Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/720B120C70C611EF9A83276EC4F9AE02.roa
File: 720B120C70C611EF9A83276EC4F9AE02.roa (raw, json)
Hash identifier: 7y8+nE4SYqTz/dZ9fEvIOpAgy5kZEfPaAjDIo6QzwQI=
Subject key identifier: 1B:D8:4E:1F:8E:FA:45:B4:B4:89:0E:DB:BF:26:44:52:FF:29:75:D8
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 15E1
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/720B120C70C611EF9A83276EC4F9AE02.roa
Signing time: Thu 12 Sep 2024 05:18:30 +0000
ROA not before: Thu 12 Sep 2024 05:18:30 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.88.0/22 maxlen: 24
180.178.142.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 05:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5601 (0x15e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 12 05:18:30 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66e279a5-35cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4a:bc:20:a1:32:ae:c2:fa:29:d5:a6:cd:91:
f8:8c:c3:8c:54:09:06:08:50:53:d6:a2:9b:1b:9e:
34:8e:26:4e:5c:c3:24:d6:1d:7a:0f:60:46:4c:1a:
e8:a6:5d:43:7b:ec:47:64:b4:3f:34:b4:ec:67:1d:
f1:e4:5a:4d:1e:d8:31:4f:26:fd:22:f5:4b:b9:05:
da:b1:de:d9:96:f4:31:6d:d2:60:09:ce:71:e1:aa:
05:2f:2a:a8:a2:f0:58:3f:9b:db:09:ef:00:4c:3c:
de:6c:cb:ee:1f:58:ca:98:41:db:b2:1b:12:0d:18:
f4:4f:a6:de:68:b7:96:0c:02:65:80:b9:df:1d:bb:
75:9d:20:b0:ce:60:f6:f3:b0:61:97:6d:2f:6a:84:
46:62:b9:3a:de:81:d3:2d:80:11:e2:86:61:b5:0c:
35:de:68:9c:da:31:3d:df:e9:5c:26:39:6e:1d:f3:
b2:2f:3a:36:95:4c:03:5b:bf:44:cc:33:30:d5:55:
93:ce:d0:35:19:fd:28:f7:1e:6c:a1:5b:45:47:7d:
cd:6d:b7:f3:cb:58:1a:86:f3:0d:f3:82:ff:86:52:
90:1e:0f:18:39:9a:f9:14:cc:8a:c7:56:34:fe:be:
c5:2b:79:f3:75:af:b2:97:89:df:f1:5f:1e:af:52:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D8:4E:1F:8E:FA:45:B4:B4:89:0E:DB:BF:26:44:52:FF:29:75:D8
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/720B120C70C611EF9A83276EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
103.151.27.0/24
113.203.208.0/24
113.203.210.0/24
113.203.212.0/23
113.203.215.0-113.203.220.255
113.203.222.0/24
113.203.227.0/24
113.203.233.0/24
113.203.242.0-113.203.245.255
113.203.252.0/22
115.167.2.0/23
115.167.12.0-115.167.23.255
115.167.50.0/24
115.167.56.0/22
115.167.73.0/24
115.167.78.0/24
115.167.116.0-115.167.123.255
115.167.125.0/24
175.110.88.0/22
180.178.142.0/24
202.92.18.0/24
202.92.20.0/24
202.92.26.0/24
223.29.231.0/24
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
49:0c:9b:4c:fe:51:47:ba:c8:78:3b:03:26:47:0b:68:4c:56:
ee:43:95:a4:ab:99:62:b7:4d:a2:a1:f3:4b:cd:7d:53:66:85:
d3:c2:bd:8d:1f:15:83:3d:f0:be:f6:3d:ab:06:33:b7:24:25:
0c:27:9e:20:8d:85:76:0e:fe:70:57:35:07:2e:70:a8:6c:b3:
43:cd:94:e0:2a:c0:8c:a5:bd:94:16:0f:69:37:dd:41:dc:fb:
e4:56:b8:24:98:22:ce:99:d9:91:90:c8:f8:0c:53:99:33:55:
cb:b8:7c:e3:9e:d9:35:bf:f7:0e:07:97:87:7b:e4:3b:28:65:
09:29:e4:49:ef:77:85:41:2d:06:c1:70:1c:64:9a:c5:04:a2:
e3:20:be:00:1f:60:ad:d8:51:f9:a7:7e:96:9a:7b:8c:8b:3e:
da:f1:4f:4b:01:34:5e:cd:53:f2:13:e3:a9:0c:21:1e:c4:68:
a6:98:4e:dc:d7:78:de:f3:30:be:01:44:c2:83:d0:64:24:da:
b0:7a:26:b1:9d:b8:02:e2:09:80:f9:98:9b:ed:bc:0e:85:8b:
37:43:6b:99:e3:a3:11:7e:89:b9:46:dd:40:8e:4b:3c:3f:d6:
35:06:95:59:84:6c:75:52:e1:65:c8:7b:52:72:a9:48:25:b8:
40:a4:b5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:50:37 2025 by rpki-client