Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7FA9C758C67711EFB8C83B72C4F9AE02.roa
File: 7FA9C758C67711EFB8C83B72C4F9AE02.roa (raw, json)
Hash identifier: aF9Qqj/Fh1cbx1G8mtypdmA/zz85+PXfW3vJp+8nz80=
Subject key identifier: 5D:1E:85:C5:4C:A2:29:FB:EA:86:1C:84:DB:65:B7:1D:FC:DC:24:44
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2062
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7FA9C758C67711EFB8C83B72C4F9AE02.roa
Signing time: Mon 30 Dec 2024 10:42:13 +0000
ROA not before: Mon 30 Dec 2024 10:42:13 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.229.0/24 maxlen: 24
113.203.230.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.241.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.253.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.28.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.76.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.101.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.103.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.118.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.91.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.180.0/24 maxlen: 24
180.178.181.0/24 maxlen: 24
180.178.182.0/24 maxlen: 24
180.178.183.0/24 maxlen: 24
180.178.184.0/22 maxlen: 22
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.228.0/24 maxlen: 24
223.29.230.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Dec 2024 10:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8290 (0x2062)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 30 10:42:13 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67727904-1139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:95:65:85:3c:75:98:18:85:ca:f4:64:65:9e:
1d:80:0d:e8:b4:cb:7f:b3:a6:2d:28:53:86:ee:31:
4f:39:1a:3b:89:cc:0c:34:4e:60:89:51:d9:4b:b8:
c8:54:4e:61:3f:fe:b9:08:22:4f:e4:fd:05:3c:66:
c1:b1:a5:85:5c:23:ca:8e:c3:7f:ee:3d:25:0c:83:
66:bd:e1:6f:99:cf:6a:5b:3e:f9:9c:bb:b4:17:98:
73:72:0f:79:9b:9e:1b:b2:f9:82:c3:3c:d1:a6:5d:
6e:b9:7a:24:ac:1f:1d:d4:50:85:49:ca:b4:de:15:
0a:22:65:34:2f:18:e9:bc:01:23:6c:1d:24:d8:61:
37:dc:da:49:a2:ce:59:55:2b:3b:47:ed:cc:a0:c5:
63:7e:fd:dc:a6:9c:16:73:d0:f0:de:7f:cf:ab:a0:
3d:fe:40:9b:7a:0b:9d:31:99:46:b8:f8:c0:f8:f5:
a0:85:51:2d:2f:7d:69:37:0f:cc:47:88:4a:d1:92:
fa:df:a7:11:0b:c0:98:63:84:a4:1a:d2:21:5f:4d:
e3:32:b6:ae:7f:59:e2:73:ab:83:10:5e:1e:14:76:
73:2a:69:ce:d4:cf:00:db:3e:4d:ae:a0:30:f1:1f:
81:5e:55:52:ed:f4:5d:a6:43:e2:0e:d8:0b:f2:b6:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1E:85:C5:4C:A2:29:FB:EA:86:1C:84:DB:65:B7:1D:FC:DC:24:44
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/7FA9C758C67711EFB8C83B72C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/24
103.11.63.0/24
103.151.27.0/24
113.203.208.0-113.203.220.255
113.203.222.0/23
113.203.229.0-113.203.231.255
113.203.241.0-113.203.242.255
113.203.248.0/24
113.203.253.0/24
115.167.3.0/24
115.167.6.0/24
115.167.16.0/22
115.167.28.0/24
115.167.31.0/24
115.167.64.0/24
115.167.66.0/24
115.167.73.0/24
115.167.76.0-115.167.78.255
115.167.101.0-115.167.103.255
115.167.117.0-115.167.118.255
115.167.122.0-115.167.124.255
175.110.89.0/24
175.110.91.0/24
175.110.97.0-175.110.98.255
175.110.104.0/22
175.110.109.0-175.110.110.255
180.178.142.0/24
180.178.144.0/24
180.178.146.0-180.178.150.255
180.178.160.0-180.178.164.255
180.178.166.0/24
180.178.169.0-180.178.171.255
180.178.176.0/20
202.92.26.0/24
223.29.225.0/24
223.29.228.0/24
223.29.230.0/24
223.29.236.0/24
223.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
84:5f:ca:d2:12:18:13:f7:a8:4e:f7:a4:93:80:1d:91:35:99:
39:33:93:f5:87:4d:45:07:85:97:1b:9d:7b:a1:f1:36:55:61:
7f:6b:ba:92:03:5e:98:b3:25:b5:f5:d2:67:b0:87:2f:ac:1e:
d5:15:8b:e0:34:df:20:ff:c4:5a:c1:b9:24:20:f1:85:b8:18:
30:75:0e:81:b5:68:b5:96:61:1a:f0:6a:ed:ce:18:78:31:84:
8b:f5:b5:b1:1a:82:c1:66:f6:94:86:b0:d5:ef:24:2a:9e:9b:
3b:03:cb:94:8e:e7:f9:ab:64:2b:0b:f6:a3:8f:f9:dd:2b:cf:
ba:75:d8:32:05:fb:6c:25:9f:3f:96:ca:5c:3c:2d:cc:a8:29:
06:51:07:4e:67:25:5f:19:c3:db:ba:05:b0:86:be:d3:fb:75:
64:52:cb:0b:b6:0e:18:60:70:d1:1e:d9:1c:4b:24:a5:75:a3:
d1:3d:9d:10:1b:ca:06:ab:e8:72:0a:01:db:b3:2f:5c:be:06:
66:a8:02:5c:d5:b8:ec:d7:58:f0:23:b5:bc:dc:3e:9a:1e:19:
23:b0:42:9e:35:15:12:20:16:5e:fa:24:bd:95:1e:a2:71:b4:
cc:b1:b0:af:e4:fb:c7:76:36:90:4c:f0:0d:a8:ea:8d:77:93:
9a:e4:d6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 30 14:23:20 2024 by rpki-client on console.sobornost.net