Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BB55B6A2702F11EF8EDA611FC4F9AE02.roa
File: BB55B6A2702F11EF8EDA611FC4F9AE02.roa (raw, json)
Hash identifier: uiFJwJirzRzg3ON+qpol+FmGAZwAz9kdcCB3mp2XlnQ=
Subject key identifier: D5:4A:AD:35:4D:06:69:EE:CB:D8:7B:E7:65:E4:12:D6:28:48:B6:10
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 15C5
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BB55B6A2702F11EF8EDA611FC4F9AE02.roa
Signing time: Wed 11 Sep 2024 11:19:39 +0000
ROA not before: Wed 11 Sep 2024 11:19:39 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 103.11.63.0/24 maxlen: 24
103.151.27.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.212.0/24 maxlen: 24
113.203.213.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.216.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.218.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.227.0/24 maxlen: 24
113.203.233.0/24 maxlen: 24
113.203.242.0/24 maxlen: 24
113.203.243.0/24 maxlen: 24
113.203.244.0/24 maxlen: 24
113.203.245.0/24 maxlen: 24
113.203.248.0/24 maxlen: 24
113.203.249.0/24 maxlen: 24
113.203.250.0/24 maxlen: 24
113.203.251.0/24 maxlen: 24
113.203.252.0/22 maxlen: 24
115.167.2.0/24 maxlen: 24
115.167.3.0/24 maxlen: 24
115.167.12.0/22 maxlen: 24
115.167.16.0/22 maxlen: 24
115.167.20.0/22 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.116.0/22 maxlen: 24
115.167.120.0/22 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.88.0/22 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
175.110.107.0/24 maxlen: 24
175.110.109.0/24 maxlen: 24
175.110.110.0/24 maxlen: 24
175.110.111.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.148.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.160.0/24 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.169.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
180.178.171.0/24 maxlen: 24
180.178.180.0/22 maxlen: 24
180.178.184.0/22 maxlen: 24
180.178.189.0/24 maxlen: 24
180.178.191.0/24 maxlen: 24
202.92.18.0/24 maxlen: 24
202.92.20.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.231.0/24 maxlen: 24
223.29.235.0/24 maxlen: 24
223.29.236.0/24 maxlen: 24
223.29.237.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
223.29.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Sep 2024 11:20:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5573 (0x15c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Sep 11 11:19:39 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66e17cca-8033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:82:96:8c:ea:f5:b4:32:d5:34:e4:88:e8:
19:20:96:77:93:c9:1d:7b:ae:21:02:3a:42:fd:b0:
bd:b5:a8:4f:e9:3a:cf:36:67:19:26:a1:74:5e:58:
d6:eb:d7:f1:4f:f7:d2:7d:2f:81:ae:9f:46:b3:52:
b1:9a:03:e0:cc:2a:51:32:23:cf:70:7e:08:17:b6:
22:2e:11:60:16:8d:84:b6:55:d1:b7:16:cf:ef:8c:
0d:58:06:1a:1b:d4:15:5c:54:68:10:a3:d7:75:4a:
97:72:8f:01:df:a6:87:1d:09:17:87:ec:4e:b1:6b:
bf:92:dc:ee:15:6f:64:70:89:5f:09:3c:67:b0:c4:
81:33:8b:4d:bc:93:02:7d:a3:a6:06:20:92:e6:01:
43:9e:d2:16:39:4e:a5:62:e5:6b:52:40:a4:09:a9:
19:0a:de:ec:32:bc:cb:85:60:aa:a9:28:11:af:68:
27:e8:41:13:81:af:e8:f6:a5:00:4b:da:e2:03:34:
a8:46:ad:57:0d:e5:b3:eb:3e:d5:67:0c:ea:57:8e:
42:e1:89:2b:ef:54:90:43:94:58:9f:f3:f8:0d:f7:
00:84:5b:06:e9:5e:b1:ed:a1:0a:de:6e:6b:f2:6e:
fc:3d:91:b0:d9:8b:32:fc:34:d1:ad:92:a6:ec:e0:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4A:AD:35:4D:06:69:EE:CB:D8:7B:E7:65:E4:12:D6:28:48:B6:10
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/BB55B6A2702F11EF8EDA611FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.11.63.0/24
103.151.27.0/24
113.203.208.0/24
113.203.210.0/24
113.203.212.0/23
113.203.215.0-113.203.220.255
113.203.222.0/24
113.203.227.0/24
113.203.233.0/24
113.203.242.0-113.203.245.255
113.203.248.0/21
115.167.2.0/23
115.167.12.0-115.167.23.255
115.167.50.0/24
115.167.56.0/22
115.167.73.0/24
115.167.78.0/24
115.167.116.0-115.167.123.255
115.167.125.0/24
175.110.88.0/22
175.110.97.0/24
175.110.104.0/22
175.110.109.0-175.110.111.255
180.178.142.0/24
180.178.148.0-180.178.150.255
180.178.160.0/24
180.178.163.0/24
180.178.169.0-180.178.171.255
180.178.180.0-180.178.187.255
180.178.189.0/24
180.178.191.0/24
202.92.18.0/24
202.92.20.0/24
202.92.26.0/24
223.29.231.0/24
223.29.235.0-223.29.239.255
Signature Algorithm: sha256WithRSAEncryption
90:6a:a4:2c:a9:73:d3:e7:8b:f5:94:1c:75:fa:66:89:bc:f8:
ae:5d:8f:c8:ca:ff:fb:c6:0a:6f:9b:da:a1:23:6a:e4:62:cd:
45:48:eb:cd:1f:db:04:1b:c4:5d:0b:44:8a:05:51:f2:00:c0:
0a:38:bf:1f:a2:40:4c:8f:9b:53:3f:eb:ad:2f:5d:8e:20:ec:
aa:ee:00:27:a8:fe:f2:a1:15:38:fe:2b:67:34:5f:47:fc:06:
f5:c7:e8:f9:e4:e9:ce:45:bf:20:c0:60:8f:f0:20:f5:09:4e:
75:cf:20:64:d4:8b:ae:2b:22:9e:50:76:67:90:03:a9:b9:98:
18:9b:29:0d:55:3e:e9:56:cc:b5:c2:a9:71:42:eb:20:c5:2d:
a9:cc:8b:15:e3:ce:fc:6e:35:e7:55:8d:8f:6a:46:66:fa:08:
42:72:3e:0f:56:3d:d5:cb:c9:4b:a2:d5:c5:af:0f:aa:43:8f:
21:83:af:62:e1:02:99:a6:72:b2:28:4c:a2:f1:a2:c2:26:d3:
ac:92:68:90:26:b4:69:56:fb:a4:d3:73:ff:90:7a:e6:8b:07:
91:76:a2:45:27:2b:d6:e1:96:86:bd:ca:56:76:a2:4c:cc:1f:
88:24:40:97:85:79:d7:62:67:72:9c:03:62:89:78:26:b6:1b:
9e:65:57:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:59:08 2025 by rpki-client