Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/717972E8AC0311EF885D3D15C4F9AE02.roa
File: 717972E8AC0311EF885D3D15C4F9AE02.roa (raw, json)
Hash identifier: f+Mc8oX1yFoHx+mwY/xBD9XpT1C1EmdwUMhnK9HAy3o=
Subject key identifier: 60:49:03:0A:4B:9E:47:21:48:CF:D2:1C:6C:CE:C0:6B:F8:92:7A:98
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1DF7
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/717972E8AC0311EF885D3D15C4F9AE02.roa
Signing time: Thu 28 Nov 2024 13:23:58 +0000
ROA not before: Thu 28 Nov 2024 13:23:58 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.16.0/24 maxlen: 24
115.167.17.0/24 maxlen: 24
115.167.18.0/24 maxlen: 24
115.167.19.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.183.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Nov 2024 13:57:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7671 (0x1df7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 28 13:23:58 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67486eed-c706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:97:8c:a7:b7:b4:c7:4b:34:5a:96:ef:2d:
0c:83:5c:53:62:07:fa:ca:84:00:6c:84:fb:0c:fd:
e9:23:1c:df:f4:57:6d:52:c5:15:8e:41:80:e0:62:
aa:c6:17:cd:6c:57:61:61:81:aa:1b:36:59:cd:38:
c8:46:f9:5f:93:e6:9a:0b:6e:cb:cf:81:fa:79:14:
0e:be:a9:34:88:a6:64:9a:89:bc:fb:10:5d:c3:75:
6c:85:0f:16:96:8c:2c:85:58:6b:d2:dd:43:04:48:
d8:aa:5c:15:de:02:b5:17:3d:68:e2:80:c1:9a:3c:
70:a6:91:a8:e5:e9:f6:ee:29:b5:5a:9a:b2:92:4d:
62:43:15:ce:20:f4:17:9b:75:d1:c8:31:13:fa:78:
18:ce:ce:88:96:27:5c:61:5d:d5:7a:d8:ad:57:4c:
ea:c3:8f:3a:d1:d1:91:da:31:25:c9:53:52:e8:ab:
62:11:38:97:b2:ee:28:84:23:f7:5a:16:79:7c:31:
04:8f:e7:a0:45:2c:1a:a1:30:93:92:2d:58:95:62:
94:2b:6a:08:5c:44:3e:41:6a:84:31:b0:10:0c:86:
4c:93:6c:9c:48:71:b3:0b:5c:a8:5b:02:af:8b:79:
67:71:ff:0f:35:7e:53:0a:6f:95:07:92:cf:64:dc:
e3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:49:03:0A:4B:9E:47:21:48:CF:D2:1C:6C:CE:C0:6B:F8:92:7A:98
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/717972E8AC0311EF885D3D15C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.225.0-43.226.227.255
103.11.63.0/24
113.203.208.0/24
113.203.212.0/24
113.203.222.0/24
113.203.231.0/24
113.203.233.0/24
113.203.241.0-113.203.242.255
113.203.245.0/24
113.203.253.0/24
113.203.255.0/24
115.167.16.0/22
115.167.29.0-115.167.31.255
115.167.48.0/24
115.167.64.0/24
115.167.66.0/24
115.167.73.0/24
115.167.102.0/24
115.167.124.0/23
175.110.64.0/22
175.110.80.0/22
175.110.89.0/24
175.110.91.0/24
175.110.111.0/24
180.178.142.0/24
180.178.144.0/24
180.178.146.0/24
180.178.148.0/24
180.178.150.0/24
180.178.160.0-180.178.162.255
180.178.165.0/24
180.178.167.0/24
180.178.176.0/22
180.178.183.0/24
180.178.187.0-180.178.188.255
180.178.191.0/24
202.92.26.0/24
223.29.225.0/24
223.29.229.0/24
223.29.235.0-223.29.236.255
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
47:bf:cd:5c:94:a3:f1:f3:6d:54:a0:32:e7:80:01:5e:ef:5a:
80:9c:ee:7a:48:a0:92:81:8d:6d:2b:1a:2c:d4:91:f4:01:72:
7d:2a:58:9f:ce:3e:37:5c:93:d5:d1:f5:36:29:63:f7:dc:6b:
05:e7:1a:e8:79:25:63:28:7a:b8:fc:05:d0:bd:aa:72:17:0d:
ce:0f:0e:2f:c8:e6:b4:91:14:a4:c0:4b:a5:31:23:b8:20:38:
0f:6e:f5:8b:d4:da:0d:ba:ac:a1:48:f4:10:cb:86:3e:60:c2:
49:7a:2f:5e:aa:5f:60:45:32:f0:ae:3a:41:1a:93:22:43:36:
cb:92:6a:26:80:6b:a5:ed:56:2c:af:0f:07:e0:d0:ab:07:e0:
bf:39:c4:b9:8c:8c:96:da:8b:e7:43:f6:a7:74:e4:13:99:ca:
3f:6c:e2:5d:36:ea:19:db:54:6a:44:a8:3e:71:ba:c8:2d:4e:
05:f6:ba:a9:f8:81:0e:b1:38:54:ab:06:f9:74:e5:bf:38:e9:
b9:e7:6c:0d:34:24:b0:bb:63:62:6a:41:d2:18:90:e1:ea:0c:
c3:75:1d:35:b9:56:03:42:18:b0:3a:b9:1f:04:3e:e5:d0:c4:
02:bf:1d:3b:cc:2e:96:0a:0c:b6:0d:40:37:73:63:65:9f:04:
37:85:4e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:16:19 2025 by rpki-client