Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8A42B9A8ADA511EFB3CAC861C4F9AE02.roa
File: 8A42B9A8ADA511EFB3CAC861C4F9AE02.roa (raw, json)
Hash identifier: /h+1MNn+4LiCbAMFdtMNs3T20ABYU5mhnN0bxjIKXrs=
Subject key identifier: 00:97:49:87:AF:CC:5C:B5:ED:7F:B6:78:08:F0:08:B3:41:1C:BE:F6
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1E24
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8A42B9A8ADA511EFB3CAC861C4F9AE02.roa
Signing time: Thu 28 Nov 2024 16:26:37 +0000
ROA not before: Thu 28 Nov 2024 16:26:37 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.183.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.229.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Nov 2024 12:32:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7716 (0x1e24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Nov 28 16:26:37 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=674899bd-c5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:b7:9c:cb:32:75:62:ef:67:b6:e8:01:d7:
28:ee:c6:36:7f:95:bb:95:16:7f:83:fb:79:3e:f9:
ee:41:eb:c4:87:ff:c8:10:83:2f:f2:34:64:93:be:
83:39:22:f0:34:40:70:e9:c6:52:ba:ee:cf:ad:cd:
3b:5f:66:9f:d6:1f:03:f4:3f:c3:6f:63:a4:45:0f:
3b:fa:a8:ed:8c:d2:bb:a4:e3:75:0a:42:06:64:fb:
8a:a8:7c:b2:a2:3c:27:6e:d8:06:0d:ac:f5:be:a3:
b5:89:a6:02:9f:62:8f:65:d3:31:dc:cd:d4:c8:83:
82:8d:b0:d8:63:e1:50:bf:43:49:2e:cf:13:eb:cc:
9c:6c:bd:81:bc:24:1c:80:8e:7f:cc:0c:76:39:e9:
cb:0d:84:c5:e6:87:65:40:8a:13:11:c7:2f:a1:4e:
14:c7:78:ca:eb:f1:cd:f2:20:19:ce:1c:65:8e:b6:
67:d3:c9:af:6c:aa:28:87:11:b3:cd:75:48:7d:70:
b5:41:bf:08:ba:f4:93:36:33:4d:ed:65:5c:28:20:
d5:dd:b6:7a:f2:e4:87:72:16:39:39:69:1c:0b:4e:
e1:f6:02:cc:f1:9f:59:75:c4:1e:63:67:1a:49:94:
43:86:ca:36:4e:5f:02:0a:36:88:86:2f:a4:48:7f:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:97:49:87:AF:CC:5C:B5:ED:7F:B6:78:08:F0:08:B3:41:1C:BE:F6
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8A42B9A8ADA511EFB3CAC861C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.225.0-43.226.227.255
103.11.63.0/24
113.203.222.0/24
113.203.231.0/24
113.203.241.0/24
113.203.253.0/24
113.203.255.0/24
115.167.29.0-115.167.31.255
115.167.48.0/24
115.167.64.0/24
115.167.66.0/24
115.167.73.0/24
115.167.124.0/23
175.110.80.0/22
175.110.111.0/24
180.178.142.0/24
180.178.144.0/24
180.178.148.0/24
180.178.150.0/24
180.178.160.0-180.178.162.255
180.178.165.0/24
180.178.167.0/24
180.178.176.0/22
180.178.183.0/24
180.178.187.0-180.178.188.255
180.178.191.0/24
202.92.26.0/24
223.29.225.0/24
223.29.229.0/24
223.29.235.0-223.29.236.255
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:1b:01:95:78:70:19:34:20:07:b6:0e:8e:2c:43:1b:af:90:
48:27:31:69:1f:2f:6b:4d:02:fc:be:07:c5:b5:c4:df:e1:8e:
7c:27:1f:aa:c4:b3:27:c4:03:97:d4:ec:c7:95:83:5d:f0:60:
09:57:f5:8d:55:3b:1e:34:c0:0a:06:3c:08:f0:f3:30:09:4e:
ce:e8:59:4f:d9:fe:e5:2b:9d:dc:5c:2d:50:d4:ce:d9:4b:2d:
d8:74:8f:a8:dd:4c:3a:94:6c:72:a5:c3:7f:c2:5a:ba:97:76:
8d:88:43:e8:22:21:2c:f3:f0:77:44:eb:da:bb:82:88:a0:49:
fd:52:41:b2:1e:6c:ee:5f:46:10:d4:c8:17:05:d9:94:e4:e2:
5e:88:16:fe:0b:de:86:4e:ac:cf:77:18:1c:8e:91:6a:98:ee:
b0:1f:c3:8d:d4:30:19:a0:1e:c3:11:51:f0:2c:32:77:d0:ef:
6c:0c:69:58:74:4e:29:01:42:b0:d0:25:5a:f3:77:f3:8c:41:
9e:65:cc:ac:fe:43:6f:2d:8a:48:c5:ad:07:83:54:3f:13:db:
9e:d2:64:a1:55:26:4c:bd:40:94:05:5e:7f:9d:10:15:aa:7b:
63:d2:be:8e:25:fb:6f:dc:ac:1e:8c:d2:7a:3e:07:53:12:e0:
8c:72:be:a6
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgICHiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQxMTI4MTYyNjM3WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzQ4OTliZC1jNWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx1C3nMsydWLvZ7boAdco7sY2f5W7lRZ/g/t5PvnuQevEh//IEIMv8jRkk76D
OSLwNEBw6cZSuu7Prc07X2af1h8D9D/Db2OkRQ87+qjtjNK7pON1CkIGZPuKqHyy
ojwnbtgGDaz1vqO1iaYCn2KPZdMx3M3UyIOCjbDYY+FQv0NJLs8T68ycbL2BvCQc
gI5/zAx2OenLDYTF5odlQIoTEccvoU4Ux3jK6/HN8iAZzhxljrZn08mvbKoohxGz
zXVIfXC1Qb8IuvSTNjNN7WVcKCDV3bZ68uSHchY5OWkcC07h9gLM8Z9ZdcQeY2ca
SZRDhso2Tl8CCjaIhi+kSH8+IQIDAQABo4IDdjCCA3IwHQYDVR0OBBYEFACXSYev
zFy17X+2eAjwCLNBHL72MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvOEE0MkI5QThB
REE1MTFFRkIzQ0FDODYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgf8GCCsGAQUFBwEHAQH/
BIHvMIHsMIHpBAIAATCB4jAMAwQAK+LhAwQCK+LgAwQAZws/AwQAccveAwQAccvn
AwQAccvxAwQAccv9AwQAccv/MAwDBABzpx0DBAVzpwADBABzpzADBABzp0ADBABz
p0IDBABzp0kDBAFzp3wDBAKvblADBACvbm8DBAC0so4DBAC0spADBAC0spQDBAC0
spYwDAMEBbSyoAMEALSyogMEALSypQMEALSypwMEArSysAMEALSytzAMAwQAtLK7
AwQAtLK8AwQAtLK/AwQAylwaAwQA3x3hAwQA3x3lMAwDBADfHesDBADfHewDBADf
He8wDQYJKoZIhvcNAQELBQADggEBAF8bAZV4cBk0IAe2Do4sQxuvkEgnMWkfL2tN
Avy+B8W1xN/hjnwnH6rEsyfEA5fU7MeVg13wYAlX9Y1VOx40wAoGPAjw8zAJTs7o
WU/Z/uUrndxcLVDUztlLLdh0j6jdTDqUbHKlw3/CWrqXdo2IQ+giISzz8HdE69q7
goigSf1SQbIebO5fRhDUyBcF2ZTk4l6IFv4L3oZOrM93GByOkWqY7rAfw43UMBmg
HsMRUfAsMnfQ72wMaVh0TikBQrDQJVrzd/OMQZ5lzKz+Q28tikjFrQeDVD8T257S
ZKFVJky9QJQFXn+dEBWqe2PSvo4l+2/crB6M0no+B1MS4IxyvqY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:56:42 2025 by rpki-client