Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/515A527A4D7B11EFB123A584C4F9AE02.roa
File: 515A527A4D7B11EFB123A584C4F9AE02.roa (raw, json)
Hash identifier: 5fb1xY1HKpBifrZNePkPzdvPlrXuXdykIIOS+tlFAFA=
Subject key identifier: 37:0A:4E:71:0F:ED:66:93:CD:2B:64:5C:61:FD:44:F7:06:4F:F0:F5
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 148E
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/515A527A4D7B11EFB123A584C4F9AE02.roa
Signing time: Mon 29 Jul 2024 07:22:31 +0000
ROA not before: Mon 29 Jul 2024 07:22:31 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 113.203.209.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
115.167.60.0/22 maxlen: 22
115.167.65.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.68.0/22 maxlen: 22
175.110.80.0/22 maxlen: 22
180.178.142.0/24 maxlen: 24
180.178.151.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.227.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 05:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5262 (0x148e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Jul 29 07:22:31 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66a74337-e116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b2:26:8b:c4:13:6f:0f:ef:03:f3:df:2d:96:
fa:23:16:26:f0:d0:36:a2:0a:7b:e0:cb:f2:96:be:
c4:dd:05:7e:cb:8b:13:4d:fa:40:b8:6d:97:46:d6:
be:cc:a4:59:dd:1b:4e:00:58:07:07:c9:b6:27:e6:
52:13:0b:53:c0:d6:d0:1b:7f:da:c2:cc:f6:b8:28:
31:9a:93:86:25:69:2a:30:36:ab:77:a9:63:d6:5d:
53:32:c0:b5:b9:0a:6c:7d:d4:7b:30:2b:28:92:70:
0e:a5:a1:b0:61:42:ca:0e:1a:e5:8d:5e:f1:1b:5b:
31:69:45:8c:e6:d9:54:e1:bd:81:0c:79:23:c8:16:
51:a6:89:53:a1:98:3d:97:c2:63:c0:e5:89:34:da:
7e:ec:de:50:06:de:60:36:d8:62:da:d3:1d:f9:e8:
4d:7a:96:3e:33:d6:00:82:96:ff:d3:29:7f:44:92:
de:06:83:ef:1c:8a:ea:03:c6:2d:a5:d8:43:76:a4:
b8:92:23:38:bf:6a:0a:89:28:42:72:b7:d6:5b:29:
14:98:1f:54:fc:50:af:b3:a5:11:8b:46:69:f0:3c:
0b:6f:be:6a:37:f5:29:6e:0a:69:46:49:cf:ee:1b:
fc:14:8b:a9:85:92:f8:df:84:65:ad:b2:c5:2f:7a:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0A:4E:71:0F:ED:66:93:CD:2B:64:5C:61:FD:44:F7:06:4F:F0:F5
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/515A527A4D7B11EFB123A584C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
113.203.209.0/24
113.203.211.0/24
113.203.214.0/23
113.203.219.0/24
113.203.222.0/24
113.203.227.0/24
113.203.241.0/24
113.203.243.0/24
113.203.246.0/24
115.167.60.0/22
115.167.65.0/24
115.167.124.0/23
175.110.68.0/22
175.110.80.0/22
180.178.142.0/24
180.178.151.0/24
180.178.161.0-180.178.162.255
180.178.164.0/24
180.178.188.0/24
180.178.190.0/24
223.29.225.0/24
223.29.227.0/24
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
be:44:90:06:79:0e:6d:ba:5a:de:b5:07:49:ff:f3:b3:67:39:
45:a9:c8:4a:63:02:83:60:f4:a2:9d:df:fb:98:de:b8:f2:fb:
9b:65:d6:cf:00:6a:10:d2:ca:3c:19:38:00:05:9c:21:4a:9f:
c2:94:a4:5a:e0:14:79:81:a1:80:56:fe:26:cc:8e:d5:ec:68:
88:69:e5:c6:f2:5f:dd:c7:0a:90:ef:fa:0c:2d:ac:67:d3:31:
30:c4:8e:ca:4d:ba:ed:50:83:2a:37:7c:29:76:c8:9b:04:6d:
77:77:86:22:ce:c5:c4:32:6e:40:b9:57:69:13:38:52:43:b1:
13:37:6d:b2:f5:81:f8:e8:1f:b3:cf:b5:5d:5f:64:7e:3d:8e:
91:95:65:88:4f:12:6d:8d:09:da:b5:ad:02:70:99:ad:14:53:
f5:df:79:54:fa:16:08:bf:05:d2:2d:54:70:2d:0b:9f:cd:12:
4e:fa:8c:c7:05:c0:bb:65:cc:5a:1a:2e:98:28:4c:96:a1:da:
78:1f:93:29:0e:b2:58:c8:1c:4e:5b:81:87:38:1f:2e:a3:89:
ed:e3:8e:78:fe:bd:53:3d:6e:36:1f:eb:1e:11:ab:46:f0:e8:
e3:37:62:78:a5:ef:13:da:86:61:f5:b6:61:a1:87:84:23:22:
2e:b0:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:37:55 2025 by rpki-client