Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D408F54AADE011EEB7301477C4F9AE02.roa
File: D408F54AADE011EEB7301477C4F9AE02.roa (raw, json)
Hash identifier: DuONuq/XO5xrxKFZMoOwbvuaxjLoXvJXNeOqv9yqGZY=
Subject key identifier: B7:D3:40:BA:F4:77:10:38:F3:FF:9A:2D:4F:74:D9:1B:DE:3D:DB:2B
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0F53
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D408F54AADE011EEB7301477C4F9AE02.roa
Signing time: Tue 09 Jan 2024 10:41:15 +0000
ROA not before: Tue 09 Jan 2024 10:41:15 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 138241
IP address blocks: 113.203.208.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
115.167.1.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.49.0/24 maxlen: 24
115.167.60.0/22 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.104.0/22 maxlen: 24
115.167.112.0/22 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.152.0/21 maxlen: 21
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 04:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3923 (0xf53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jan 9 10:41:15 2024 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=659d22cb-dce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:56:be:27:8f:ce:2b:55:fe:6b:a5:59:58:51:
51:e5:d1:6e:06:f2:08:6b:c8:89:ef:bf:e0:e2:ef:
05:c2:03:cd:13:7a:46:9a:c4:90:e0:26:f0:62:9a:
54:f9:28:8d:7e:4a:52:7d:20:4c:44:1d:b6:84:05:
55:ad:7c:d6:4f:8f:9b:4a:4a:33:f0:77:a8:51:18:
b6:d9:bb:b9:16:7c:ca:4b:9f:de:7d:52:75:f9:ee:
6c:32:86:9b:d9:69:4c:8f:51:b4:8b:84:26:5a:db:
6f:f3:f4:f5:b7:d5:f6:e2:7b:fd:d6:f9:65:62:83:
fb:39:68:c9:29:ef:73:0b:8a:7a:6b:d7:0f:8e:00:
2c:c4:b1:c4:c8:29:5f:e2:af:ff:ae:d9:49:e3:a4:
b8:8c:2c:63:83:89:1b:30:cb:e5:cd:5a:57:bb:6b:
91:83:87:dd:cc:aa:f9:70:59:e7:16:50:c3:9c:ac:
3d:b4:aa:5e:e9:f0:e3:ce:12:96:c5:4d:32:23:26:
49:f0:ba:27:b8:38:f9:8f:a0:c1:a6:11:71:cf:2c:
ba:fc:3f:ec:ae:27:ca:da:18:a0:08:58:8b:6b:6a:
c3:98:c9:8f:07:78:86:9d:70:49:27:99:bf:9a:fd:
29:30:8e:10:1d:96:a2:79:74:37:a7:f3:cc:6f:b6:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D3:40:BA:F4:77:10:38:F3:FF:9A:2D:4F:74:D9:1B:DE:3D:DB:2B
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/D408F54AADE011EEB7301477C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.208.0/24
113.203.216.0/24
113.203.231.0/24
113.203.248.0/24
113.203.250.0/24
115.167.1.0/24
115.167.16.0/22
115.167.49.0/24
115.167.60.0/22
115.167.78.0/24
115.167.104.0/22
115.167.112.0-115.167.123.255
175.110.80.0/22
175.110.88.0/22
175.110.105.0-175.110.106.255
175.110.111.0/24
180.178.152.0/21
202.92.18.0/24
202.92.20.0/24
223.29.227.0/24
223.29.229.0-223.29.230.255
223.29.235.0-223.29.236.255
223.29.238.0/24
Signature Algorithm: sha256WithRSAEncryption
07:40:2a:bf:9c:07:f6:14:f3:4e:20:53:a5:24:23:fc:e3:ab:
20:68:2b:c8:a6:87:99:79:ae:82:88:76:72:c7:46:47:50:74:
19:d3:d5:00:e5:f2:96:9b:86:f0:12:6d:0b:5b:8f:b2:1d:50:
36:b2:9d:39:f4:2d:52:75:2a:74:63:c8:ba:05:ce:4d:f2:36:
6e:c1:74:8b:20:9d:06:83:12:e4:52:2a:ef:6a:9a:e1:7e:95:
3d:89:66:fd:72:3e:77:7d:a1:f8:33:f5:8c:1a:f6:57:eb:e1:
e6:e2:c6:11:b4:e1:62:6e:e2:81:8d:d9:8e:29:81:5f:ad:aa:
0b:0f:86:fe:ee:75:39:40:58:50:1c:07:a4:44:9b:e1:99:cc:
f7:77:ee:d7:fe:82:a1:ef:c2:6b:95:d3:ba:ec:83:59:18:91:
66:d9:ca:64:91:02:cf:d5:72:90:6e:04:5d:9d:44:73:1f:dc:
a0:20:34:00:4f:8a:c5:f3:6a:25:77:82:a1:bc:a9:d6:8a:fa:
b0:60:76:19:36:e2:a0:ad:c8:32:a8:97:3d:97:4a:11:8d:e2:
d6:3c:2a:07:c3:63:9c:1a:8a:e7:17:5a:7a:f3:3b:27:46:b5:
a5:42:e5:26:97:1a:7e:80:87:00:c6:73:c6:49:ac:a9:5d:90:
82:23:38:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 05:01:46 2024 by rpki-client on console-ams.rpki-client.org