Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E7E0C6CC370711F0BBEE6253C4F9AE02.roa
File: E7E0C6CC370711F0BBEE6253C4F9AE02.roa (raw, json)
Hash identifier: nWkn8PAIViOmYUo+wNLe0q9Pzb+DeCY1Y/Ra+C5i86E=
Subject key identifier: 75:41:4F:14:F9:B0:9D:40:FB:C6:A3:08:D9:51:47:3B:DD:9F:96:B4
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 272E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E7E0C6CC370711F0BBEE6253C4F9AE02.roa
Signing time: Thu 22 May 2025 12:25:54 +0000
ROA not before: Thu 22 May 2025 12:25:54 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
103.151.26.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.11.0/24 maxlen: 24
115.167.12.0/24 maxlen: 24
115.167.13.0/24 maxlen: 24
115.167.15.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.61.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.96.0/22 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.112.0/22 maxlen: 24
115.167.116.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.120.0/24 maxlen: 24
115.167.121.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.64.0/24 maxlen: 24
175.110.65.0/24 maxlen: 24
175.110.66.0/24 maxlen: 24
175.110.67.0/24 maxlen: 24
175.110.90.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.102.0/24 maxlen: 24
175.110.103.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 12:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10030 (0x272e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 22 12:25:54 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=682f17d2-5bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:23:48:5f:07:10:20:fd:e6:63:d6:9e:62:2c:
31:b2:5e:c5:f0:ff:be:78:8e:04:6f:68:7e:6a:37:
05:15:f2:9f:3d:5f:43:8c:b6:ad:3e:5f:36:cc:8d:
7e:9e:2a:db:f7:59:ff:7c:a9:b9:7f:43:b6:bc:6f:
8a:a3:40:19:ce:af:be:4b:f1:7e:4e:62:5e:e7:d2:
0a:42:5b:51:d8:85:e3:0e:25:2d:73:24:d2:e6:b8:
db:bd:a2:35:9f:df:38:95:84:a5:8e:ab:54:81:c0:
fb:89:75:4b:a4:ec:0d:d9:b8:21:39:2c:fa:23:c9:
16:45:cd:e9:e3:d8:e7:08:24:fc:0e:2b:a5:31:ac:
79:52:1d:97:c4:3d:90:d7:ad:ef:74:01:67:07:c2:
2a:27:1c:98:91:29:86:6d:53:26:ab:c4:cd:b6:e4:
9d:1a:be:a6:bc:6b:7b:cc:9c:f7:64:62:ed:08:f2:
9f:ed:2d:1f:35:98:11:dd:b4:2b:97:18:3a:b9:73:
55:8d:03:a7:26:29:14:10:aa:8c:d6:ef:4e:d0:e8:
89:20:a8:4a:e3:06:e6:c1:cc:a4:bc:64:47:3d:8f:
8c:c7:08:3a:16:9b:75:d7:95:9c:89:c8:a7:35:cd:
a7:5e:7e:dc:67:dc:56:6e:60:a5:ed:41:3f:78:a9:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:41:4F:14:F9:B0:9D:40:FB:C6:A3:08:D9:51:47:3B:DD:9F:96:B4
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/E7E0C6CC370711F0BBEE6253C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
103.151.26.0/23
113.203.208.0-113.203.219.255
113.203.224.0/21
113.203.233.0/24
113.203.241.0-113.203.246.255
113.203.248.0/24
113.203.252.0/22
115.167.2.0/24
115.167.6.0/24
115.167.11.0-115.167.13.255
115.167.15.0-115.167.23.255
115.167.28.0/22
115.167.48.0/24
115.167.50.0/24
115.167.56.0/22
115.167.61.0/24
115.167.64.0/24
115.167.96.0/22
115.167.101.0-115.167.103.255
115.167.112.0-115.167.125.255
175.110.64.0/22
175.110.90.0/23
175.110.102.0/23
180.178.142.0/24
180.178.144.0/24
180.178.146.0-180.178.150.255
180.178.168.0/22
180.178.185.0-180.178.188.255
180.178.190.0/23
202.92.18.0-202.92.20.255
202.92.26.0/24
223.29.225.0-223.29.226.255
223.29.228.0/22
223.29.235.0-223.29.236.255
223.29.238.0/23
Signature Algorithm: sha256WithRSAEncryption
13:38:73:1a:b3:54:7a:d6:96:77:f6:ca:44:31:e2:3d:34:53:
b4:90:f0:f3:92:fd:0e:22:0d:06:07:da:9e:9b:bd:4c:9f:89:
33:03:b1:2b:61:58:5f:6a:71:86:a3:b0:a6:d4:a8:9c:72:5a:
3c:21:14:3d:37:85:fd:41:65:bc:47:32:f9:e1:77:74:18:24:
3e:e8:6c:c0:7e:b6:c6:41:2f:93:0e:82:2f:dd:9f:a6:dd:f4:
f3:ee:0d:b9:60:8d:a3:11:8f:f4:07:20:d6:f4:a0:72:0e:d1:
d7:a6:a5:cb:4c:12:fd:ed:93:14:1f:6d:a0:6d:2d:40:0f:17:
e5:58:1a:26:ae:6d:c9:d1:3f:e3:5c:7a:20:3c:38:0b:14:d8:
65:7e:70:34:d8:55:85:dd:44:2a:21:63:41:15:20:5f:e1:01:
33:44:db:38:f2:d0:00:8c:3a:27:8b:e4:cb:e5:7c:92:d2:26:
79:d9:0b:16:33:a9:2a:38:9f:f5:91:5d:2d:0f:c7:8c:2d:e3:
95:12:d5:93:f9:6b:14:50:0d:c5:f4:54:b7:86:ab:64:14:aa:
a7:82:11:a1:e7:3f:15:fe:6b:c7:82:a6:44:1f:5f:91:15:24:
e2:a7:49:4f:17:c5:44:8b:7a:f2:f3:28:27:66:76:45:dc:ff:
10:9a:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:52:19 2025 by rpki-client