Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/ECB6EF462FC311EB8B442B0DC4F9AE02.roa
File: ECB6EF462FC311EB8B442B0DC4F9AE02.roa (raw, json)
Hash identifier: 8jmlp2Ivhoz5e1Q/bbC+8QEZKeGOfAbkro9lLA9B1TY=
Subject key identifier: AE:81:8A:30:54:F3:B3:42:EA:37:FD:7C:21:8F:EE:CD:87:6A:1F:9D
Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Certificate serial: 078C
Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/ECB6EF462FC311EB8B442B0DC4F9AE02.roa
Signing time: Thu 10 Apr 2025 05:16:13 +0000
ROA not before: Thu 10 Apr 2025 05:16:13 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 135377
IP address blocks: 45.249.244.0/24 maxlen: 24
45.249.245.0/24 maxlen: 24
45.249.246.0/24 maxlen: 24
45.249.247.0/24 maxlen: 24
101.36.96.0/24 maxlen: 24
101.36.97.0/24 maxlen: 24
101.36.98.0/24 maxlen: 24
101.36.99.0/24 maxlen: 24
101.36.100.0/24 maxlen: 24
101.36.101.0/24 maxlen: 24
101.36.102.0/24 maxlen: 24
101.36.103.0/24 maxlen: 24
101.36.104.0/24 maxlen: 24
101.36.105.0/24 maxlen: 24
101.36.106.0/24 maxlen: 24
101.36.107.0/24 maxlen: 24
101.36.108.0/24 maxlen: 24
101.36.109.0/24 maxlen: 24
101.36.110.0/24 maxlen: 24
101.36.111.0/24 maxlen: 24
101.36.112.0/24 maxlen: 24
101.36.113.0/24 maxlen: 24
101.36.114.0/24 maxlen: 24
101.36.115.0/24 maxlen: 24
101.36.116.0/24 maxlen: 24
101.36.117.0/24 maxlen: 24
101.36.118.0/24 maxlen: 24
101.36.119.0/24 maxlen: 24
101.36.120.0/24 maxlen: 24
101.36.121.0/24 maxlen: 24
101.36.122.0/24 maxlen: 24
101.36.123.0/24 maxlen: 24
101.36.124.0/24 maxlen: 24
101.36.125.0/24 maxlen: 24
101.36.126.0/24 maxlen: 24
101.36.127.0/24 maxlen: 24
103.149.26.0/24 maxlen: 24
103.149.27.0/24 maxlen: 24
103.218.240.0/24 maxlen: 24
103.218.241.0/24 maxlen: 24
103.218.242.0/24 maxlen: 24
103.218.243.0/24 maxlen: 24
103.234.60.0/24 maxlen: 24
103.234.61.0/24 maxlen: 24
103.234.62.0/24 maxlen: 24
103.234.63.0/24 maxlen: 24
118.26.36.0/24 maxlen: 24
118.26.37.0/24 maxlen: 24
118.26.38.0/24 maxlen: 24
118.26.39.0/24 maxlen: 24
118.26.104.0/24 maxlen: 24
118.26.105.0/24 maxlen: 24
118.26.106.0/24 maxlen: 24
118.26.107.0/24 maxlen: 24
118.26.108.0/24 maxlen: 24
118.26.109.0/24 maxlen: 24
118.26.110.0/24 maxlen: 24
118.26.111.0/24 maxlen: 24
118.193.32.0/24 maxlen: 24
118.193.33.0/24 maxlen: 24
118.193.34.0/24 maxlen: 24
118.193.35.0/24 maxlen: 24
118.193.36.0/24 maxlen: 24
118.193.37.0/24 maxlen: 24
118.193.38.0/24 maxlen: 24
118.193.39.0/24 maxlen: 24
118.193.40.0/24 maxlen: 24
118.193.41.0/24 maxlen: 24
118.193.42.0/24 maxlen: 24
118.193.43.0/24 maxlen: 24
118.193.44.0/24 maxlen: 24
118.193.45.0/24 maxlen: 24
118.193.46.0/24 maxlen: 24
118.193.47.0/24 maxlen: 24
118.193.56.0/24 maxlen: 24
118.193.57.0/24 maxlen: 24
118.193.58.0/24 maxlen: 24
118.193.59.0/24 maxlen: 24
118.193.60.0/24 maxlen: 24
118.193.61.0/24 maxlen: 24
118.193.62.0/24 maxlen: 24
118.193.63.0/24 maxlen: 24
118.193.64.0/24 maxlen: 24
118.193.65.0/24 maxlen: 24
118.193.66.0/24 maxlen: 24
118.193.67.0/24 maxlen: 24
118.193.68.0/24 maxlen: 24
118.193.69.0/24 maxlen: 24
118.193.70.0/24 maxlen: 24
118.193.71.0/24 maxlen: 24
118.193.72.0/24 maxlen: 24
118.193.73.0/24 maxlen: 24
118.193.74.0/24 maxlen: 24
118.193.75.0/24 maxlen: 24
118.193.76.0/24 maxlen: 24
118.193.77.0/24 maxlen: 24
118.193.78.0/24 maxlen: 24
118.193.79.0/24 maxlen: 24
118.194.228.0/24 maxlen: 24
118.194.229.0/24 maxlen: 24
118.194.230.0/24 maxlen: 24
118.194.231.0/24 maxlen: 24
118.194.232.0/24 maxlen: 24
118.194.233.0/24 maxlen: 24
118.194.234.0/24 maxlen: 24
118.194.235.0/24 maxlen: 24
118.194.236.0/24 maxlen: 24
118.194.237.0/24 maxlen: 24
118.194.238.0/24 maxlen: 24
118.194.239.0/24 maxlen: 24
118.194.248.0/24 maxlen: 24
118.194.249.0/24 maxlen: 24
118.194.250.0/24 maxlen: 24
118.194.251.0/24 maxlen: 24
118.194.252.0/24 maxlen: 24
118.194.253.0/24 maxlen: 24
118.194.254.0/24 maxlen: 24
118.194.255.0/24 maxlen: 24
123.58.192.0/24 maxlen: 24
123.58.193.0/24 maxlen: 24
123.58.194.0/24 maxlen: 24
123.58.195.0/24 maxlen: 24
123.58.196.0/24 maxlen: 24
123.58.197.0/24 maxlen: 24
123.58.198.0/24 maxlen: 24
123.58.199.0/24 maxlen: 24
123.58.200.0/24 maxlen: 24
123.58.201.0/24 maxlen: 24
123.58.202.0/24 maxlen: 24
123.58.203.0/24 maxlen: 24
123.58.204.0/24 maxlen: 24
123.58.205.0/24 maxlen: 24
123.58.206.0/24 maxlen: 24
123.58.207.0/24 maxlen: 24
123.58.208.0/24 maxlen: 24
123.58.209.0/24 maxlen: 24
123.58.210.0/24 maxlen: 24
123.58.211.0/24 maxlen: 24
123.58.212.0/24 maxlen: 24
123.58.213.0/24 maxlen: 24
123.58.214.0/24 maxlen: 24
123.58.215.0/24 maxlen: 24
123.58.216.0/24 maxlen: 24
123.58.217.0/24 maxlen: 24
123.58.218.0/24 maxlen: 24
123.58.219.0/24 maxlen: 24
123.58.220.0/24 maxlen: 24
123.58.221.0/24 maxlen: 24
123.58.222.0/24 maxlen: 24
123.58.223.0/24 maxlen: 24
150.107.36.0/24 maxlen: 24
150.107.37.0/24 maxlen: 24
150.107.38.0/24 maxlen: 24
150.107.39.0/24 maxlen: 24
2001:df3:9500::/48 maxlen: 48
2001:df5:8580::/48 maxlen: 48
2404:82c0::/42 maxlen: 42
2404:82c0:40::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 21 Apr 2025 06:52:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1932 (0x78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Validity
Not Before: Apr 10 05:16:13 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67f7541d-3122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:db:b3:33:b4:eb:f8:2f:60:fc:7e:c7:6a:
39:20:32:7d:56:ed:2d:e9:36:26:59:51:54:8e:be:
8b:f7:bc:d6:e9:2a:41:49:82:93:82:7b:aa:23:15:
93:d2:95:59:2a:8e:8c:c5:3c:55:b6:d0:98:90:cb:
88:10:18:28:3d:3a:55:53:3f:0e:55:91:c1:a1:31:
b5:c7:27:ee:8c:aa:57:5e:7a:87:04:1d:ca:c6:e5:
b8:01:a0:7e:bf:f6:44:7a:30:44:54:ca:fd:d3:87:
fd:63:39:84:1d:bf:52:a6:36:d1:40:48:80:24:d8:
d6:e5:1f:88:76:01:57:4b:88:92:7a:bb:46:a0:88:
da:8c:a6:fe:69:ea:ad:b7:0d:b9:72:b7:3a:63:8e:
d2:ee:92:45:1e:13:78:74:e6:96:19:16:a9:5f:b2:
4c:21:ff:bb:98:9b:12:45:87:e2:f5:a9:5c:c5:c5:
65:3d:a6:39:78:e0:97:1d:6c:87:2f:1a:7d:3d:98:
c2:50:67:85:34:1f:bd:c0:46:76:4c:ce:60:a5:3f:
03:b1:fb:7b:bd:ae:59:a9:5f:da:ef:90:21:d4:f4:
9b:ef:02:53:63:31:64:4b:d8:a5:eb:22:45:01:71:
6d:88:b4:aa:ee:a8:00:47:7a:ac:44:ac:f0:55:0d:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:81:8A:30:54:F3:B3:42:EA:37:FD:7C:21:8F:EE:CD:87:6A:1F:9D
X509v3 Authority Key Identifier:
keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/ECB6EF462FC311EB8B442B0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.244.0/22
101.36.96.0/19
103.149.26.0/23
103.218.240.0/22
103.234.60.0/22
118.26.36.0/22
118.26.104.0/21
118.193.32.0/20
118.193.56.0-118.193.79.255
118.194.228.0-118.194.239.255
118.194.248.0/21
123.58.192.0/19
150.107.36.0/22
IPv6:
2001:df3:9500::/48
2001:df5:8580::/48
2404:82c0::-2404:82c0:40:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
32:75:98:f7:1c:56:21:62:39:eb:9c:1e:7d:5d:ad:73:f0:88:
e7:39:2e:cb:c6:e4:fe:3f:a8:e2:9f:5b:7c:c6:23:62:ab:7f:
3d:cb:44:01:43:47:05:ea:7e:1f:cd:5b:dc:7a:e4:81:9e:41:
ca:ed:ee:c4:24:d9:ae:f6:52:09:ed:05:b9:fd:7e:98:bb:cf:
e4:f3:70:42:3a:f9:33:97:ec:9b:bf:76:8d:4e:24:d9:44:4d:
ed:cc:22:2a:7b:2d:34:c4:dc:79:86:ef:03:9b:35:f7:eb:81:
b4:a9:d0:44:4f:48:14:ee:bc:39:f1:bc:c8:2b:78:4c:2a:ce:
5f:b2:96:52:b0:ea:66:5e:8f:eb:a9:8e:ca:a6:00:0f:f4:93:
c6:2d:b1:b7:16:63:ec:32:86:aa:57:6b:95:8e:24:50:ca:41:
14:aa:a6:de:80:7e:89:97:bd:31:76:6f:58:25:fe:d3:5b:08:
4c:ae:3d:7d:63:9a:4e:a8:78:0b:4b:c8:94:a6:8d:cd:01:5f:
e8:cd:50:79:03:8b:2c:54:b6:d4:8c:9c:cc:f6:1a:2b:7d:4f:
e8:4c:39:f3:12:17:08:ec:78:40:92:03:b1:53:b9:e3:69:61:
4d:6b:76:68:2c:ec:55:aa:9c:e6:03:5b:82:d7:f6:52:3d:cf:
74:8f:0e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:13:26 2025 by rpki-client