Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A5BA346EC69A11EF88F4AC3BC4F9AE02.roa
File: A5BA346EC69A11EF88F4AC3BC4F9AE02.roa (raw, json)
Hash identifier: LQVZ+i5fEa7af8jYKeByudPOgipNjjp7rFHxuyJjZMc=
Subject key identifier: D1:93:E2:83:14:8B:D1:5F:F6:08:72:3A:4B:E4:8F:A7:E0:A1:2F:18
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 2060
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A5BA346EC69A11EF88F4AC3BC4F9AE02.roa
Signing time: Mon 30 Dec 2024 10:41:38 +0000
ROA not before: Mon 30 Dec 2024 10:41:38 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.52.0/24 maxlen: 24
115.167.53.0/24 maxlen: 24
115.167.54.0/24 maxlen: 24
115.167.55.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Dec 2024 10:55:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8288 (0x2060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Dec 30 10:41:38 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=677278e2-9391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:66:26:68:78:1d:e7:50:7f:2b:27:c1:23:
99:12:66:74:84:ba:a7:e7:8c:2b:ce:a4:77:19:00:
ab:23:d2:0c:72:55:99:ed:74:a0:a9:f6:b3:90:79:
b1:f9:53:d0:71:91:fd:e1:68:8f:db:42:3e:76:be:
8c:e1:e4:57:06:51:77:2e:0b:52:31:57:ac:cf:21:
72:7d:45:22:f6:7d:c3:3f:b4:08:99:80:a3:6a:6f:
59:fd:45:14:02:d4:86:eb:8d:c6:af:6e:48:fd:72:
16:7c:07:cf:de:1b:fc:a2:70:c3:f4:f8:d4:81:bd:
dd:ae:03:51:d1:20:c3:29:9c:fb:3b:58:b9:b2:ea:
2b:ec:3e:37:0f:dd:84:67:c6:96:ea:c0:31:25:8b:
7a:7c:3e:23:77:30:86:36:80:95:23:e7:04:ca:e3:
df:b6:19:62:d3:89:30:31:85:92:56:d0:41:1f:93:
cb:0b:27:8f:21:01:47:b7:5d:f4:b8:83:9a:b6:ea:
ea:64:e9:5f:2b:64:66:12:4a:41:22:15:3c:50:3f:
8a:a0:da:ab:b4:41:35:f1:b4:78:4a:b5:f3:2a:15:
36:ab:e2:41:aa:6c:1d:62:1a:25:1e:86:07:be:fb:
bd:f4:66:ce:d0:0e:eb:4d:be:57:75:98:fb:64:0f:
1e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:93:E2:83:14:8B:D1:5F:F6:08:72:3A:4B:E4:8F:A7:E0:A1:2F:18
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/A5BA346EC69A11EF88F4AC3BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.225.0-43.226.227.255
113.203.224.0/23
113.203.227.0/24
113.203.243.0/24
115.167.5.0/24
115.167.9.0/24
115.167.12.0/22
115.167.52.0/22
175.110.111.0/24
180.178.165.0/24
180.178.167.0-180.178.168.255
223.29.231.0/24
223.29.235.0/24
223.29.237.0-223.29.238.255
Signature Algorithm: sha256WithRSAEncryption
b9:0a:bf:a4:c5:d8:75:b1:f7:7c:06:9f:f2:90:98:75:d8:de:
20:2e:cd:c6:9c:1d:c0:d1:3d:b6:e1:bf:45:69:9d:3d:73:4c:
4d:38:46:30:f1:6c:44:40:b9:af:5b:35:2a:9b:50:6d:6b:87:
b5:ad:74:c7:67:e7:a7:0b:64:a1:f1:c4:1d:de:a5:71:ac:4f:
08:dd:0e:53:31:09:85:2f:90:45:da:2b:a8:c7:d6:03:79:90:
5c:68:6a:20:17:81:70:ef:c9:cf:fa:d5:9b:2b:31:7e:e0:55:
ec:b7:ed:13:7a:08:ba:bb:38:d1:9f:85:74:10:dc:1f:8e:e0:
e6:39:50:25:73:f5:33:7e:2a:1c:ae:a7:90:49:63:34:15:d4:
05:3f:5b:ee:f1:37:58:b6:14:2b:0d:2a:c6:74:c9:3c:3c:92:
dc:d5:7c:9e:a1:06:7a:e2:9e:cf:f9:df:00:ff:c2:8d:6e:35:
ec:26:27:74:db:93:13:c8:d3:6e:08:d3:1a:bc:0d:5b:eb:25:
c7:8c:d4:c4:16:9a:d4:44:8f:03:5a:48:b0:cb:5b:b4:ab:9e:
b9:be:3f:70:15:59:6b:df:c6:52:55:ff:aa:25:1c:6f:cc:8e:
d1:80:82:ce:e7:31:d5:e5:5f:b3:80:ec:20:b5:43:04:0c:11:
81:69:be:6b
-----BEGIN CERTIFICATE-----
MIIF2DCCBMCgAwIBAgICIGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQxMjMwMTA0MTM4WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzcyNzhlMi05MzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt+9mJmh4HedQfysnwSOZEmZ0hLqn54wrzqR3GQCrI9IMclWZ7XSgqfazkHmx
+VPQcZH94WiP20I+dr6M4eRXBlF3LgtSMVeszyFyfUUi9n3DP7QImYCjam9Z/UUU
AtSG643Gr25I/XIWfAfP3hv8onDD9PjUgb3drgNR0SDDKZz7O1i5suor7D43D92E
Z8aW6sAxJYt6fD4jdzCGNoCVI+cEyuPfthli04kwMYWSVtBBH5PLCyePIQFHt130
uIOaturqZOlfK2RmEkpBIhU8UD+KoNqrtEE18bR4SrXzKhU2q+JBqmwdYholHoYH
vvu99GbO0A7rTb5XdZj7ZA8e+wIDAQABo4IC/DCCAvgwHQYDVR0OBBYEFNGT4oMU
i9Ff9ghyOkvkj6fgoS8YMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQTVCQTM0NkVD
NjlBMTFFRjg4RjRBQzNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYUGCCsGAQUFBwEHAQH/
BHYwdDByBAIAATBsMAwDBAAr4uEDBAIr4uADBAFxy+ADBABxy+MDBABxy/MDBABz
pwUDBABzpwkDBAJzpwwDBAJzpzQDBACvbm8DBAC0sqUwDAMEALSypwMEALSyqAME
AN8d5wMEAN8d6zAMAwQA3x3tAwQA3x3uMA0GCSqGSIb3DQEBCwUAA4IBAQC5Cr+k
xdh1sfd8Bp/ykJh12N4gLs3GnB3A0T224b9FaZ09c0xNOEYw8WxEQLmvWzUqm1Bt
a4e1rXTHZ+enC2Sh8cQd3qVxrE8I3Q5TMQmFL5BF2iuox9YDeZBcaGogF4Fw78nP
+tWbKzF+4FXst+0Tegi6uzjRn4V0ENwfjuDmOVAlc/UzfiocrqeQSWM0FdQFP1vu
8TdYthQrDSrGdMk8PJLc1XyeoQZ64p7P+d8A/8KNbjXsJid025MTyNNuCNMavA1b
6yXHjNTEFprURI8DWkiwy1u0q565vj9wFVlr38ZSVf+qJRxvzI7RgILO5zHV5V+z
gOwgtUMEDBGBab5r
Generated at Mon Dec 30 14:23:20 2024 by rpki-client on console.sobornost.net