Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EEF1665096B311EFA5529079C4F9AE02.roa
File: EEF1665096B311EFA5529079C4F9AE02.roa (raw, json)
Hash identifier: neodfBwh/TswvplCUEMG918QyLniJ4vklJTL4JN8URk=
Subject key identifier: CF:5E:9B:78:EA:92:D6:13:08:0D:8B:9B:9C:88:6F:05:E4:8A:10:63
Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Certificate serial: 1ACD
Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EEF1665096B311EFA5529079C4F9AE02.roa
Signing time: Wed 30 Oct 2024 17:17:01 +0000
ROA not before: Wed 30 Oct 2024 17:17:01 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 138241
IP address blocks: 43.226.224.0/22 maxlen: 24
103.11.63.0/24 maxlen: 24
113.203.208.0/24 maxlen: 24
113.203.210.0/24 maxlen: 24
113.203.215.0/24 maxlen: 24
113.203.217.0/24 maxlen: 24
113.203.219.0/24 maxlen: 24
113.203.220.0/24 maxlen: 24
113.203.222.0/24 maxlen: 24
113.203.224.0/24 maxlen: 24
115.167.6.0/24 maxlen: 24
115.167.9.0/24 maxlen: 24
115.167.12.0/22 maxlen: 22
115.167.16.0/22 maxlen: 22
115.167.20.0/22 maxlen: 22
115.167.26.0/24 maxlen: 24
115.167.29.0/24 maxlen: 24
115.167.30.0/24 maxlen: 24
115.167.31.0/24 maxlen: 24
115.167.48.0/24 maxlen: 24
115.167.50.0/24 maxlen: 24
115.167.56.0/22 maxlen: 22
115.167.60.0/22 maxlen: 22
115.167.64.0/24 maxlen: 24
115.167.66.0/24 maxlen: 24
115.167.73.0/24 maxlen: 24
115.167.78.0/24 maxlen: 24
115.167.102.0/24 maxlen: 24
115.167.125.0/24 maxlen: 24
175.110.80.0/22 maxlen: 24
175.110.97.0/24 maxlen: 24
175.110.104.0/24 maxlen: 24
175.110.105.0/24 maxlen: 24
175.110.106.0/24 maxlen: 24
180.178.142.0/24 maxlen: 24
180.178.146.0/24 maxlen: 24
180.178.149.0/24 maxlen: 24
180.178.150.0/24 maxlen: 24
180.178.152.0/21 maxlen: 24
180.178.163.0/24 maxlen: 24
180.178.168.0/24 maxlen: 24
180.178.170.0/24 maxlen: 24
202.92.26.0/24 maxlen: 24
223.29.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 18:17:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6861 (0x1acd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4
Validity
Not Before: Oct 30 17:17:01 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67226a0d-b84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:94:a4:37:7c:f6:14:51:a1:c6:22:43:e6:
dc:b4:10:b4:52:cb:ea:e5:79:24:dc:53:d9:92:f1:
f4:63:3f:69:ee:2b:2b:44:8b:90:6a:13:3c:fb:2a:
aa:69:f1:9e:0c:8e:e0:11:92:59:93:ce:e7:ca:4c:
9a:90:0e:c2:63:f8:4d:be:5b:53:df:06:30:89:fa:
c1:e6:62:7a:24:be:ce:c0:7c:05:76:9b:4f:54:65:
d4:7b:ed:e7:b9:d8:c0:72:7b:64:33:63:f7:c1:e7:
6f:03:1d:92:4a:75:c5:8e:91:8a:61:db:7d:bf:83:
bd:13:8b:a8:44:d6:e7:5f:7a:46:97:48:22:3d:ca:
66:24:db:c3:bd:1e:0c:3c:d1:12:05:57:91:fb:28:
05:17:d0:68:ad:41:13:f6:04:93:2e:30:17:c0:38:
ff:47:f6:7b:18:f8:32:a1:9a:b6:ae:dc:44:7a:c5:
05:2e:1b:ff:c8:56:00:73:34:d1:bf:17:65:44:9b:
b6:93:01:e1:27:c7:b2:9e:81:bf:51:b4:47:0d:9c:
83:1a:cd:93:8a:fe:c5:7e:93:06:79:95:96:89:9b:
21:02:39:9e:12:2e:58:f9:4e:b9:55:31:a2:0f:e8:
6b:c2:39:73:0c:6c:4b:34:bf:f8:51:5e:2b:25:f3:
da:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5E:9B:78:EA:92:D6:13:08:0D:8B:9B:9C:88:6F:05:E4:8A:10:63
X509v3 Authority Key Identifier:
keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/EEF1665096B311EFA5529079C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.226.224.0/22
103.11.63.0/24
113.203.208.0/24
113.203.210.0/24
113.203.215.0/24
113.203.217.0/24
113.203.219.0-113.203.220.255
113.203.222.0/24
113.203.224.0/24
115.167.6.0/24
115.167.9.0/24
115.167.12.0-115.167.23.255
115.167.26.0/24
115.167.29.0-115.167.31.255
115.167.48.0/24
115.167.50.0/24
115.167.56.0-115.167.64.255
115.167.66.0/24
115.167.73.0/24
115.167.78.0/24
115.167.102.0/24
115.167.125.0/24
175.110.80.0/22
175.110.97.0/24
175.110.104.0-175.110.106.255
180.178.142.0/24
180.178.146.0/24
180.178.149.0-180.178.150.255
180.178.152.0/21
180.178.163.0/24
180.178.168.0/24
180.178.170.0/24
202.92.26.0/24
223.29.238.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:20:c6:ba:0b:ac:87:a3:73:e2:63:a1:bb:cc:ac:9a:20:a5:
c1:b1:a2:2a:ff:44:1c:e3:96:8d:fa:44:ba:4c:3f:8b:16:7d:
f8:d6:29:cf:0f:d0:2e:ad:c5:ba:ca:16:8a:58:f1:99:a8:94:
13:69:bd:b2:02:18:3e:69:ac:31:a7:73:d2:bc:98:14:14:15:
c6:2c:5e:97:09:cd:d4:73:85:23:45:50:e0:70:6d:39:e9:e4:
5a:16:4f:00:2a:e3:98:ba:93:08:ed:13:d0:20:90:06:88:d1:
ad:13:19:2e:bd:f2:16:18:c0:ef:70:e2:5a:0b:ff:a0:77:29:
3f:d8:a4:6d:ff:94:0e:da:1f:b7:b0:76:61:1d:09:07:55:98:
f0:a9:69:68:e0:44:7c:9e:20:79:b4:05:c8:1c:d8:26:52:9c:
9b:7f:fa:c5:56:60:2b:3d:61:f1:97:f1:d7:fb:f2:98:b5:20:
28:96:30:a0:1f:cd:95:62:8d:f1:f0:2c:7a:82:bf:ab:06:dd:
7f:c7:01:a3:05:08:ff:be:36:53:3a:23:7b:45:cf:a7:d0:29:
8b:7d:0a:6a:ce:e9:49:1d:c4:ff:4e:f1:b0:2f:88:f5:cd:a3:
35:5c:bd:dd:66:5f:8e:42:a0:2c:8d:04:c1:78:6c:11:31:af:
99:e2:c6:08
-----BEGIN CERTIFICATE-----
MIIGcDCCBVigAwIBAgICGs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy
MUU1QjM5QzQwHhcNMjQxMDMwMTcxNzAxWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzIyNmEwZC1iODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx3mUpDd89hRRocYiQ+bctBC0Usvq5Xkk3FPZkvH0Yz9p7isrRIuQahM8+yqq
afGeDI7gEZJZk87nykyakA7CY/hNvltT3wYwifrB5mJ6JL7OwHwFdptPVGXUe+3n
udjAcntkM2P3wedvAx2SSnXFjpGKYdt9v4O9E4uoRNbnX3pGl0giPcpmJNvDvR4M
PNESBVeR+ygFF9BorUET9gSTLjAXwDj/R/Z7GPgyoZq2rtxEesUFLhv/yFYAczTR
vxdlRJu2kwHhJ8eynoG/UbRHDZyDGs2Tiv7FfpMGeZWWiZshAjmeEi5Y+U65VTGi
D+hrwjlzDGxLNL/4UV4rJfPa+wIDAQABo4IDlDCCA5AwHQYDVR0OBBYEFM9em3jq
ktYTCA2Lm5yIbwXkihBjMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy
QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP
Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvRUVGMTY2NTA5
NkIzMTFFRkE1NTI5MDc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwggEcBggrBgEFBQcBBwEB
/wSCAQswggEHMIIBAwQCAAEwgfwDBAIr4uADBABnCz8DBABxy9ADBABxy9IDBABx
y9cDBABxy9kwDAMEAHHL2wMEAHHL3AMEAHHL3gMEAHHL4AMEAHOnBgMEAHOnCTAM
AwQCc6cMAwQDc6cQAwQAc6caMAwDBABzpx0DBAVzpwADBABzpzADBABzpzIwDAME
A3OnOAMEAHOnQAMEAHOnQgMEAHOnSQMEAHOnTgMEAHOnZgMEAHOnfQMEAq9uUAME
AK9uYTAMAwQDr25oAwQAr25qAwQAtLKOAwQAtLKSMAwDBAC0spUDBAC0spYDBAO0
spgDBAC0sqMDBAC0sqgDBAC0sqoDBADKXBoDBADfHe4wDQYJKoZIhvcNAQELBQAD
ggEBAMEgxroLrIejc+JjobvMrJogpcGxoir/RBzjlo36RLpMP4sWffjWKc8P0C6t
xbrKFopY8ZmolBNpvbICGD5prDGnc9K8mBQUFcYsXpcJzdRzhSNFUOBwbTnp5FoW
TwAq45i6kwjtE9AgkAaI0a0TGS698hYYwO9w4loL/6B3KT/YpG3/lA7aH7ewdmEd
CQdVmPCpaWjgRHyeIHm0Bcgc2CZSnJt/+sVWYCs9YfGX8df78pi1ICiWMKAfzZVi
jfHwLHqCv6sG3X/HAaMFCP++NlM6I3tFz6fQKYt9CmrO6UkdxP9O8bAviPXNozVc
vd1mX45CoCyNBMF4bBExr5nixgg=
-----END CERTIFICATE-----
Generated at Mon May 12 04:16:25 2025 by rpki-client