Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1C7D719E70C711EF94F3646FC4F9AE02.roa
File: 1C7D719E70C711EF94F3646FC4F9AE02.roa (raw, json)
Hash identifier: G2X47sBrZ0NFcNQDObMqEeVXC5Cw7B0jFNFYWZio7tc=
Subject key identifier: 09:0C:32:BC:C0:DF:D1:45:17:24:7F:45:F5:05:2B:B1:D3:D4:C4:92
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 15E9
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1C7D719E70C711EF94F3646FC4F9AE02.roa
Signing time: Thu 12 Sep 2024 05:23:15 +0000
ROA not before: Thu 12 Sep 2024 05:23:15 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.88.0/22 maxlen: 24
180.178.142.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 05:38:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5609 (0x15e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 12 05:23:15 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66e27ac3-addc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:e5:68:67:31:e0:e1:12:84:5a:f0:f2:c3:
95:a4:84:20:2a:80:d4:b0:a8:59:41:aa:eb:fa:be:
49:77:db:ae:b2:1a:19:80:6f:07:1e:54:10:04:53:
d6:bc:37:e1:54:61:ae:49:04:f2:8b:c2:f7:b9:e4:
28:08:0e:f5:0e:d5:49:0f:d4:e4:56:df:00:c5:0a:
ec:9c:05:fa:29:b0:c2:9e:98:49:b5:ee:b7:30:35:
12:33:0c:02:51:42:71:34:c5:b7:d1:b9:c7:5e:d5:
8d:8c:57:e7:6d:63:7b:5b:74:c5:67:bc:95:fd:28:
fc:da:2e:5f:64:ec:a1:4b:99:97:c7:ab:e9:61:c1:
ac:6a:50:72:8c:05:cf:bf:ae:4c:3f:c1:e0:1b:fa:
55:23:9a:f9:7a:e1:4a:c8:74:55:92:1c:07:2d:58:
af:d7:af:06:65:af:94:71:07:6d:d9:ca:8b:0a:41:
93:cb:23:c6:b7:2e:35:28:f7:4c:26:c5:37:49:54:
8f:d2:b5:3b:9a:85:2e:6b:65:a8:67:1d:5a:09:7d:
35:43:73:c3:ff:57:07:92:bd:2b:16:7a:23:03:d7:
fc:a7:ce:4b:1a:7d:0a:71:7a:30:23:5f:83:b5:0e:
9f:29:1f:f5:31:ba:1b:00:53:72:e3:7d:d8:08:23:
e3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0C:32:BC:C0:DF:D1:45:17:24:7F:45:F5:05:2B:B1:D3:D4:C4:92
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1C7D719E70C711EF94F3646FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
103.151.27.0/24
113.203.208.0/24
113.203.215.0/24
113.203.219.0-113.203.220.255
113.203.222.0/24
113.203.227.0/24
113.203.233.0/24
113.203.242.0-113.203.245.255
113.203.252.0/22
115.167.2.0/23
115.167.12.0-115.167.23.255
115.167.50.0/24
115.167.56.0/22
115.167.73.0/24
115.167.78.0/24
115.167.116.0-115.167.123.255
115.167.125.0/24
175.110.88.0/22
180.178.142.0/24
202.92.18.0/24
202.92.20.0/24
202.92.26.0/24
223.29.231.0/24
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a7:fc:b1:5b:06:76:02:94:90:06:a2:6d:69:c7:ec:e4:13:
95:e4:6b:b7:29:b6:ad:b2:81:9c:90:08:97:99:da:62:ed:34:
a8:47:52:c9:1c:a4:c8:b9:1d:7a:ca:e8:f7:5a:8f:dd:23:06:
2f:84:4d:ec:be:48:dd:10:6a:15:41:23:cb:41:07:02:28:c1:
ad:27:14:af:67:5c:f3:92:71:67:e0:19:d6:aa:15:9e:86:63:
9c:b3:b0:7f:e6:13:82:9e:66:55:84:45:4d:22:fd:e6:71:5e:
cc:0d:41:c1:be:19:fd:61:6c:14:10:76:2f:2d:15:51:e3:a6:
96:a3:d3:56:8e:52:7d:af:da:cc:57:d8:2e:cb:7a:2d:54:7f:
fe:07:d7:e5:9f:24:a9:40:e2:b6:79:46:de:9f:47:ef:8f:63:
10:88:15:33:d8:94:da:9c:23:80:e1:4c:20:57:2a:53:e7:47:
d4:33:4f:95:fb:07:36:44:f5:57:76:a8:09:80:5f:fb:d0:64:
c4:05:1f:6a:bb:84:97:da:78:c9:9b:bb:1a:ec:ef:46:f6:b0:
12:d4:09:ef:46:f0:bc:ec:47:d8:2a:15:cf:3b:5c:2b:60:ef:
7d:91:82:af:dc:2c:a3:36:4f:1a:74:aa:9b:a8:ed:3c:d0:4c:
88:34:d6:da
-----BEGIN CERTIFICATE-----
MIIGJjCCBQ6gAwIBAgICFekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQwOTEyMDUyMzE1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmUyN2FjMy1hZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAybjlaGcx4OEShFrw8sOVpIQgKoDUsKhZQarr+r5Jd9uushoZgG8HHlQQBFPW
vDfhVGGuSQTyi8L3ueQoCA71DtVJD9TkVt8AxQrsnAX6KbDCnphJte63MDUSMwwC
UUJxNMW30bnHXtWNjFfnbWN7W3TFZ7yV/Sj82i5fZOyhS5mXx6vpYcGsalByjAXP
v65MP8HgG/pVI5r5euFKyHRVkhwHLViv168GZa+UcQdt2cqLCkGTyyPGty41KPdM
JsU3SVSP0rU7moUua2WoZx1aCX01Q3PD/1cHkr0rFnojA9f8p85LGn0KcXowI1+D
tQ6fKR/1MbobAFNy433YCCPjmwIDAQABo4IDSjCCA0YwHQYDVR0OBBYEFAkMMrzA
39FFFyR/RfUFK7HT1MSSMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMUM3RDcxOUU3
MEM3MTFFRjk0RjM2NDZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgdMGCCsGAQUFBwEHAQH/
BIHDMIHAMIG9BAIAATCBtgMEAGcLPwMEAGeXGwMEAHHL0AMEAHHL1zAMAwQAccvb
AwQAccvcAwQAccveAwQAccvjAwQAccvpMAwDBAFxy/IDBAFxy/QDBAJxy/wDBAFz
pwIwDAMEAnOnDAMEA3OnEAMEAHOnMgMEAnOnOAMEAHOnSQMEAHOnTjAMAwQCc6d0
AwQCc6d4AwQAc6d9AwQCr25YAwQAtLKOAwQAylwSAwQAylwUAwQAylwaAwQA3x3n
AwQA3x3vMA0GCSqGSIb3DQEBCwUAA4IBAQCnp/yxWwZ2ApSQBqJtacfs5BOV5Gu3
KbatsoGckAiXmdpi7TSoR1LJHKTIuR16yuj3Wo/dIwYvhE3svkjdEGoVQSPLQQcC
KMGtJxSvZ1zzknFn4BnWqhWehmOcs7B/5hOCnmZVhEVNIv3mcV7MDUHBvhn9YWwU
EHYvLRVR46aWo9NWjlJ9r9rMV9guy3otVH/+B9flnySpQOK2eUben0fvj2MQiBUz
2JTanCOA4UwgVypT50fUM0+V+wc2RPVXdqgJgF/70GTEBR9qu4SX2njJm7sa7O9G
9rAS1AnvRvC87EfYKhXPO1wrYO99kYKv3CyjNk8adKqbqO080EyINNba
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:19:48 2025 by rpki-client