Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F6C93F24321E11EE86177D3BC4F9AE02.roa
File: F6C93F24321E11EE86177D3BC4F9AE02.roa (raw, json)
Hash identifier: Mlips/trJppGAtLnYoiUKoINfVtbrCtLrU8qaew2mhY=
Subject key identifier: 32:34:4F:10:1B:62:6A:D3:C0:0C:0B:45:DB:FF:BC:FE:AA:8F:A2:D3
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 0C9E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F6C93F24321E11EE86177D3BC4F9AE02.roa
Signing time: Fri 04 Aug 2023 12:36:14 +0000
ROA not before: Fri 04 Aug 2023 12:36:14 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 9387
IP address blocks: 43.254.12.0/22 maxlen: 24
103.11.60.0/24 maxlen: 24
103.11.61.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/23 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.234.0/24 maxlen: 24
113.203.235.0/24 maxlen: 24
113.203.236.0/24 maxlen: 24
113.203.237.0/24 maxlen: 24
113.203.238.0/24 maxlen: 24
113.203.239.0/24 maxlen: 24
113.203.240.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.248.0/22 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
180.178.128.0/24 maxlen: 24
180.178.129.0/24 maxlen: 24
180.178.132.0/24 maxlen: 24
180.178.133.0/24 maxlen: 24
180.178.134.0/24 maxlen: 24
180.178.135.0/24 maxlen: 24
180.178.136.0/24 maxlen: 24
180.178.137.0/24 maxlen: 24
180.178.138.0/24 maxlen: 24
180.178.139.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/22 maxlen: 24
180.178.172.0/24 maxlen: 24
180.178.173.0/24 maxlen: 24
180.178.174.0/24 maxlen: 24
180.178.175.0/24 maxlen: 24
180.178.176.0/24 maxlen: 24
180.178.178.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3230 (0xc9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Aug 4 12:36:14 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=64ccf0be-b170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:96:93:7d:4a:b6:84:8f:1f:04:16:6b:54:
10:7b:1d:a1:b2:02:91:c1:15:a3:be:db:3a:b0:f0:
97:b0:27:44:85:11:d6:4b:09:11:22:32:47:47:08:
47:ca:1b:af:2a:3a:c8:d9:a7:5a:4e:05:d0:90:6d:
5e:a3:35:d6:36:c6:6f:25:69:b6:a5:0e:25:7c:75:
bc:43:07:6d:2d:46:5b:84:16:cd:0d:84:a3:bf:61:
35:c8:63:c2:cc:1b:ce:a5:02:81:76:b6:72:04:2a:
f7:4b:73:d0:08:60:c3:86:2c:1d:fb:83:28:73:63:
d9:30:ab:19:94:dc:9a:b6:96:05:fd:a6:cf:78:3a:
3e:4b:7a:a7:62:4b:cd:68:b2:65:d7:4c:15:63:31:
d4:6e:59:e0:69:07:07:09:5b:19:0c:08:72:26:d3:
fa:5f:74:4c:71:73:cb:92:f9:96:e2:26:05:f0:f2:
3f:39:ec:ef:9e:9c:97:60:2a:e1:b2:24:73:ae:7f:
cd:bd:6f:89:a9:33:10:36:20:0e:d2:49:5c:f3:2a:
4c:c3:0d:16:3e:c8:af:48:fd:16:13:dd:4d:f7:14:
d5:84:4e:3e:88:29:18:60:01:0e:60:1b:73:db:04:
b6:0a:77:78:80:ce:08:66:d1:6b:8c:38:37:72:f4:
2e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:34:4F:10:1B:62:6A:D3:C0:0C:0B:45:DB:FF:BC:FE:AA:8F:A2:D3
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/F6C93F24321E11EE86177D3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.254.12.0/22
103.11.60.0/23
113.203.212.0-113.203.216.255
113.203.218.0-113.203.220.255
113.203.222.0/24
113.203.225.0/24
113.203.228.0/22
113.203.233.0-113.203.240.255
113.203.243.0/24
113.203.245.0/24
113.203.248.0/22
113.203.253.0-113.203.254.255
180.178.128.0/23
180.178.132.0-180.178.139.255
180.178.148.0/23
180.178.151.0/24
180.178.162.0/24
180.178.164.0/22
180.178.172.0-180.178.176.255
180.178.178.0/24
180.178.180.0/22
180.178.185.0-180.178.191.255
223.29.226.0-223.29.231.255
223.29.235.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
25:4c:07:b5:b8:a8:a8:05:ae:65:9e:f4:fe:79:ba:50:f3:be:
87:0b:1f:11:d6:79:5f:ca:23:b9:4c:a2:d7:2f:7d:f5:f9:c6:
75:46:78:12:ef:84:78:13:8c:0a:a6:10:d8:bf:1a:67:31:35:
4b:19:fb:7f:d6:a3:ff:cc:c2:76:8d:ef:ea:8a:85:3a:3c:c9:
86:67:4d:17:c8:7b:e3:4b:56:69:a7:97:5f:38:2e:fd:0d:57:
5e:da:fa:17:65:b8:42:d6:70:63:56:9f:30:15:e6:e6:a8:2c:
2f:d8:90:3a:be:9a:da:35:be:a5:e8:d7:b5:19:5d:87:13:3b:
41:59:d1:8b:04:58:e9:b3:45:bf:99:fb:12:dd:9f:ee:c6:31:
64:f7:41:a2:79:76:15:04:68:81:15:0e:c6:73:bd:5d:df:c9:
c9:10:2c:91:03:93:c1:29:1f:bf:d8:dc:bf:ed:cd:cc:a8:57:
e4:34:09:b6:b5:6d:b3:36:9d:d5:cb:a0:3d:c3:f2:37:8e:5e:
eb:3f:fd:d9:ef:12:d8:47:79:80:c4:e5:c8:21:f3:c4:89:5f:
fa:05:18:a9:1f:95:dd:35:b3:b0:fb:d8:31:16:69:55:89:63:
81:9b:9e:0e:5a:1c:e5:43:62:59:3a:23:fc:fe:79:cb:62:b5:
d2:38:a4:99
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgICDJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjMwODA0MTIzNjE0WhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGNjZjBiZS1iMTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApgaWk31KtoSPHwQWa1QQex2hsgKRwRWjvts6sPCXsCdEhRHWSwkRIjJHRwhH
yhuvKjrI2adaTgXQkG1eozXWNsZvJWm2pQ4lfHW8QwdtLUZbhBbNDYSjv2E1yGPC
zBvOpQKBdrZyBCr3S3PQCGDDhiwd+4Moc2PZMKsZlNyatpYF/abPeDo+S3qnYkvN
aLJl10wVYzHUblngaQcHCVsZDAhyJtP6X3RMcXPLkvmW4iYF8PI/OezvnpyXYCrh
siRzrn/NvW+JqTMQNiAO0klc8ypMww0WPsivSP0WE91N9xTVhE4+iCkYYAEOYBtz
2wS2Cnd4gM4IZtFrjDg3cvQunwIDAQABo4IDbDCCA2gwHQYDVR0OBBYEFDI0TxAb
YmrTwAwLRdv/vP6qj6LTMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRjZDOTNGMjQz
MjFFMTFFRTg2MTc3RDNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgfUGCCsGAQUFBwEHAQH/
BIHlMIHiMIHfBAIAATCB2AMEAiv+DAMEAWcLPDAMAwQCccvUAwQAccvYMAwDBAFx
y9oDBABxy9wDBABxy94DBABxy+EDBAJxy+QwDAMEAHHL6QMEAHHL8AMEAHHL8wME
AHHL9QMEAnHL+DAMAwQAccv9AwQAccv+AwQBtLKAMAwDBAK0soQDBAK0sogDBAG0
spQDBAC0spcDBAC0sqIDBAK0sqQwDAMEArSyrAMEALSysAMEALSysgMEArSytDAM
AwQAtLK5AwQGtLKAMAwDBAHfHeIDBAPfHeAwDAMEAN8d6wMEAN8d7jANBgkqhkiG
9w0BAQsFAAOCAQEAJUwHtbioqAWuZZ70/nm6UPO+hwsfEdZ5X8ojuUyi1y999fnG
dUZ4Eu+EeBOMCqYQ2L8aZzE1Sxn7f9aj/8zCdo3v6oqFOjzJhmdNF8h740tWaaeX
Xzgu/Q1XXtr6F2W4QtZwY1afMBXm5qgsL9iQOr6a2jW+pejXtRldhxM7QVnRiwRY
6bNFv5n7Et2f7sYxZPdBonl2FQRogRUOxnO9Xd/JyRAskQOTwSkfv9jcv+3NzKhX
5DQJtrVtszad1cugPcPyN45e6z/92e8S2Ed5gMTlyCHzxIlf+gUYqR+V3TWzsPvY
MRZpVYljgZueDloc5UNiWToj/P55y2K10jikmQ==
-----END CERTIFICATE-----
Generated at Sun Aug 6 20:59:26 2023 by rpki-client on console-ams.rpki-client.org