Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/22184F681B7E11F0A11A603BC4F9AE02.roa
File: 22184F681B7E11F0A11A603BC4F9AE02.roa (raw, json)
Hash identifier: J4SIeYtsWC9g/d4o3nPtxDapjc/xs4d/5k8tEeqbV0c=
Subject key identifier: 40:E5:5A:06:0D:B2:94:34:B6:76:64:C1:16:E1:06:F9:5F:44:58:36
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2603
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/22184F681B7E11F0A11A603BC4F9AE02.roa
Signing time: Thu 17 Apr 2025 11:21:40 +0000
ROA not before: Thu 17 Apr 2025 11:21:40 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
103.151.26.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.252.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.254.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.61.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.112.0/22 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.81.0/24 maxlen: 24
175.110.82.0/24 maxlen: 24
175.110.83.0/24 maxlen: 24
175.110.90.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.99.0/24 maxlen: 24
175.110.101.0/24 maxlen: 24
175.110.102.0/24 maxlen: 24
175.110.103.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.108.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.180.0/24 maxlen: 24
180.178.181.0/24 maxlen: 24
180.178.182.0/24 maxlen: 24
180.178.183.0/24 maxlen: 24
180.178.184.0/22 maxlen: 22
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Apr 2025 10:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9731 (0x2603)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Apr 17 11:21:40 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6800e444-80be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c6:5c:98:58:69:c5:9a:82:6b:5f:66:86:83:
8d:ed:0f:ff:d6:77:b7:0a:60:7a:8b:9b:db:9b:ea:
ce:e6:ad:cc:f4:2b:8e:2c:e5:b5:2c:f9:24:69:80:
4f:9d:cf:6e:15:73:bd:d1:9a:e5:d9:a5:dc:ea:d1:
5a:28:51:37:60:ef:f7:e7:8a:88:32:80:35:29:89:
08:45:9c:ec:ce:67:45:39:76:0a:dc:e6:21:d5:53:
78:71:05:31:48:fe:69:5b:b2:08:24:71:9e:58:71:
60:7e:6a:f1:dd:d6:30:61:dc:70:06:24:4d:a0:50:
87:54:c3:d7:04:e9:af:bd:82:ed:2a:dd:88:6c:d0:
ae:3c:58:b1:ba:4d:72:eb:31:e1:30:46:de:5a:a0:
5d:64:36:50:c8:30:41:8f:e1:97:b2:a3:dd:32:5e:
94:84:ce:7f:41:e4:b5:87:fb:b0:ea:a6:23:7e:e4:
a4:95:a5:a7:6a:6e:05:f8:17:89:79:16:bf:38:c5:
80:53:9e:9c:c9:2d:da:e6:f1:0d:c0:3b:33:6c:ee:
8e:2b:ed:42:07:69:05:68:ef:2e:54:9a:1f:29:31:
30:40:d5:51:11:f0:fc:66:d5:47:c0:d2:f9:fd:76:
26:6b:64:6b:63:fc:9c:37:19:e6:98:13:01:14:b0:
c4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E5:5A:06:0D:B2:94:34:B6:76:64:C1:16:E1:06:F9:5F:44:58:36
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/22184F681B7E11F0A11A603BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
103.151.26.0/23
113.203.208.0-113.203.220.255
113.203.222.0/23
113.203.225.0-113.203.231.255
113.203.233.0/24
113.203.241.0-113.203.246.255
113.203.248.0/24
113.203.252.0/22
115.167.61.0/24
115.167.64.0/24
115.167.77.0/24
115.167.101.0-115.167.103.255
115.167.112.0/22
115.167.117.0-115.167.119.255
115.167.124.0/23
175.110.64.0/22
175.110.81.0-175.110.83.255
175.110.90.0/23
175.110.97.0-175.110.99.255
175.110.101.0-175.110.111.255
180.178.142.0/24
180.178.144.0/24
180.178.146.0-180.178.150.255
180.178.160.0-180.178.171.255
180.178.176.0/20
202.92.20.0/24
202.92.26.0/24
223.29.225.0-223.29.226.255
223.29.228.0/22
223.29.235.0/24
223.29.238.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:1c:8e:26:d5:3d:91:8c:ac:9e:6f:83:17:1e:78:bb:0c:60:
b2:22:e6:ab:6c:0b:07:43:b8:f7:c1:28:90:7b:7d:f0:1f:a4:
41:f9:57:67:8a:a1:bf:0d:c9:f9:f9:c6:d2:2a:23:4a:4c:c2:
d1:0e:3e:e2:d9:29:28:2a:f4:88:aa:d8:15:ed:10:80:8d:c3:
9a:da:aa:b0:fb:78:55:b6:e7:15:72:3b:6f:92:84:4f:45:3c:
b0:55:e6:3d:b6:bd:64:57:a9:05:9d:90:98:93:d0:43:70:6c:
00:27:f7:82:6b:e2:52:a4:e9:ed:70:fd:fd:4c:92:bb:9b:7e:
25:eb:54:cc:e9:9f:fd:6b:ea:0f:21:28:ff:af:f2:e7:c8:06:
c8:26:09:94:d7:d9:47:5d:82:63:e2:55:9a:31:a2:a3:dd:26:
a6:a4:eb:f9:97:9a:57:f8:31:9b:ad:1c:ae:8a:c4:c7:64:9c:
50:f3:b5:22:36:a1:5e:69:3c:49:ae:e0:eb:15:13:0a:a1:cb:
c5:8f:fb:06:6f:96:40:cb:5f:8c:64:2a:3d:ba:33:3b:1f:ef:
dd:04:81:6f:b1:7e:93:ab:d5:d0:64:e0:34:c2:7d:f9:2e:2e:
6f:33:b7:22:38:ab:87:87:fb:4a:47:ab:4c:57:fa:4e:7b:1b:
d8:fb:10:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:25:34 2025 by rpki-client