Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/46823DACB61411EF9F9CA96BC4F9AE02.roa
File: 46823DACB61411EF9F9CA96BC4F9AE02.roa (raw, json)
Hash identifier: qw0HeA3iPge37N3WIgjRxc1Su8yAMS+GeQGmsomRqVk=
Subject key identifier: 82:EF:55:39:AC:2B:90:2B:BA:1D:EA:88:05:4E:CF:FC:69:C1:F8:67
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1F30
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/46823DACB61411EF9F9CA96BC4F9AE02.roa
Signing time: Mon 09 Dec 2024 09:59:27 +0000
ROA not before: Mon 09 Dec 2024 09:59:27 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
103.151.26.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.81.0/24 maxlen: 24
175.110.82.0/24 maxlen: 24
175.110.83.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.183.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Dec 2024 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7984 (0x1f30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 9 09:59:27 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6756bf7f-95eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:9c:f4:ff:7e:f0:7c:a1:1d:67:3d:cc:46:
e7:5d:61:28:5d:aa:40:26:d4:67:ed:ba:68:fd:c1:
61:78:6c:0a:13:06:ae:07:07:45:05:3a:9c:39:b4:
1a:d5:aa:77:61:c8:e6:30:23:3e:a3:31:c9:70:28:
1e:88:92:41:93:fa:3f:15:9e:c3:97:b4:72:f6:c8:
1b:d8:3f:ff:a5:f5:02:40:23:43:cf:9a:1c:20:a5:
e7:34:bc:00:ce:41:3b:49:1d:a4:3e:1e:b1:44:f0:
af:28:d5:38:33:da:43:d5:cb:f1:9b:ea:08:e0:ae:
71:c7:88:85:19:48:d1:88:91:c0:ff:79:22:32:4a:
85:75:da:f5:a1:63:fa:8b:17:4b:65:1e:3e:4a:d8:
92:cc:03:2a:65:31:6c:75:1c:df:9d:cb:1e:dc:f0:
78:a8:b8:b6:21:a5:1e:1f:be:51:96:e1:13:f4:23:
a8:21:84:56:08:80:54:64:e8:4b:1c:63:c7:e1:ec:
d5:87:3c:b2:64:22:13:17:e7:ba:b1:9a:dc:8a:12:
33:6f:e2:77:6b:62:a8:bc:42:db:20:d2:0f:d8:0d:
b3:05:92:bb:54:76:3f:b6:dd:bc:f4:f2:fa:10:a8:
91:41:e9:4c:35:e9:c5:b2:b0:71:ae:aa:4a:17:14:
ee:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EF:55:39:AC:2B:90:2B:BA:1D:EA:88:05:4E:CF:FC:69:C1:F8:67
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/46823DACB61411EF9F9CA96BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.226.0/23
103.11.63.0/24
103.151.26.0/24
113.203.241.0/24
113.203.253.0/24
113.203.255.0/24
115.167.77.0-115.167.78.255
115.167.125.0/24
175.110.81.0-175.110.83.255
180.178.142.0/24
180.178.183.0/24
180.178.187.0/24
202.92.26.0/24
223.29.225.0/24
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
91:dd:5b:10:60:0d:38:5f:1c:69:ee:12:41:bc:b7:d5:e2:7c:
01:c6:bb:5e:13:63:9d:27:ae:4d:85:63:63:ce:d3:cf:a1:63:
0d:11:15:16:92:93:c8:32:b1:ff:3c:c4:11:8a:61:f8:be:f2:
31:2e:1f:c2:ba:d5:14:0e:82:58:94:a1:5b:3a:c5:bb:93:f9:
12:f6:38:e6:76:c7:64:d2:1e:9a:84:45:c2:03:c4:86:3c:36:
92:cb:2f:51:8a:b1:c6:04:8a:79:c2:31:bd:41:ad:63:8a:cb:
09:91:8b:3f:87:fd:cf:a1:08:7c:4a:9c:0a:2e:35:d3:1e:7f:
98:1d:cb:e4:74:f3:ad:19:90:f8:6f:b2:1d:ed:2f:f2:d3:8a:
26:57:be:fb:d5:6e:37:7f:a1:c7:5b:3e:98:7e:e3:39:64:a4:
16:ce:30:e5:22:e3:3a:ff:5a:42:d2:8a:a9:b8:c5:94:db:a9:
8a:39:79:3e:aa:65:a8:5b:84:84:72:9a:f8:13:04:d1:1b:a7:
d1:ab:35:e6:d7:62:07:0b:47:66:74:2a:76:a8:a8:c2:6f:99:
36:a0:1a:14:69:36:57:59:11:db:e0:b5:df:20:6a:fe:09:16:
af:23:8e:f2:27:f5:42:96:ac:20:d6:da:33:bb:35:7c:ce:fe:
01:03:c5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:26:29 2025 by rpki-client