Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FF61732FA8611EF80F9120EC4F9AE02.roa
File: 2FF61732FA8611EF80F9120EC4F9AE02.roa (raw, json)
Hash identifier: maczNMWHzOpSFWDDWccy24KN8o99UY4w+dccZ9ix10s=
Subject key identifier: E1:3F:2D:6C:BC:A1:78:DA:69:71:C0:FF:2A:77:7D:26:9B:61:75:5D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A957
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FF61732FA8611EF80F9120EC4F9AE02.roa
Signing time: Thu 06 Mar 2025 12:26:11 +0000
ROA not before: Thu 06 Mar 2025 12:26:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.239.152.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.180.0/23 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.170.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.50.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.159.137.0/24 maxlen: 24
103.162.80.0/23 maxlen: 24
103.167.157.0/24 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
103.171.60.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.58.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.245.170.0/23 maxlen: 24
103.254.96.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:c2a0::/32 maxlen: 32
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
2407:1340::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 06 Mar 2025 12:35:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43351 (0xa957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 6 12:26:11 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c99463-996b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9c:2a:b2:16:46:a3:11:b5:a0:e1:2a:9d:79:
a5:f5:ed:ed:17:99:9b:f6:7e:8c:17:5c:08:d1:7c:
b1:79:e3:98:65:0a:1f:f5:b8:70:09:8b:0f:74:91:
24:7e:97:a3:f1:67:de:13:9e:94:50:34:d6:73:ae:
be:d7:98:fb:45:c0:97:a3:24:04:3a:6a:9c:2f:0c:
15:97:f5:ff:25:ff:6a:4a:6c:af:50:27:89:4a:0b:
a5:8c:44:0c:4a:d1:71:2e:64:96:dd:74:71:c1:7a:
ba:62:45:0c:ce:94:f8:b6:ad:54:38:2d:1d:27:de:
7d:f2:77:f7:1c:98:94:de:a2:76:f7:25:f5:70:98:
c3:db:45:88:1f:ca:06:93:fe:87:48:f3:0f:6b:88:
1e:da:e9:8a:9d:cc:8e:f4:1d:8e:bd:25:8d:0f:b5:
d6:62:3d:26:f2:d6:63:f6:7a:ae:cd:5c:8b:3e:ba:
f4:06:72:f8:21:63:32:4e:ef:37:38:30:64:49:4c:
64:6d:00:55:13:74:00:da:21:12:25:83:67:3f:53:
72:55:3b:8d:8c:4d:73:ba:e6:5d:0e:3d:5f:30:22:
8b:d2:9c:43:4d:e4:be:dc:c1:1c:5e:cf:ae:12:31:
6d:3b:5f:eb:66:9f:fc:a6:2d:8f:e3:90:78:20:39:
9d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3F:2D:6C:BC:A1:78:DA:69:71:C0:FF:2A:77:7D:26:9B:61:75:5D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FF61732FA8611EF80F9120EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.239.152.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.143.180.0/23
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.170.0/23
103.155.194.0/23
103.157.50.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.159.137.0/24
103.162.80.0/23
103.167.157.0/24
103.169.58.0/23
103.171.8.0/23
103.171.54.0/23
103.171.60.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.175.58.0/23
103.175.106.0/23
103.176.142.0/24
103.180.216.0/23
103.190.12.0/23
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.236.112.0/22
103.245.170.0/23
103.254.96.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:c2a0::/32
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
2407:1340::/32
Signature Algorithm: sha256WithRSAEncryption
9d:38:c0:ea:1d:9d:1f:56:7f:02:b1:c1:45:3b:25:1f:95:9e:
b7:38:77:65:0c:b1:39:e4:67:48:4c:2c:7d:a7:23:e6:00:da:
f1:03:a8:95:4f:11:00:36:52:00:36:7a:55:f2:04:0b:bf:24:
a1:e3:a4:5c:ff:19:42:f2:98:9e:6f:7b:60:34:b6:f7:7f:58:
d1:cb:58:e9:03:ad:6e:1e:ac:f6:42:88:15:b8:83:c2:a4:ef:
05:69:e0:7a:9c:55:be:0a:8e:a5:da:a6:ac:88:68:51:b5:43:
7f:6e:33:df:3b:2d:03:23:55:4a:3e:02:8e:ed:98:77:8e:b0:
dd:59:67:65:29:d2:5c:bd:71:7d:8f:b9:fb:88:70:88:43:b8:
ac:14:8f:e5:27:7a:05:df:87:c6:75:3f:f5:74:75:5c:6c:75:
30:72:ea:db:4c:ac:2e:5b:1b:5f:4b:01:48:7f:e6:bf:a3:82:
ca:2f:4d:d8:42:c5:75:8d:7d:4e:e4:9d:49:69:c7:d8:db:46:
a1:ca:ea:c9:dc:52:9c:ec:b5:74:0d:35:5d:3b:18:91:4a:7b:
5c:7a:76:54:f9:75:93:8e:1a:ff:de:22:61:4b:e0:79:ab:e7:
f0:35:96:ac:b1:41:77:c5:b1:13:c6:44:a3:80:b4:29:e4:30:
64:4c:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:25:25 2025 by rpki-client