Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C6AE950CB61411EFACCFCD60C4F9AE02.roa
File: C6AE950CB61411EFACCFCD60C4F9AE02.roa (raw, json)
Hash identifier: NrkjOL10kckoWJ4hrTtzmnIGgXVweb3bfCpF/Zc62Iw=
Subject key identifier: 25:1E:83:6E:14:3E:DE:E1:A0:49:F8:0C:D6:31:A8:A2:5B:9C:F9:54
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1F52
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C6AE950CB61411EFACCFCD60C4F9AE02.roa
Signing time: Thu 12 Dec 2024 10:37:41 +0000
ROA not before: Thu 12 Dec 2024 10:37:41 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
103.151.26.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.81.0/24 maxlen: 24
175.110.82.0/24 maxlen: 24
175.110.83.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.183.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 11:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8018 (0x1f52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 12 10:37:41 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=675abcf4-aafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:4b:b3:1a:16:7b:7d:e0:ed:cd:c6:d6:10:
51:90:d5:f4:11:de:fc:10:d8:75:d9:f2:b2:8c:20:
87:ba:7a:cd:5c:f3:b7:84:57:23:fc:17:54:61:1f:
b9:b9:1a:b8:c7:26:1c:61:07:2e:59:82:fa:5c:6d:
56:e6:d6:aa:e0:43:50:38:54:71:aa:a8:c2:c8:e5:
2f:9d:5a:01:37:02:14:1b:ee:b4:26:78:93:85:46:
01:7a:a8:fa:2b:12:19:2d:a4:e4:69:97:22:48:b6:
cf:eb:9a:9d:34:23:b6:43:a6:95:1a:59:23:70:9a:
ae:8b:44:b6:52:e1:ad:10:1b:ce:bd:6a:47:5c:e7:
46:30:87:6c:5a:3c:61:20:1a:16:c7:6d:a9:8f:24:
a1:66:cc:56:ff:15:db:f3:b3:ca:9d:8e:ea:0e:e5:
c0:91:27:10:33:4f:79:bd:eb:ea:d4:86:ba:ce:b7:
8c:95:9c:83:1a:98:dc:d7:cf:8e:06:44:a6:cf:b1:
36:8c:f0:0e:e8:00:62:ee:00:e2:de:ac:69:f8:59:
0f:8b:8c:b7:0a:17:f1:a8:7f:f4:68:7d:86:95:77:
89:c8:a3:94:27:71:6a:98:8d:4a:3a:81:dc:a6:a8:
08:64:43:de:2d:3e:10:b8:5d:c1:57:66:ae:dc:ef:
55:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1E:83:6E:14:3E:DE:E1:A0:49:F8:0C:D6:31:A8:A2:5B:9C:F9:54
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/C6AE950CB61411EFACCFCD60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
103.151.26.0/24
113.203.216.0/24
113.203.223.0/24
113.203.229.0-113.203.230.255
113.203.241.0-113.203.242.255
113.203.253.0/24
113.203.255.0/24
115.167.6.0/24
115.167.16.0/22
115.167.77.0-115.167.78.255
115.167.125.0/24
175.110.81.0-175.110.83.255
180.178.142.0/24
180.178.148.0/24
180.178.150.0/24
180.178.160.0/24
180.178.183.0/24
180.178.187.0/24
180.178.191.0/24
202.92.26.0/24
223.29.225.0/24
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:26:2f:69:40:10:b7:1e:1d:4f:ff:89:34:46:72:fa:03:c4:
8c:ed:b8:7d:b7:73:46:b2:5f:0e:c2:c6:c9:c9:41:60:16:ff:
f4:3a:a8:36:4a:a2:59:44:25:8e:3d:38:b7:18:f2:fd:35:1c:
f4:0f:2f:31:e5:87:be:0d:da:75:dc:b1:55:c9:50:57:7a:e5:
cc:a4:8b:e0:99:40:82:41:96:74:22:c0:9f:01:84:9a:ca:d9:
7d:6c:29:e2:9d:b1:32:08:a1:0e:4f:dc:7a:29:22:40:b4:98:
5f:40:f2:78:99:e0:5d:7e:7d:c3:fb:f4:7b:e4:0d:7b:7c:bc:
5b:13:1b:02:2d:99:e8:b6:74:ad:92:b3:76:2b:aa:15:e8:cb:
1e:d1:27:f3:1f:48:f6:9b:4a:20:5b:03:15:14:0c:5d:a0:27:
a0:94:d0:bb:b9:c5:48:18:44:cb:9d:2a:aa:19:0d:fc:75:71:
c5:cd:22:44:69:f0:46:33:c3:02:4a:b3:41:f0:f8:92:44:fd:
b4:20:f5:e6:94:52:5f:86:9f:b6:36:7e:f1:65:27:9d:d2:4e:
04:f6:68:ae:c8:55:be:8a:37:0a:33:a4:7b:83:f7:0b:d0:cd:
f8:bb:64:9e:ea:17:68:c9:57:1e:69:b5:24:ae:9e:e0:ce:6f:
e0:a6:b9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:31:17 2025 by rpki-client