Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20FDC05E2CC211F096400A80C4F9AE02.roa
File: 20FDC05E2CC211F096400A80C4F9AE02.roa (raw, json)
Hash identifier: JFInfGODyJzpzLSX7eMmSxTpMH8XCVvh96kBEIaKpT8=
Subject key identifier: 9B:F8:79:02:D5:1C:F2:91:40:B9:65:1A:43:DC:90:29:F0:43:AA:71
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BA96
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20FDC05E2CC211F096400A80C4F9AE02.roa
Signing time: Fri 09 May 2025 10:41:14 +0000
ROA not before: Fri 09 May 2025 10:41:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55352
IP address blocks: 36.255.180.0/22 maxlen: 22
36.255.180.0/24 maxlen: 24
36.255.181.0/24 maxlen: 24
36.255.182.0/24 maxlen: 24
36.255.183.0/24 maxlen: 24
36.255.184.0/22 maxlen: 22
36.255.184.0/24 maxlen: 24
36.255.185.0/24 maxlen: 24
36.255.186.0/24 maxlen: 24
36.255.187.0/24 maxlen: 24
43.231.132.0/22 maxlen: 24
43.231.212.0/22 maxlen: 24
43.231.236.0/22 maxlen: 24
43.231.252.0/22 maxlen: 24
43.247.136.0/22 maxlen: 24
45.112.8.0/22 maxlen: 24
45.112.56.0/22 maxlen: 24
45.114.80.0/22 maxlen: 24
45.115.56.0/24 maxlen: 24
45.115.57.0/24 maxlen: 24
45.115.58.0/24 maxlen: 24
45.115.59.0/24 maxlen: 24
45.117.108.0/22 maxlen: 24
45.126.144.0/22 maxlen: 24
45.251.12.0/24 maxlen: 24
45.251.13.0/24 maxlen: 24
45.251.14.0/24 maxlen: 24
45.251.15.0/24 maxlen: 24
59.152.56.0/22 maxlen: 22
59.152.56.0/24 maxlen: 24
59.152.57.0/24 maxlen: 24
59.152.58.0/24 maxlen: 24
59.152.59.0/24 maxlen: 24
59.153.0.0/22 maxlen: 24
59.153.120.0/22 maxlen: 24
103.8.164.0/22 maxlen: 24
103.29.156.0/22 maxlen: 24
103.36.26.0/24 maxlen: 24
103.36.27.0/24 maxlen: 24
103.57.172.0/22 maxlen: 22
103.57.172.0/24 maxlen: 24
103.57.173.0/24 maxlen: 24
103.57.174.0/24 maxlen: 24
103.57.175.0/24 maxlen: 24
103.60.208.0/22 maxlen: 24
103.75.60.0/23 maxlen: 24
103.83.216.0/22 maxlen: 22
103.83.216.0/24 maxlen: 24
103.83.217.0/24 maxlen: 24
103.83.218.0/24 maxlen: 24
103.83.219.0/24 maxlen: 24
103.102.92.0/22 maxlen: 24
103.114.0.0/22 maxlen: 24
103.119.188.0/22 maxlen: 24
103.131.184.0/22 maxlen: 22
103.131.184.0/24 maxlen: 24
103.131.185.0/24 maxlen: 24
103.131.186.0/24 maxlen: 24
103.131.187.0/24 maxlen: 24
103.136.174.0/24 maxlen: 24
103.155.212.0/23 maxlen: 24
103.156.212.0/23 maxlen: 24
103.163.194.0/23 maxlen: 24
103.176.240.0/23 maxlen: 24
103.179.212.0/23 maxlen: 24
103.181.86.0/24 maxlen: 24
103.183.54.0/23 maxlen: 24
103.197.224.0/22 maxlen: 24
103.198.164.0/22 maxlen: 24
103.200.100.0/22 maxlen: 22
103.200.100.0/24 maxlen: 24
103.200.101.0/24 maxlen: 24
103.200.102.0/24 maxlen: 24
103.200.103.0/24 maxlen: 24
103.200.104.0/22 maxlen: 24
103.200.212.0/22 maxlen: 22
103.200.212.0/24 maxlen: 24
103.200.213.0/24 maxlen: 24
103.200.214.0/24 maxlen: 24
103.200.215.0/24 maxlen: 24
103.204.160.0/22 maxlen: 24
103.205.172.0/22 maxlen: 22
103.205.172.0/24 maxlen: 24
103.205.173.0/24 maxlen: 24
103.205.174.0/24 maxlen: 24
103.205.175.0/24 maxlen: 24
103.220.40.0/22 maxlen: 24
103.221.248.0/22 maxlen: 24
103.226.140.0/22 maxlen: 24
103.226.144.0/22 maxlen: 24
103.226.188.0/22 maxlen: 24
103.226.204.0/22 maxlen: 24
103.226.236.0/22 maxlen: 24
103.226.240.0/22 maxlen: 24
103.234.212.0/22 maxlen: 22
103.234.212.0/24 maxlen: 24
103.234.213.0/24 maxlen: 24
103.234.214.0/24 maxlen: 24
103.234.215.0/24 maxlen: 24
103.234.240.0/22 maxlen: 22
103.234.240.0/24 maxlen: 24
103.234.241.0/24 maxlen: 24
103.234.242.0/24 maxlen: 24
103.234.243.0/24 maxlen: 24
111.125.217.0/24 maxlen: 24
111.125.218.0/23 maxlen: 24
111.125.224.0/24 maxlen: 24
111.125.226.0/24 maxlen: 24
111.125.228.0/24 maxlen: 24
111.125.233.0/24 maxlen: 24
111.125.236.0/24 maxlen: 24
111.125.241.0/24 maxlen: 24
111.125.242.0/24 maxlen: 24
111.125.249.0/24 maxlen: 24
111.125.252.0/22 maxlen: 24
124.66.172.0/22 maxlen: 24
175.100.176.0/20 maxlen: 24
202.168.144.0/22 maxlen: 24
2406:9e00:20::/48 maxlen: 48
2406:9e00:21::/48 maxlen: 48
2406:9e00:22::/48 maxlen: 48
2406:9e00:23::/48 maxlen: 48
2406:9e00:24::/48 maxlen: 48
2406:9e00:25::/48 maxlen: 48
2406:9e00:26::/48 maxlen: 48
2406:9e00:27::/48 maxlen: 48
2406:9e00:28::/48 maxlen: 48
2406:9e00:29::/48 maxlen: 48
2406:9e00:2a::/48 maxlen: 48
2406:9e00:2b::/48 maxlen: 48
2406:9e00:2c::/48 maxlen: 48
2406:9e00:2d::/48 maxlen: 48
2406:9e00:2e::/48 maxlen: 48
2406:9e00:2f::/48 maxlen: 48
2406:9e00:30::/48 maxlen: 48
2406:9e00:31::/48 maxlen: 48
2406:9e00:32::/48 maxlen: 48
2406:9e00:33::/48 maxlen: 48
2406:9e00:34::/48 maxlen: 48
2406:9e00:35::/48 maxlen: 48
2406:9e00:36::/48 maxlen: 48
2406:9e00:37::/48 maxlen: 48
2406:9e00:38::/48 maxlen: 48
2406:9e00:39::/48 maxlen: 48
2406:9e00:3a::/48 maxlen: 48
2406:9e00:3b::/48 maxlen: 48
2406:9e00:3c::/48 maxlen: 48
2406:9e00:3d::/48 maxlen: 48
2406:9e00:3e::/48 maxlen: 48
2406:9e00:3f::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 09 May 2025 10:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47766 (0xba96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 9 10:41:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681ddbca-ca32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e8:c8:3f:ab:a5:a0:2d:75:56:c5:97:d3:a6:
5b:15:63:07:1c:f5:eb:8b:4d:9e:a0:8c:12:f1:b7:
54:97:84:38:6a:50:27:6c:d6:fe:94:d0:64:01:f6:
ef:45:60:fa:77:75:a3:11:09:40:d0:d5:3a:7a:04:
b0:b7:55:97:ff:0f:93:fc:d4:64:f3:7b:bf:ec:a1:
87:a0:25:83:12:e1:66:d0:1f:fe:47:cd:8a:ed:1e:
dd:05:fb:d4:46:46:86:df:4d:5a:ab:4d:07:cd:f6:
bf:f0:f4:d4:e6:2b:cb:da:e3:03:2f:67:cd:ac:8b:
42:bd:d3:eb:8d:1a:e7:98:65:b3:3e:fb:bc:42:20:
ec:a8:ce:eb:2d:f9:9d:7b:53:16:e9:17:da:d6:f2:
76:de:e2:a9:5a:a0:73:98:57:db:40:7f:76:85:83:
0f:f3:29:a9:5b:c4:20:97:25:84:b4:dc:53:5a:fd:
89:3d:00:0d:b6:06:a4:66:9d:1f:4d:60:2a:dc:a0:
12:5f:68:9c:7e:6d:f6:bf:95:1d:2d:a4:2f:27:33:
c5:3b:db:46:f1:75:57:68:21:77:32:9e:d9:99:bf:
d8:0b:d0:be:48:81:e7:6b:51:fb:7f:2a:4b:6c:0b:
a2:53:3d:07:66:98:cc:b1:e6:01:5c:e5:ae:97:ab:
8c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F8:79:02:D5:1C:F2:91:40:B9:65:1A:43:DC:90:29:F0:43:AA:71
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/20FDC05E2CC211F096400A80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.180.0-36.255.187.255
43.231.132.0/22
43.231.212.0/22
43.231.236.0/22
43.231.252.0/22
43.247.136.0/22
45.112.8.0/22
45.112.56.0/22
45.114.80.0/22
45.115.56.0/22
45.117.108.0/22
45.126.144.0/22
45.251.12.0/22
59.152.56.0/22
59.153.0.0/22
59.153.120.0/22
103.8.164.0/22
103.29.156.0/22
103.36.26.0/23
103.57.172.0/22
103.60.208.0/22
103.75.60.0/23
103.83.216.0/22
103.102.92.0/22
103.114.0.0/22
103.119.188.0/22
103.131.184.0/22
103.136.174.0/24
103.155.212.0/23
103.156.212.0/23
103.163.194.0/23
103.176.240.0/23
103.179.212.0/23
103.181.86.0/24
103.183.54.0/23
103.197.224.0/22
103.198.164.0/22
103.200.100.0-103.200.107.255
103.200.212.0/22
103.204.160.0/22
103.205.172.0/22
103.220.40.0/22
103.221.248.0/22
103.226.140.0-103.226.147.255
103.226.188.0/22
103.226.204.0/22
103.226.236.0-103.226.243.255
103.234.212.0/22
103.234.240.0/22
111.125.217.0-111.125.219.255
111.125.224.0/24
111.125.226.0/24
111.125.228.0/24
111.125.233.0/24
111.125.236.0/24
111.125.241.0-111.125.242.255
111.125.249.0/24
111.125.252.0/22
124.66.172.0/22
175.100.176.0/20
202.168.144.0/22
IPv6:
2406:9e00:20::/43
Signature Algorithm: sha256WithRSAEncryption
6c:8d:80:eb:b7:2f:b3:55:55:54:75:e7:2f:f9:c7:b3:d3:2f:
34:bf:34:f0:91:aa:9f:17:9d:fd:09:41:3f:23:b9:61:0c:3d:
64:79:ca:27:80:7d:e2:ad:85:7a:8c:bb:42:6f:05:2f:06:32:
cb:ad:22:f1:f7:5c:6c:af:fb:da:a8:8d:4d:40:20:ed:95:b8:
0c:91:a5:8b:66:a7:63:d8:31:6a:fc:51:14:8c:33:65:0b:b8:
e2:24:0b:08:ac:dc:8f:cf:13:03:22:50:8a:d4:88:08:96:0a:
6c:3e:8e:e6:53:f0:89:ba:9a:f4:4b:fb:fe:ce:78:21:52:07:
2e:82:ed:46:8a:07:1e:70:2e:43:25:86:85:69:fe:fe:9a:25:
8b:58:fd:b1:6b:fe:89:54:bc:e6:59:f1:f8:37:1d:bc:57:d8:
2f:12:79:4b:12:62:10:41:b7:9a:cb:63:3c:a5:e7:ba:36:9b:
10:6b:34:c1:5c:94:e0:04:c5:d8:ce:19:46:ad:4e:8b:40:5a:
32:41:c5:5f:da:03:9c:12:1f:40:f9:a8:65:af:bb:81:33:e8:
36:3b:92:e4:0a:2f:7a:bc:02:2c:76:c3:0e:e0:96:b3:92:96:
28:e7:9f:24:05:08:d9:ad:03:fd:81:8c:81:77:de:87:b6:b8:
b8:07:3e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:37:11 2025 by rpki-client