56:38:20:6e:f4:26:d6:
45:24:e9:b7:ff:d5:a1:b4:82:80:25:c6:3f:35:4e:f3:6f:ab:
ba:0c:62:83:8a:dc:b7:7b:e4:0b:bf:0f:9b:e6:56:d6:f7:e1:
f0:41:91:2d:63:4b:6e:6d:f6:36:ee:11:f3:df:98:e7:39:c6:
d4:88:5a:c3:d5:82:26:3d:89:eb:9a:d2:f9:e7:c3:e8:0a:6b:
20:ed:8c:e0:c8:e2:0f:dc:9c:eb:be:e5:ae:d9:1a:f9:3b:2e:
b0:9a:d0:43:e0:fd:81:b4:df:05:45:eb:5b:5d:18:49:2a:ff:
a8:54:02:92:14:41:78:30:ce:10:30:db:37:25:5d:84:9d:93:
e2:17:b5:ac:af:0e:d9:d9:1e:85:b2:71:80:f4:a4:c3:73:e9:
6e:2b:cf:e0:9e:e5:de:a6:18:d5:44:cb:81:5e:a2:44:3c:55:
85:bf:cf:d2:11:53:b3:22:2e:03:6b:5c:67:ad:7e:d2:eb:c5:
1b:b8:64:3b:47:0c:5c:6a:56:f6:c0:61:d2:66:53:91:7e:d4:
5c:eb:9e:ad:a4:56:24:22:95:2d:28:42:81:66:c5:b7:18:b4:
6f:92:08:35:83:68:ed:e3:d7:9f:07:ca:8d:cd:a9:78:c9:ea:
b1:10:47:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 2 06:34:47 2025 by rpki-client