Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F36592F69FF511EFA09DA247C4F9AE02.roa
File: F36592F69FF511EFA09DA247C4F9AE02.roa (raw, json)
Hash identifier: yjGPtYaRU4JpVg05vDa4pzXilWX6Jg3wUD1cjgAgMgI=
Subject key identifier: 8C:7D:31:98:4B:B3:D6:55:EB:7A:C3:13:66:3D:7F:D7:7D:BA:BD:B9
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1C9D
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F36592F69FF511EFA09DA247C4F9AE02.roa
Signing time: Wed 13 Nov 2024 11:26:27 +0000
ROA not before: Wed 13 Nov 2024 11:26:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 205220
IP address blocks: 113.203.216.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.252.0/22 maxlen: 22
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
175.110.90.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.180.0/22 maxlen: 22
180.178.184.0/22 maxlen: 22
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 11:23:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7325 (0x1c9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 13 11:26:27 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67348ce3-a3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d3:e2:e3:f2:8e:75:53:8a:48:95:81:b5:94:
60:c6:57:d4:5c:5e:a8:26:a6:57:ae:fa:64:31:62:
9b:fd:23:8b:50:25:18:87:14:f0:c2:d8:fd:86:38:
22:61:c9:b9:2d:46:1c:1a:47:f1:42:37:0e:0c:e8:
cd:45:74:f4:e8:22:5b:89:a5:7a:1b:6e:e7:38:55:
3f:13:e5:08:3d:f9:20:02:db:42:c7:3d:41:41:9e:
67:9f:3a:d5:5d:0d:42:19:2c:50:f8:b0:4b:40:29:
1d:b6:d0:c3:bb:8a:5f:26:fa:af:3b:5a:87:fc:39:
49:e4:64:a1:a2:79:6e:62:6a:bc:bb:c9:18:00:11:
34:6b:fa:f7:69:bd:84:d7:89:25:e7:b5:07:b9:fe:
4e:be:4c:7c:b9:47:c1:8e:21:27:4c:05:e9:58:10:
7a:74:52:61:d2:46:90:f4:af:36:86:46:1d:cc:ac:
cf:a9:f0:4a:87:95:7c:7b:13:2f:38:ca:46:0d:37:
fa:80:26:f0:66:42:eb:b3:20:2a:92:98:dc:a2:b0:
5b:e2:6f:2e:ae:5f:0b:f7:81:7a:ba:66:5e:c4:91:
72:e9:77:c4:01:4e:a1:10:8c:89:5a:8a:54:ac:64:
7d:39:de:6f:ef:78:2f:09:c0:8b:b3:a0:da:a4:52:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7D:31:98:4B:B3:D6:55:EB:7A:C3:13:66:3D:7F:D7:7D:BA:BD:B9
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F36592F69FF511EFA09DA247C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.216.0/24
113.203.218.0/24
113.203.223.0/24
113.203.226.0/24
113.203.228.0-113.203.230.255
113.203.244.0/24
113.203.252.0/22
115.167.117.0-115.167.119.255
115.167.122.0/23
175.110.90.0/24
175.110.107.0/24
175.110.109.0-175.110.111.255
180.178.144.0/24
180.178.165.0/24
180.178.167.0/24
180.178.176.0-180.178.187.255
202.92.18.0/24
202.92.20.0/24
223.29.235.0-223.29.236.255
Signature Algorithm: sha256WithRSAEncryption
99:95:7f:a5:e9:4a:05:84:7d:b4:d8:a4:db:63:87:7c:e6:1c:
7d:63:86:72:c4:c8:f8:08:9b:c9:b5:cc:fc:36:23:b5:35:2f:
af:ff:60:fa:58:1f:6f:ce:17:0c:78:cc:ba:19:cb:25:b8:de:
4b:51:c0:5e:e8:43:4e:9a:88:87:c8:4f:3f:88:02:9b:f2:61:
7c:d6:a8:3a:04:24:6b:1b:ce:4f:a2:de:b6:30:ca:28:e5:a5:
2b:88:7c:47:0d:f0:72:fb:65:9e:d1:60:ba:2d:16:7d:1b:4c:
27:0b:cc:44:e2:19:14:d2:11:5e:66:8a:78:78:60:34:80:ce:
87:6b:d7:a4:92:cb:92:ab:8c:47:6c:a7:52:68:a5:98:1c:3a:
43:8b:65:ec:85:a5:f7:15:9f:e2:cd:f2:a2:80:6b:76:b9:ea:
88:38:38:e5:c4:22:e1:0f:ff:b2:65:be:9e:dc:33:b9:52:43:
fc:bb:10:57:c0:00:13:fb:e5:35:22:fb:fd:58:e5:88:4d:1a:
0b:67:a7:eb:1a:6d:31:6a:27:07:ab:68:67:1c:54:a8:e1:9e:
8e:3a:84:9d:b6:53:e3:66:f7:6a:58:3f:e1:af:16:50:55:0f:
4e:73:b9:93:e4:b7:88:fb:ba:3b:2f:eb:93:74:18:e0:7c:39:
ed:a7:19:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 14:43:26 2024 by rpki-client on console-ams.rpki-client.org