Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6A8F5E6C7B3D11EF89E0BA36C4F9AE02.roa
File: 6A8F5E6C7B3D11EF89E0BA36C4F9AE02.roa (raw, json)
Hash identifier: iyRRrgnBsuHheuGYYqQekZqGCtsefvsk39PbL10+csE=
Subject key identifier: 59:3C:3B:47:F6:EC:F3:16:30:62:EC:65:70:2C:47:D5:61:19:CD:92
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 16B7
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6A8F5E6C7B3D11EF89E0BA36C4F9AE02.roa
Signing time: Mon 30 Sep 2024 09:37:33 +0000
ROA not before: Mon 30 Sep 2024 09:37:33 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/22 maxlen: 24
103.11.63.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.226.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.228.0/22 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.248.0/22 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/22 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.88.0/24 maxlen: 24
175.110.89.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.152.0/21 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/22 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 10:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5815 (0x16b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 30 09:37:33 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66fa715d-80ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:ba:ff:2c:ae:7c:08:3d:63:42:cb:1a:38:
5f:fb:34:8a:6c:6f:36:b4:1d:71:43:dd:0c:0f:0f:
e7:e4:d2:12:69:61:0b:b8:90:bf:b2:e8:50:a2:88:
a5:ea:99:94:a4:44:fc:c3:ff:4a:39:a1:4f:cf:77:
e7:12:41:a4:c2:a6:63:9c:e5:32:4f:21:03:c7:51:
7f:7d:70:d6:32:67:e4:57:33:34:5f:8f:a1:eb:14:
7f:70:37:e6:4a:8a:45:6e:b0:63:0a:4d:64:44:9e:
1c:2b:77:0e:1f:4c:30:30:b5:f3:23:0f:c8:2b:d7:
6f:40:fe:42:16:70:3a:08:db:05:70:52:a8:11:63:
53:89:fe:34:e4:81:6c:81:80:99:df:97:04:9a:d8:
bd:22:0a:61:fe:0d:f4:b6:a2:db:25:a0:1a:13:74:
ed:2f:7a:4c:5d:4f:09:3d:0b:07:de:dc:c6:5b:8a:
cb:b8:9e:8c:44:b8:0d:7d:7d:9f:86:df:20:a4:9a:
a0:c8:e6:f6:c6:d3:43:5e:52:97:46:1f:fe:de:44:
a6:94:b9:0f:84:32:97:f2:8f:2d:8e:97:63:40:17:
6c:a3:1a:88:c1:4e:58:18:42:ec:1f:c5:2b:09:77:
1a:e1:56:c7:44:bb:0a:0e:ff:7b:9d:f8:25:4b:fe:
ae:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3C:3B:47:F6:EC:F3:16:30:62:EC:65:70:2C:47:D5:61:19:CD:92
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/6A8F5E6C7B3D11EF89E0BA36C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.11.63.0/24
103.151.27.0/24
113.203.208.0/24
113.203.210.0/24
113.203.212.0/23
113.203.215.0-113.203.220.255
113.203.222.0-113.203.231.255
113.203.233.0/24
113.203.242.0-113.203.245.255
113.203.248.0/21
115.167.2.0/23
115.167.12.0-115.167.23.255
115.167.50.0/24
115.167.56.0-115.167.64.255
115.167.66.0/24
115.167.73.0/24
115.167.78.0/24
115.167.125.0/24
175.110.88.0/23
180.178.142.0/24
180.178.148.0-180.178.150.255
180.178.152.0-180.178.160.255
180.178.163.0/24
180.178.166.0/24
180.178.168.0/22
180.178.176.0-180.178.187.255
180.178.189.0/24
180.178.191.0/24
202.92.26.0/24
223.29.231.0/24
223.29.235.0-223.29.239.255
Signature Algorithm: sha256WithRSAEncryption
46:3e:31:cc:e0:24:b0:69:5c:6a:57:64:43:b3:3f:34:e2:8b:
de:87:5f:dc:95:0b:1a:e6:2d:aa:b1:d4:db:63:10:7d:07:d5:
65:f5:19:63:45:ab:9a:a7:a4:a1:ac:5c:df:f4:20:72:dc:94:
b5:fc:5d:c2:75:7c:3b:98:63:9b:05:a5:1e:63:e0:1d:cf:00:
f9:2b:a0:bd:f0:23:59:a6:50:40:92:3a:1f:12:50:d8:f2:07:
6c:d5:22:47:d4:44:67:f5:03:f6:e9:29:3a:e8:d2:c6:84:8c:
97:2d:24:d8:d0:83:3b:3e:0c:1b:f9:9d:37:5c:95:ca:54:18:
33:47:48:2e:98:5a:16:0e:cc:9f:91:28:5c:56:0a:fc:9d:e2:
42:c9:09:9b:0a:bf:cd:4d:d2:62:30:61:8d:e1:cc:85:a8:e5:
86:d3:8a:63:5b:37:5d:0c:14:f2:be:33:b7:e4:51:7e:18:cf:
17:37:19:ed:a5:76:82:11:05:94:d6:f3:15:43:ac:fa:9c:a1:
6c:af:1f:64:0d:54:60:ba:26:90:5e:7a:9d:14:af:a9:6b:e9:
6a:2c:c7:08:51:43:17:00:27:d5:84:11:e0:e1:73:d4:8e:d6:
d1:00:96:3b:c0:a6:13:c3:50:0f:8c:f2:fc:ed:b9:3a:b6:35:
1b:6c:a1:89
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgICFrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQwOTMwMDkzNzMzWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmZhNzE1ZC04MGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsH66/yyufAg9Y0LLGjhf+zSKbG82tB1xQ90MDw/n5NISaWELuJC/suhQooil
6pmUpET8w/9KOaFPz3fnEkGkwqZjnOUyTyEDx1F/fXDWMmfkVzM0X4+h6xR/cDfm
SopFbrBjCk1kRJ4cK3cOH0wwMLXzIw/IK9dvQP5CFnA6CNsFcFKoEWNTif405IFs
gYCZ35cEmti9Igph/g30tqLbJaAaE3TtL3pMXU8JPQsH3tzGW4rLuJ6MRLgNfX2f
ht8gpJqgyOb2xtNDXlKXRh/+3kSmlLkPhDKX8o8tjpdjQBdsoxqIwU5YGELsH8Ur
CXca4VbHRLsKDv97nfglS/6u8QIDAQABo4IDoTCCA50wHQYDVR0OBBYEFFk8O0f2
7PMWMGLsZXAsR9VhGc2SMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNkE4RjVFNkM3
QjNEMTFFRjg5RTBCQTM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggEpBggrBgEFBQcBBwEB
/wSCARgwggEUMIIBEAQCAAEwggEIAwQCK+LgAwQAZws/AwQAZ5cbAwQAccvQAwQA
ccvSAwQBccvUMAwDBABxy9cDBABxy9wwDAMEAXHL3gMEA3HL4AMEAHHL6TAMAwQB
ccvyAwQBccv0AwQDccv4AwQBc6cCMAwDBAJzpwwDBANzpxADBABzpzIwDAMEA3On
OAMEAHOnQAMEAHOnQgMEAHOnSQMEAHOnTgMEAHOnfQMEAa9uWAMEALSyjjAMAwQC
tLKUAwQAtLKWMAwDBAO0spgDBAC0sqADBAC0sqMDBAC0sqYDBAK0sqgwDAMEBLSy
sAMEArSyuAMEALSyvQMEALSyvwMEAMpcGgMEAN8d5zAMAwQA3x3rAwQE3x3gMA0G
CSqGSIb3DQEBCwUAA4IBAQBGPjHM4CSwaVxqV2RDsz804oveh1/clQsa5i2qsdTb
YxB9B9Vl9RljRauap6ShrFzf9CBy3JS1/F3CdXw7mGObBaUeY+AdzwD5K6C98CNZ
plBAkjofElDY8gds1SJH1ERn9QP26Sk66NLGhIyXLSTY0IM7Pgwb+Z03XJXKVBgz
R0gumFoWDsyfkShcVgr8neJCyQmbCr/NTdJiMGGN4cyFqOWG04pjWzddDBTyvjO3
5FF+GM8XNxntpXaCEQWU1vMVQ6z6nKFsrx9kDVRguiaQXnqdFK+pa+lqLMcIUUMX
ACfVhBHg4XPUjtbRAJY7wKYTw1APjPL87bk6tjUbbKGJ
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:57:32 2025 by rpki-client