Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8D75AE32EF8B11EF935A845BC4F9AE02.roa
File: 8D75AE32EF8B11EF935A845BC4F9AE02.roa (raw, json)
Hash identifier: VKN4uYG83qiaCEb3c/OUpgDPiL5dCTzLABs1TeGI3Ek=
Subject key identifier: 26:1F:DD:0F:03:49:E0:2C:9A:BA:A4:83:19:68:B4:D6:E8:C7:38:12
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 23D5
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8D75AE32EF8B11EF935A845BC4F9AE02.roa
Signing time: Mon 24 Feb 2025 07:21:09 +0000
ROA not before: Mon 24 Feb 2025 07:21:09 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/24 maxlen: 24
43.226.225.0/24 maxlen: 24
43.226.226.0/24 maxlen: 24
43.226.227.0/24 maxlen: 24
103.11.63.0/24 maxlen: 24
103.151.26.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.209.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.211.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.214.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.223.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
113.203.231.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.246.0/24 maxlen: 24
113.203.255.0/24 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.60.0/23 maxlen: 24
115.167.62.0/23 maxlen: 24
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.117.0/24 maxlen: 24
115.167.119.0/24 maxlen: 24
115.167.122.0/24 maxlen: 24
115.167.123.0/24 maxlen: 24
115.167.124.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.64.0/22 maxlen: 24
175.110.80.0/24 maxlen: 24
175.110.81.0/24 maxlen: 24
175.110.82.0/24 maxlen: 24
175.110.83.0/24 maxlen: 24
175.110.89.0/24 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.98.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.144.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.147.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.161.0/24 maxlen: 24
180.178.162.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.164.0/24 maxlen: 24
180.178.165.0/24 maxlen: 24
180.178.166.0/24 maxlen: 24
180.178.167.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.176.0/22 maxlen: 22
180.178.180.0/24 maxlen: 24
180.178.181.0/24 maxlen: 24
180.178.182.0/24 maxlen: 24
180.178.183.0/24 maxlen: 24
180.178.184.0/22 maxlen: 22
180.178.185.0/24 maxlen: 24
180.178.186.0/24 maxlen: 24
180.178.187.0/24 maxlen: 24
180.178.188.0/24 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.190.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.225.0/24 maxlen: 24
223.29.226.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Feb 2025 10:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9173 (0x23d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Feb 24 07:21:09 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67bc1de5-7bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:49:75:78:87:53:7c:1a:db:a8:68:10:80:
1f:18:76:04:2d:30:b7:a3:b5:d1:76:f8:e0:6b:39:
55:af:53:e9:fa:21:88:6e:f2:9e:eb:ea:85:d5:fd:
bf:e4:d0:c8:ac:91:34:b5:d1:a5:79:bc:28:3c:42:
d3:57:b0:4e:c3:fc:82:7d:5b:cb:8f:df:3a:17:12:
2a:64:88:d4:22:32:46:23:74:9d:62:70:32:f0:30:
22:75:d0:e1:cb:c1:67:49:be:ac:c2:77:e4:79:53:
fe:ef:0d:c3:be:83:f4:cf:e4:4d:67:87:ff:a8:b3:
04:d9:05:ba:37:80:41:12:9d:a3:15:ea:10:83:dc:
27:43:2c:f9:62:4f:bd:b9:4e:ca:6d:2d:f0:de:8e:
18:b0:44:19:53:77:89:73:50:99:95:25:a4:22:19:
98:14:24:e3:92:0b:c0:04:f9:68:75:00:f5:65:06:
59:49:fc:b7:cd:c3:27:d6:a4:ec:d2:70:6a:c4:fc:
f3:82:49:24:0b:57:d7:96:ba:ae:c4:6e:57:94:95:
49:8f:24:e7:42:91:89:6b:8b:b2:03:b0:1f:c2:a0:
d7:f1:78:01:59:d6:5c:43:4e:62:8a:54:1f:1b:6d:
31:f6:22:b8:15:79:ce:0e:0f:6d:9c:bc:a2:e2:bb:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:1F:DD:0F:03:49:E0:2C:9A:BA:A4:83:19:68:B4:D6:E8:C7:38:12
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/8D75AE32EF8B11EF935A845BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.11.63.0/24
103.151.26.0/24
113.203.208.0-113.203.220.255
113.203.222.0-113.203.224.255
113.203.231.0/24
113.203.233.0/24
113.203.245.0-113.203.246.255
113.203.255.0/24
115.167.16.0/21
115.167.29.0-115.167.31.255
115.167.48.0/24
115.167.56.0-115.167.64.255
115.167.66.0/24
115.167.73.0/24
115.167.78.0/24
115.167.117.0/24
115.167.119.0/24
115.167.122.0-115.167.125.255
175.110.64.0/22
175.110.80.0/22
175.110.89.0/24
175.110.97.0-175.110.98.255
175.110.104.0/22
175.110.109.0-175.110.111.255
180.178.142.0/24
180.178.144.0/24
180.178.146.0-180.178.150.255
180.178.160.0-180.178.171.255
180.178.176.0/20
202.92.18.0/24
202.92.26.0/24
223.29.225.0-223.29.226.255
223.29.236.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:09:ac:ee:6e:63:35:b1:cb:21:a2:ef:da:3f:d8:45:63:9c:
21:66:29:8c:2c:b1:2d:e8:49:23:84:03:52:9a:69:92:78:26:
99:24:e9:10:6d:fa:4a:93:20:f9:51:2a:b0:2e:b0:bf:75:68:
0f:41:92:b1:eb:ca:1e:a3:74:14:ef:18:a5:69:36:9b:c1:13:
ac:4e:d6:69:d8:83:8c:9b:c0:82:b2:b3:35:bd:76:e1:e9:aa:
78:0e:23:27:ca:e1:40:e4:ad:33:c0:b8:d0:7b:e7:36:58:b6:
c9:a2:a2:7a:f2:8b:c7:39:4a:75:16:ea:8d:bb:93:20:24:05:
01:6a:29:f2:35:e5:4a:b5:6d:fc:94:b8:55:d6:b2:4a:d2:cd:
6b:e9:56:54:83:7f:e8:80:4c:b1:0d:37:12:e0:e3:1e:3b:e4:
3d:1f:e7:6f:bc:21:d9:23:43:af:18:45:b5:20:d0:42:8f:aa:
ae:6a:d9:e1:47:74:6c:b5:73:48:d0:25:a0:e2:55:a9:ad:2b:
fd:aa:29:b5:e5:ce:93:f4:98:29:e1:22:6d:84:e5:11:ef:e5:
01:2e:14:cc:a0:28:90:57:78:4a:07:11:26:fb:02:9b:1c:80:
93:64:91:55:b5:5a:95:18:9d:53:b5:40:bd:f7:73:e9:6a:cb:
92:62:9c:47
-----BEGIN CERTIFICATE-----
MIIGmTCCBYGgAwIBAgICI9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjUwMjI0MDcyMTA5WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2JjMWRlNS03YmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqIpJdXiHU3wa26hoEIAfGHYELTC3o7XRdvjgazlVr1Pp+iGIbvKe6+qF1f2/
5NDIrJE0tdGlebwoPELTV7BOw/yCfVvLj986FxIqZIjUIjJGI3SdYnAy8DAiddDh
y8FnSb6swnfkeVP+7w3DvoP0z+RNZ4f/qLME2QW6N4BBEp2jFeoQg9wnQyz5Yk+9
uU7KbS3w3o4YsEQZU3eJc1CZlSWkIhmYFCTjkgvABPlodQD1ZQZZSfy3zcMn1qTs
0nBqxPzzgkkkC1fXlrquxG5XlJVJjyTnQpGJa4uyA7AfwqDX8XgBWdZcQ05iilQf
G20x9iK4FXnODg9tnLyi4rs0hQIDAQABo4IDvTCCA7kwHQYDVR0OBBYEFCYf3Q8D
SeAsmrqkgxlotNboxzgSMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvOEQ3NUFFMzJF
RjhCMTFFRjkzNUE4NDVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggFFBggrBgEFBQcBBwEB
/wSCATQwggEwMIIBLAQCAAEwggEkAwQCK+LgAwQAZws/AwQAZ5caMAwDBARxy9AD
BABxy9wwDAMEAXHL3gMEAHHL4AMEAHHL5wMEAHHL6TAMAwQAccv1AwQAccv2AwQA
ccv/AwQDc6cQMAwDBABzpx0DBAVzpwADBABzpzAwDAMEA3OnOAMEAHOnQAMEAHOn
QgMEAHOnSQMEAHOnTgMEAHOndQMEAHOndzAMAwQBc6d6AwQBc6d8AwQCr25AAwQC
r25QAwQAr25ZMAwDBACvbmEDBACvbmIDBAKvbmgwDAMEAK9ubQMEBK9uYAMEALSy
jgMEALSykDAMAwQBtLKSAwQAtLKWMAwDBAW0sqADBAK0sqgDBAS0srADBADKXBID
BADKXBowDAMEAN8d4QMEAN8d4gMEAN8d7DANBgkqhkiG9w0BAQsFAAOCAQEAtwms
7m5jNbHLIaLv2j/YRWOcIWYpjCyxLehJI4QDUpppkngmmSTpEG36SpMg+VEqsC6w
v3VoD0GSsevKHqN0FO8YpWk2m8ETrE7WadiDjJvAgrKzNb124emqeA4jJ8rhQOSt
M8C40HvnNli2yaKievKLxzlKdRbqjbuTICQFAWop8jXlSrVt/JS4VdayStLNa+lW
VIN/6IBMsQ03EuDjHjvkPR/nb7wh2SNDrxhFtSDQQo+qrmrZ4Ud0bLVzSNAloOJV
qa0r/aopteXOk/SYKeEibYTlEe/lAS4UzKAokFd4SgcRJvsCmxyAk2SRVbValRid
U7VAvfdz6WrLkmKcRw==
-----END CERTIFICATE-----
Generated at Mon May 12 03:59:08 2025 by rpki-client