Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/5E66FAC2FF2811EF8143B76DC4F9AE02.roa
File: 5E66FAC2FF2811EF8143B76DC4F9AE02.roa (raw, json)
Hash identifier: wqwPKv5w1G72AqKbmhSjwawDmC+qtbNL8G2nRbdhvp8=
Subject key identifier: 50:F0:7B:9C:0B:A8:B1:FC:B1:88:B5:FC:10:64:18:8A:1D:D5:51:E4
Certificate issuer: /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial: 0C96
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/5E66FAC2FF2811EF8143B76DC4F9AE02.roa
Signing time: Wed 12 Mar 2025 09:57:12 +0000
ROA not before: Wed 12 Mar 2025 09:57:12 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 38322
IP address blocks: 42.152.0.0/14 maxlen: 14
42.153.4.0/24 maxlen: 24
42.153.6.0/24 maxlen: 24
42.153.7.0/24 maxlen: 24
42.153.8.0/24 maxlen: 24
42.153.9.0/24 maxlen: 24
42.153.10.0/24 maxlen: 24
42.153.11.0/24 maxlen: 24
42.153.16.0/24 maxlen: 24
42.153.19.0/24 maxlen: 24
42.153.20.0/24 maxlen: 24
42.153.21.0/24 maxlen: 24
42.153.22.0/24 maxlen: 24
42.153.23.0/24 maxlen: 24
42.153.24.0/24 maxlen: 24
42.153.25.0/24 maxlen: 24
42.153.26.0/24 maxlen: 24
42.153.28.0/24 maxlen: 24
42.153.29.0/24 maxlen: 24
42.153.32.0/24 maxlen: 24
42.153.33.0/24 maxlen: 24
42.153.34.0/24 maxlen: 24
42.153.35.0/24 maxlen: 24
42.153.36.0/24 maxlen: 24
42.153.37.0/24 maxlen: 24
42.153.38.0/24 maxlen: 24
42.153.39.0/24 maxlen: 24
42.153.40.0/24 maxlen: 24
42.153.41.0/24 maxlen: 24
42.153.42.0/24 maxlen: 24
42.153.43.0/24 maxlen: 24
42.153.44.0/24 maxlen: 24
42.153.45.0/24 maxlen: 24
42.153.46.0/24 maxlen: 24
42.153.47.0/24 maxlen: 24
42.153.48.0/24 maxlen: 24
42.153.49.0/24 maxlen: 24
42.153.50.0/24 maxlen: 24
42.153.51.0/24 maxlen: 24
42.153.52.0/24 maxlen: 24
42.153.53.0/24 maxlen: 24
42.153.54.0/24 maxlen: 24
42.153.55.0/24 maxlen: 24
42.153.56.0/24 maxlen: 24
42.153.57.0/24 maxlen: 24
42.153.58.0/24 maxlen: 24
42.153.59.0/24 maxlen: 24
42.153.60.0/24 maxlen: 24
42.153.61.0/24 maxlen: 24
42.153.62.0/24 maxlen: 24
42.153.63.0/24 maxlen: 24
42.153.89.0/24 maxlen: 24
42.153.95.0/24 maxlen: 24
42.153.96.0/24 maxlen: 24
42.153.128.0/24 maxlen: 24
42.153.129.0/24 maxlen: 24
42.153.130.0/24 maxlen: 24
42.153.131.0/24 maxlen: 24
42.153.132.0/24 maxlen: 24
42.153.133.0/24 maxlen: 24
42.153.134.0/24 maxlen: 24
42.153.135.0/24 maxlen: 24
42.153.136.0/24 maxlen: 24
42.153.137.0/24 maxlen: 24
42.153.138.0/24 maxlen: 24
42.153.139.0/24 maxlen: 24
42.153.140.0/24 maxlen: 24
42.153.141.0/24 maxlen: 24
42.153.142.0/24 maxlen: 24
42.153.143.0/24 maxlen: 24
42.153.144.0/24 maxlen: 24
42.153.145.0/24 maxlen: 24
42.153.146.0/24 maxlen: 24
42.153.147.0/24 maxlen: 24
42.153.148.0/24 maxlen: 24
42.153.149.0/24 maxlen: 24
42.153.150.0/24 maxlen: 24
42.153.151.0/24 maxlen: 24
42.153.152.0/24 maxlen: 24
42.153.153.0/24 maxlen: 24
42.153.154.0/24 maxlen: 24
42.153.155.0/24 maxlen: 24
42.153.156.0/24 maxlen: 24
42.153.157.0/24 maxlen: 24
42.153.158.0/24 maxlen: 24
42.153.159.0/24 maxlen: 24
122.255.96.0/19 maxlen: 19
2401:3c00::/46 maxlen: 46
2401:3c00:4::/46 maxlen: 46
2401:3c00:8::/46 maxlen: 46
2401:3c00:c::/46 maxlen: 46
2401:3c00:14::/46 maxlen: 46
2401:3c00:18::/46 maxlen: 46
2401:3c00:40::/46 maxlen: 46
2401:3c00:44::/46 maxlen: 46
2401:3c00:48::/46 maxlen: 46
2401:3c00:4c::/46 maxlen: 46
2401:3c00:54::/46 maxlen: 46
2401:3c00:58::/46 maxlen: 46
2401:3c00:a4::/48 maxlen: 48
2401:3c00:a5::/48 maxlen: 48
2401:3c00:a6::/48 maxlen: 48
2401:3c00:a7::/48 maxlen: 48
2401:3c00:a8::/48 maxlen: 48
2401:3c00:a9::/48 maxlen: 48
2401:3c00:c0::/46 maxlen: 46
2401:3c00:c0:5::/64 maxlen: 64
2401:3c00:c8::/46 maxlen: 46
2401:3c00:cc::/46 maxlen: 46
2401:3c00:d8::/48 maxlen: 48
2401:3c00:d9::/48 maxlen: 48
2401:3c00:da::/48 maxlen: 48
2401:3c00:db::/48 maxlen: 48
2401:3c00:dc::/48 maxlen: 48
2401:3c00:100::/43 maxlen: 43
2401:3c00:120::/43 maxlen: 43
2401:3c00:180::/43 maxlen: 43
2401:3c00:1a0::/43 maxlen: 43
2401:3c00:241::/48 maxlen: 48
2401:3c00:242::/48 maxlen: 48
2401:3c00:243::/48 maxlen: 48
2401:3c00:244::/48 maxlen: 48
2401:3c00:245::/48 maxlen: 48
2401:3c00:246::/48 maxlen: 48
2401:3c00:247::/48 maxlen: 48
2401:3c00:248::/48 maxlen: 48
2401:3c00:249::/48 maxlen: 48
2401:3c00:24a::/48 maxlen: 48
2401:3c00:24b::/48 maxlen: 48
2401:3c00:24c::/48 maxlen: 48
2401:3c00:24d::/48 maxlen: 48
2401:3c00:24e::/48 maxlen: 48
2401:3c00:24f::/48 maxlen: 48
2401:3c00:250::/48 maxlen: 48
2401:3c00:251::/48 maxlen: 48
2401:3c00:252::/48 maxlen: 48
2401:3c00:253::/48 maxlen: 48
2401:3c00:254::/48 maxlen: 48
2401:3c00:255::/48 maxlen: 48
2401:3c00:256::/48 maxlen: 48
2401:3c00:257::/48 maxlen: 48
2401:3c00:258::/48 maxlen: 48
2401:3c00:259::/48 maxlen: 48
2401:3c00:25a::/48 maxlen: 48
2401:3c00:25c::/48 maxlen: 48
2401:3c00:25d::/48 maxlen: 48
2401:3c00:25f::/48 maxlen: 48
2401:3c00:260::/48 maxlen: 48
2401:3c00:261::/48 maxlen: 48
2401:3c00:262::/48 maxlen: 48
2401:3c00:280::/48 maxlen: 48
2401:3c00:281::/48 maxlen: 48
2401:3c00:290::/48 maxlen: 48
2401:3c00:291::/48 maxlen: 48
2401:3c00:292::/48 maxlen: 48
2401:3c00:293::/48 maxlen: 48
2401:3c00:294::/48 maxlen: 48
2401:3c00:295::/48 maxlen: 48
2401:3c00:2a0::/48 maxlen: 48
2401:3c00:2a1::/48 maxlen: 48
2401:3c00:2a2::/48 maxlen: 48
2401:3c00:2a3::/48 maxlen: 48
2401:3c00:2a4::/48 maxlen: 48
2401:3c00:2a5::/48 maxlen: 48
2401:3c00:2b0::/48 maxlen: 48
2401:3c00:2b1::/48 maxlen: 48
2401:3c00:2b2::/48 maxlen: 48
2401:3c00:2b3::/48 maxlen: 48
2401:3c00:2b4::/48 maxlen: 48
2401:3c00:2b5::/48 maxlen: 48
2401:3c00:2c0::/42 maxlen: 42
Validation: Failed, certificate revoked on Mon 17 Mar 2025 08:05:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3222 (0xc96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Validity
Not Before: Mar 12 09:57:12 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67d15a78-5196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:42:98:ec:11:1d:da:09:41:74:6c:d4:34:
49:71:f2:41:87:cc:5b:e3:39:15:3d:4d:43:24:7e:
31:51:b9:2c:02:42:bb:0c:78:37:90:37:5f:1f:42:
c3:dd:99:57:9a:ce:89:f9:e6:db:d3:06:3c:78:30:
23:eb:ca:8f:5c:ca:10:2d:8f:55:39:37:0b:c5:20:
23:55:05:44:d2:d2:75:e5:27:1f:25:ae:49:11:9e:
a4:b5:97:f4:58:a0:bc:90:a1:b7:48:d9:2c:04:39:
3b:14:c1:7d:aa:e1:02:7c:10:f6:10:85:4b:3f:2c:
a5:a4:f4:00:4f:9d:69:38:6b:5d:d9:16:66:85:c9:
90:0a:a9:f9:56:2f:0b:10:81:66:ed:39:77:2c:71:
f2:7e:b2:a0:fb:a6:99:da:b9:36:f8:94:4d:fe:94:
00:81:6e:5c:d6:35:cc:53:de:af:94:6a:b2:6e:c5:
02:01:33:14:15:10:f9:7c:2a:75:5d:42:db:7e:f7:
0b:3d:a7:43:6d:5f:f3:dd:ab:a3:38:e9:f9:7b:37:
36:76:94:bc:99:1c:ce:b7:99:9c:a6:fd:e1:e0:86:
cd:cd:82:f9:4c:31:d2:41:1f:55:45:53:31:91:e4:
94:86:49:0b:1f:33:5a:97:e6:5f:38:76:81:6d:16:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F0:7B:9C:0B:A8:B1:FC:B1:88:B5:FC:10:64:18:8A:1D:D5:51:E4
X509v3 Authority Key Identifier:
keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/5E66FAC2FF2811EF8143B76DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.152.0.0/14
122.255.96.0/19
IPv6:
2401:3c00::/44
2401:3c00:14::-2401:3c00:1b:ffff:ffff:ffff:ffff:ffff
2401:3c00:40::/44
2401:3c00:54::-2401:3c00:5b:ffff:ffff:ffff:ffff:ffff
2401:3c00:a4::-2401:3c00:a9:ffff:ffff:ffff:ffff:ffff
2401:3c00:c0::/46
2401:3c00:c8::/45
2401:3c00:d8::-2401:3c00:dc:ffff:ffff:ffff:ffff:ffff
2401:3c00:100::/42
2401:3c00:180::/42
2401:3c00:241::-2401:3c00:25a:ffff:ffff:ffff:ffff:ffff
2401:3c00:25c::/47
2401:3c00:25f::-2401:3c00:262:ffff:ffff:ffff:ffff:ffff
2401:3c00:280::/47
2401:3c00:290::-2401:3c00:295:ffff:ffff:ffff:ffff:ffff
2401:3c00:2a0::-2401:3c00:2a5:ffff:ffff:ffff:ffff:ffff
2401:3c00:2b0::-2401:3c00:2b5:ffff:ffff:ffff:ffff:ffff
2401:3c00:2c0::/42
Signature Algorithm: sha256WithRSAEncryption
41:99:f7:a9:6e:5e:e2:a0:58:3c:61:97:fa:d7:ef:1e:1d:b4:
e3:4c:da:02:1e:9d:64:42:14:d8:53:33:7b:c6:06:17:9a:d5:
68:18:9d:c3:4a:63:82:ea:a7:15:12:4c:31:8c:1f:20:6c:98:
8c:bf:6f:99:9a:97:10:a6:2c:ed:80:1c:d1:9c:c1:8e:25:7b:
a2:cd:6d:9f:f4:0f:97:9c:0b:53:6c:ea:1f:1d:af:f9:ad:7b:
39:a8:93:8d:82:f5:6f:58:a0:9c:ac:ca:f7:7f:48:f5:97:33:
a5:96:f9:d0:9f:88:e7:1f:13:4f:4c:fb:d8:1a:5c:5a:b0:e8:
b9:21:56:e8:f6:bb:2a:3c:27:84:c3:b6:10:60:fa:c2:32:3c:
da:8a:7b:95:4e:93:7f:9f:3c:99:e8:ae:3e:be:98:a1:bb:9a:
fb:d5:2f:e6:e7:1d:05:4a:d8:e4:6b:30:b4:39:21:a4:5c:b8:
d7:9d:51:42:2c:00:ca:58:fd:83:4a:bd:eb:32:c0:52:c8:f6:
49:ab:2c:08:08:1d:06:0c:17:14:a4:a1:06:82:04:71:90:db:
28:43:01:d3:66:cd:40:e1:ca:a0:96:19:11:4e:ad:d1:8c:a1:
a6:e8:f1:f8:c5:ef:1d:f2:90:29:f8:1b:4d:e2:f9:15:73:2f:
f5:06:95:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:27:01 2025 by rpki-client