Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/114E7D5E905711EFA85E9A69C4F9AE02.roa
File: 114E7D5E905711EFA85E9A69C4F9AE02.roa (raw, json)
Hash identifier: IbPbAc5nQ73aJiXecVAADoDkqmBV12NbpE/N3VwwJgE=
Subject key identifier: 04:BE:C9:77:DA:73:D9:F1:A3:67:61:AC:B5:AE:DC:64:F2:C6:07:D9
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1878
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/114E7D5E905711EFA85E9A69C4F9AE02.roa
Signing time: Tue 22 Oct 2024 09:21:50 +0000
ROA not before: Tue 22 Oct 2024 09:21:50 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/22 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.225.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.5.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.77.0/24 maxlen: 24
115.167.96.0/22 maxlen: 24
115.167.125.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.152.0/21 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.176.0/22 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 22 Oct 2024 09:23:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6264 (0x1878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 22 09:21:50 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67176eae-d205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3d:10:46:a1:58:ad:cc:2a:1d:34:26:21:c6:
23:75:3d:c1:c9:b3:0f:1b:b1:87:62:03:aa:11:5b:
2e:27:e1:2e:58:f2:6c:12:54:90:26:f7:e0:67:9f:
aa:e9:ee:38:b7:0f:4b:03:f9:89:70:4d:55:b3:57:
03:b9:70:1c:cc:4b:28:12:53:f7:48:c9:fb:f1:28:
c6:3f:47:eb:95:f7:b9:be:20:a6:63:90:15:17:60:
52:4c:62:4f:3b:ee:90:2f:6c:c2:9f:f5:5f:5d:79:
89:66:28:0f:a7:5b:43:bb:8b:80:5d:c2:e3:91:72:
0c:67:3c:b2:0f:04:b0:e6:6b:44:b4:80:ea:a1:7e:
0f:13:21:40:d0:75:27:21:3f:2a:c1:5c:98:f0:f4:
2e:38:e2:8e:37:62:da:79:bd:39:4f:d5:4f:d5:8e:
42:f5:90:8f:f7:9b:b5:4d:b3:a6:39:74:84:9b:59:
98:3c:f3:e6:3f:9e:8f:34:55:b0:38:a1:85:2a:cf:
ca:13:1a:87:f6:5a:38:01:2f:d3:87:aa:f7:28:17:
fc:55:08:c0:38:a7:3c:ea:7d:d0:15:dc:f5:91:0a:
e8:d4:3f:11:11:6b:36:76:3c:9d:1b:df:c8:71:66:
26:92:cc:b1:fe:aa:b8:1b:65:47:53:a3:a3:95:89:
78:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BE:C9:77:DA:73:D9:F1:A3:67:61:AC:B5:AE:DC:64:F2:C6:07:D9
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/114E7D5E905711EFA85E9A69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.11.63.0/24
113.203.210.0/24
113.203.217.0/24
113.203.220.0/24
113.203.222.0/24
113.203.224.0/23
113.203.252.0/22
115.167.5.0-115.167.6.255
115.167.9.0/24
115.167.48.0/24
115.167.77.0/24
115.167.96.0/22
115.167.125.0/24
180.178.142.0/24
180.178.146.0/24
180.178.149.0-180.178.150.255
180.178.152.0-180.178.160.255
180.178.163.0/24
180.178.168.0/24
180.178.170.0/24
180.178.176.0-180.178.187.255
202.92.26.0/24
223.29.231.0/24
223.29.235.0/24
223.29.237.0-223.29.239.255
Signature Algorithm: sha256WithRSAEncryption
6e:05:2c:55:16:6e:8d:8d:89:0c:b3:c1:0a:0b:9e:6f:36:59:
72:68:cd:90:e1:c2:9f:87:bc:4d:96:7c:77:d6:d4:75:34:a6:
88:8c:43:ad:6a:7a:2d:fd:89:94:38:65:1e:2d:5a:12:07:b4:
2e:b5:51:99:20:3b:c5:ef:e2:7a:12:94:4b:c0:e0:99:f8:68:
c1:c3:1c:69:62:c1:01:be:1a:f0:79:ac:ae:8d:ae:ba:08:f7:
ca:1b:3b:4e:9d:7f:f1:36:76:76:9d:db:db:cf:f4:64:09:a1:
5e:6c:60:67:70:a4:e1:c6:8b:94:04:e6:6d:2f:8d:e6:02:99:
a5:66:99:24:c8:fb:46:0b:d3:f9:94:82:bd:ae:22:70:c8:f3:
42:73:cd:6f:b6:84:88:9d:20:52:be:f8:18:07:06:d2:b3:8d:
c0:9d:69:ac:d5:56:a4:9d:20:4b:19:5b:df:c6:23:4d:5b:82:
ab:87:68:f7:73:4e:0a:0e:4b:03:9c:4f:06:e6:80:a6:02:dc:
86:f6:3d:06:f8:92:17:9f:c7:bc:2f:f3:79:8b:26:9e:33:c8:
31:d0:29:7a:4a:48:a3:b0:2a:08:92:91:85:6b:2e:74:c3:11:
af:f1:2f:9f:3e:2a:e4:2b:2e:a7:cb:bd:52:c6:de:a9:cf:a3:
65:eb:1d:70
-----BEGIN CERTIFICATE-----
MIIGNDCCBRygAwIBAgICGHgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQxMDIyMDkyMTUwWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzE3NmVhZS1kMjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5j0QRqFYrcwqHTQmIcYjdT3BybMPG7GHYgOqEVsuJ+EuWPJsElSQJvfgZ5+q
6e44tw9LA/mJcE1Vs1cDuXAczEsoElP3SMn78SjGP0frlfe5viCmY5AVF2BSTGJP
O+6QL2zCn/VfXXmJZigPp1tDu4uAXcLjkXIMZzyyDwSw5mtEtIDqoX4PEyFA0HUn
IT8qwVyY8PQuOOKON2Laeb05T9VP1Y5C9ZCP95u1TbOmOXSEm1mYPPPmP56PNFWw
OKGFKs/KExqH9lo4AS/Th6r3KBf8VQjAOKc86n3QFdz1kQro1D8REWs2djydG9/I
cWYmksyx/qq4G2VHU6OjlYl4PQIDAQABo4IDWDCCA1QwHQYDVR0OBBYEFAS+yXfa
c9nxo2dhrLWu3GTyxgfZMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvMTE0RTdENUU5
MDU3MTFFRkE4NUU5QTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgeEGCCsGAQUFBwEHAQH/
BIHRMIHOMIHLBAIAATCBxAMEAivi4AMEAGcLPwMEAHHL0gMEAHHL2QMEAHHL3AME
AHHL3gMEAXHL4AMEAnHL/DAMAwQAc6cFAwQAc6cGAwQAc6cJAwQAc6cwAwQAc6dN
AwQCc6dgAwQAc6d9AwQAtLKOAwQAtLKSMAwDBAC0spUDBAC0spYwDAMEA7SymAME
ALSyoAMEALSyowMEALSyqAMEALSyqjAMAwQEtLKwAwQCtLK4AwQAylwaAwQA3x3n
AwQA3x3rMAwDBADfHe0DBATfHeAwDQYJKoZIhvcNAQELBQADggEBAG4FLFUWbo2N
iQyzwQoLnm82WXJozZDhwp+HvE2WfHfW1HU0poiMQ61qei39iZQ4ZR4tWhIHtC61
UZkgO8Xv4noSlEvA4Jn4aMHDHGliwQG+GvB5rK6NrroI98obO06df/E2dnad29vP
9GQJoV5sYGdwpOHGi5QE5m0vjeYCmaVmmSTI+0YL0/mUgr2uInDI80JzzW+2hIid
IFK++BgHBtKzjcCdaazVVqSdIEsZW9/GI01bgquHaPdzTgoOSwOcTwbmgKYC3Ib2
PQb4khefx7wv83mLJp4zyDHQKXpKSKOwKgiSkYVrLnTDEa/xL58+KuQrLqfLvVLG
3qnPo2XrHXA=
-----END CERTIFICATE-----
Generated at Mon May 12 03:55:46 2025 by rpki-client