Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F5BCFE8437CD11F0923FA162C4F9AE02.roa
File: F5BCFE8437CD11F0923FA162C4F9AE02.roa (raw, json)
Hash identifier: 0ovHcgSnJUomCyOn61RibDTkGuRcf/1ZsATlIzJunA8=
Subject key identifier: 42:70:13:54:0F:CE:E7:3C:C3:6F:54:90:28:59:39:64:CE:2F:2B:5A
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 273A
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F5BCFE8437CD11F0923FA162C4F9AE02.roa
Signing time: Mon 26 May 2025 06:49:40 +0000
ROA not before: Mon 26 May 2025 06:49:40 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
103.151.26.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.11.0/24 maxlen: 24
115.167.12.0/24 maxlen: 24
115.167.13.0/24 maxlen: 24
115.167.15.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.61.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.96.0/22 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.112.0/22 maxlen: 24
115.167.116.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.120.0/24 maxlen: 24
115.167.121.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.64.0/24 maxlen: 24
175.110.65.0/24 maxlen: 24
175.110.66.0/24 maxlen: 24
175.110.67.0/24 maxlen: 24
175.110.81.0/24 maxlen: 24
175.110.82.0/24 maxlen: 24
175.110.83.0/24 maxlen: 24
175.110.90.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.102.0/24 maxlen: 24
175.110.103.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.19.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 May 2025 11:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10042 (0x273a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: May 26 06:49:40 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=68340f04-5706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:56:f3:9a:d2:2b:ba:8d:44:4c:48:a4:ca:
5e:e9:a4:11:03:ca:bd:7a:48:49:23:fe:43:bb:af:
b6:de:5a:c7:26:5a:d9:6c:c2:fe:67:dd:4d:e7:80:
b5:b4:4d:be:49:20:53:1d:f2:e3:6a:00:51:91:4c:
c4:7c:86:ad:a7:81:db:f9:a6:ca:49:87:42:cf:46:
23:37:1e:34:3f:62:74:5d:9b:8b:37:90:06:17:8b:
f6:eb:e9:15:6e:6b:bf:48:ed:7e:a0:28:ea:b2:6d:
d5:5b:96:4b:71:e0:e5:5d:99:a5:e3:3e:15:79:cf:
62:9c:9a:6d:fd:20:0e:60:a2:9b:54:59:2d:33:03:
2e:e5:70:22:db:e8:fd:19:ba:b4:9a:5d:03:b4:70:
45:55:d9:89:03:f7:ad:ef:c1:aa:44:29:55:71:74:
60:6a:d5:85:6d:47:c2:11:02:b5:7e:f5:e5:5d:3e:
b2:7a:ec:86:b8:44:c8:2a:77:36:e9:3d:f1:55:d3:
57:9b:30:bc:a6:18:7a:3d:7e:ed:c4:00:00:da:8f:
56:e6:cc:52:c6:39:b2:19:bd:16:f4:b5:3a:1f:53:
84:6a:80:31:42:fa:4c:6c:68:5f:30:70:b8:31:ea:
f0:8d:c4:4e:0c:c2:a8:07:34:00:8f:c9:17:3b:00:
54:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:70:13:54:0F:CE:E7:3C:C3:6F:54:90:28:59:39:64:CE:2F:2B:5A
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F5BCFE8437CD11F0923FA162C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
103.151.26.0/23
113.203.208.0-113.203.219.255
113.203.224.0/21
113.203.233.0/24
113.203.241.0-113.203.246.255
113.203.248.0/24
113.203.252.0/22
115.167.2.0/24
115.167.6.0/24
115.167.11.0-115.167.13.255
115.167.15.0-115.167.23.255
115.167.28.0/22
115.167.48.0/24
115.167.50.0/24
115.167.56.0/22
115.167.61.0/24
115.167.64.0/24
115.167.96.0/22
115.167.101.0-115.167.103.255
115.167.112.0-115.167.121.255
115.167.123.0-115.167.125.255
175.110.64.0/22
175.110.81.0-175.110.83.255
175.110.90.0/23
175.110.102.0/23
180.178.142.0/24
180.178.144.0/24
180.178.146.0-180.178.150.255
180.178.168.0/22
180.178.185.0-180.178.188.255
180.178.190.0/23
202.92.18.0-202.92.20.255
202.92.26.0/24
223.29.225.0-223.29.226.255
223.29.228.0/22
223.29.235.0-223.29.236.255
223.29.238.0/23
Signature Algorithm: sha256WithRSAEncryption
58:09:8f:f1:14:51:bd:71:d4:10:5d:8f:a4:4c:a3:ad:fa:0f:
c1:ff:0a:b5:e8:19:4b:ac:74:99:28:f0:b7:4e:dd:d2:4a:93:
b0:2d:53:44:b6:85:9a:68:e7:ec:b7:0c:54:80:44:0f:58:21:
e1:2c:31:45:f2:ca:95:78:68:43:bc:ff:d7:bd:8e:d9:bc:0e:
c0:b5:89:f0:ee:04:85:99:79:3c:ba:68:4a:36:2c:96:57:b9:
4f:16:8d:7a:07:64:f9:74:b0:e9:0b:0e:d6:52:ca:32:98:28:
4b:58:8f:e3:6b:b1:c6:d2:f8:11:47:a8:44:55:b5:82:05:34:
ab:fc:bd:80:ab:f7:c9:c9:a1:9d:54:2b:8a:1d:3e:57:4f:8d:
fa:f3:3f:57:f3:37:7f:a7:c5:f8:fa:b8:62:88:96:5f:c3:1d:
fb:7b:c1:5f:0b:76:d8:c6:6e:df:de:fd:39:15:32:af:a2:24:
91:78:51:85:4f:89:76:b0:9f:c4:54:e0:ae:38:d4:3c:53:ca:
2b:65:56:78:cf:38:e6:02:fd:0d:69:b7:cc:31:82:62:d0:92:
04:98:51:9b:f8:42:1a:b1:96:98:d2:88:33:fc:fc:17:e1:23:
67:09:05:7d:63:62:b2:1e:c6:f3:4d:ba:c7:0f:83:8b:4f:e9:
06:e7:0b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:41:27 2025 by rpki-client