Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1C93B9608FA611EF95A86B1AC4F9AE02.roa
File: 1C93B9608FA611EF95A86B1AC4F9AE02.roa (raw, json)
Hash identifier: fEWqLXSFQtgPycrKVzGNjxoQXRNwumM0upxCdtB2x90=
Subject key identifier: 97:3C:C8:6F:6F:2B:E9:1D:A7:76:3C:D3:9D:D7:A9:FF:2F:12:70:59
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 182E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1C93B9608FA611EF95A86B1AC4F9AE02.roa
Signing time: Mon 21 Oct 2024 12:15:08 +0000
ROA not before: Mon 21 Oct 2024 12:15:08 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/22 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.28.0/22 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/22 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.96.0/22 maxlen: 24
115.167.116.0/24 maxlen: 24
115.167.120.0/24 maxlen: 24
115.167.121.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.152.0/21 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.176.0/22 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 12:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6190 (0x182e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 21 12:15:08 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=671645cc-e531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:15:fc:b4:9d:00:3c:66:f7:1e:cd:e6:c3:21:
f1:7a:c4:4a:31:48:7b:4d:83:b0:e2:0d:ec:e3:e2:
4c:a8:d5:a8:3c:2c:ed:d0:6d:0f:4c:de:24:ad:7f:
1a:b6:e9:a0:47:33:c7:1c:b1:88:8e:7b:90:9d:b4:
e6:02:a3:18:b2:7f:71:b2:62:48:02:14:98:cd:aa:
89:78:35:f3:25:f5:62:34:75:8f:61:91:33:87:d2:
8d:87:16:38:9e:4f:da:e6:32:06:f4:80:e5:bb:50:
cc:94:89:41:be:24:a0:7a:40:8d:10:28:3d:ed:f6:
96:f0:bc:43:eb:46:c4:b4:d1:d7:ed:63:a3:cb:a9:
9c:f3:bc:76:7c:7b:8a:3a:08:0e:fa:67:71:c4:ce:
ac:68:9c:92:b6:ac:9b:2a:5e:10:b8:25:01:a6:4c:
a0:ab:ce:5e:03:30:50:08:94:c1:56:a8:a8:c7:5e:
07:11:7a:e5:16:31:ed:76:89:b9:50:fc:0f:7e:83:
a9:28:e5:6a:06:af:27:45:fd:c2:52:ee:49:6f:28:
e1:74:df:ce:01:70:38:07:0a:68:50:16:50:d4:29:
a0:29:58:86:dd:fe:02:b9:c0:51:bf:6b:49:89:4d:
e5:97:50:0d:e4:a9:3f:a5:6a:26:cd:c7:61:04:cf:
fe:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3C:C8:6F:6F:2B:E9:1D:A7:76:3C:D3:9D:D7:A9:FF:2F:12:70:59
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/1C93B9608FA611EF95A86B1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.11.63.0/24
113.203.210.0/24
113.203.215.0/24
113.203.217.0/24
113.203.219.0-113.203.220.255
113.203.222.0/24
113.203.224.0/23
113.203.227.0/24
113.203.243.0/24
113.203.252.0/22
115.167.2.0/24
115.167.5.0-115.167.6.255
115.167.28.0/22
115.167.48.0/24
115.167.56.0-115.167.64.255
115.167.77.0-115.167.78.255
115.167.96.0/22
115.167.116.0/24
115.167.120.0/23
115.167.125.0/24
175.110.104.0/24
180.178.142.0/24
180.178.146.0/24
180.178.148.0-180.178.150.255
180.178.152.0-180.178.160.255
180.178.163.0/24
180.178.168.0/24
180.178.170.0/24
180.178.176.0-180.178.187.255
202.92.26.0/24
223.29.231.0/24
223.29.235.0/24
223.29.237.0-223.29.239.255
Signature Algorithm: sha256WithRSAEncryption
77:e2:b9:f2:64:cd:d7:d8:da:85:ff:94:18:bd:e1:8f:64:f5:
27:bd:94:52:9e:87:09:fa:3b:ab:ce:31:f9:c3:30:1f:88:30:
1f:b9:39:87:26:bb:5c:14:d0:58:c2:f4:33:17:e4:ab:35:5e:
79:7b:75:38:13:ff:be:d2:c1:cd:5a:ef:55:6f:a1:cb:65:74:
a5:84:f7:1c:39:64:c7:fb:d4:4b:35:80:63:d3:47:b0:d6:77:
2b:89:1e:ee:c6:f7:cc:3a:60:c7:84:61:15:a6:cd:c7:b5:4c:
fa:a6:7d:79:a9:b7:8c:f8:1a:ae:93:98:87:39:cd:ba:9a:29:
73:8e:0b:53:50:f0:02:c2:32:c3:03:f6:5f:65:72:88:00:a1:
d0:d1:5b:cb:41:d2:03:c5:d2:a4:2f:9a:dc:2b:a9:87:9c:65:
31:11:cd:a6:17:46:bd:48:93:5e:30:3a:c9:93:04:b4:da:45:
25:7a:d0:b4:7d:84:7f:48:4b:f5:c3:bc:8e:8d:f3:8a:9e:41:
3c:f9:e0:68:75:41:7c:a4:59:30:25:9c:e5:19:98:b1:3a:92:
1f:27:0c:7e:f6:47:15:90:7d:4d:77:d1:b2:e5:e1:53:82:68:
fd:01:36:0c:ea:3a:8e:7e:d3:88:4b:fa:8c:16:bd:79:98:2c:
72:41:e3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:30:30 2025 by rpki-client