Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/38DCBEF00A0311F0ADBF1286C4F9AE02.roa
File: 38DCBEF00A0311F0ADBF1286C4F9AE02.roa (raw, json)
Hash identifier: 9z9p7KD3Is4hOevgVQJJulRHMPxAW5zgetQkzUysSNE=
Subject key identifier: FC:6D:77:E8:D5:64:37:D1:00:49:B1:11:DA:08:7E:C7:70:B9:0A:EA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AC9F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/38DCBEF00A0311F0ADBF1286C4F9AE02.roa
Signing time: Wed 26 Mar 2025 07:03:01 +0000
ROA not before: Wed 26 Mar 2025 07:03:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.239.152.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
45.251.32.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.44.104.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.51.152.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.72.106.0/23 maxlen: 24
103.82.44.0/23 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.98.79.0/24 maxlen: 24
103.98.194.0/23 maxlen: 24
103.99.48.0/23 maxlen: 24
103.108.76.0/22 maxlen: 24
103.109.108.0/22 maxlen: 24
103.110.72.0/23 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.134.164.0/22 maxlen: 24
103.135.60.0/22 maxlen: 24
103.136.64.0/22 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.180.0/23 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.170.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.50.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.158.216.0/23 maxlen: 24
103.159.137.0/24 maxlen: 24
103.159.178.0/23 maxlen: 24
103.162.80.0/23 maxlen: 24
103.165.10.0/23 maxlen: 24
103.165.20.0/23 maxlen: 24
103.165.26.0/23 maxlen: 24
103.166.220.0/23 maxlen: 24
103.169.58.0/23 maxlen: 24
103.169.156.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
103.171.60.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.26.0/23 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.0.0/23 maxlen: 24
103.175.12.0/23 maxlen: 24
103.175.58.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.181.8.0/23 maxlen: 24
103.182.140.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.191.86.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.234.64.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.245.170.0/23 maxlen: 24
103.254.96.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
115.166.132.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
202.9.55.0/24 maxlen: 24
203.191.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 07:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44191 (0xac9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 26 07:03:01 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67e3a6a4-515b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:dc:b8:d1:92:f6:6c:8c:67:a6:a0:31:95:
d1:19:d0:3e:44:7b:13:fd:71:b1:62:be:04:43:3d:
f2:95:13:24:cd:63:18:17:e7:ea:93:ca:79:3d:e2:
ae:b0:9e:78:f6:e7:a6:b5:29:30:05:2a:bf:ee:33:
16:43:47:96:14:e1:cb:70:b2:50:be:8d:c7:a6:72:
2a:94:02:cd:43:b0:9a:37:8c:38:40:f3:16:23:4e:
9f:ce:fd:ed:f3:1b:9e:dd:b8:f5:c5:9b:16:a3:92:
25:24:5a:01:8a:ab:a2:25:1f:7f:1a:0c:39:36:9f:
3f:56:e2:37:7c:7c:ab:e3:35:8a:8a:1d:79:17:5b:
cc:1a:da:d5:1b:fe:c2:21:53:0e:c9:e2:85:3d:91:
6c:1e:18:4b:b3:df:3d:4a:20:34:e8:82:6e:a6:ca:
6a:1b:0f:e8:8b:b1:0a:75:98:5f:46:36:db:8b:ed:
ba:74:4e:21:65:68:0e:19:2a:f8:4b:89:15:ae:da:
6b:2d:ec:53:f6:80:bf:80:cf:3b:eb:c1:c7:0a:32:
a8:c7:c6:c9:7e:70:b6:f2:40:78:56:cc:ee:81:fa:
a7:5b:ba:e6:c0:42:25:b2:2c:1f:33:53:23:c9:79:
b3:3a:b1:b1:26:74:6b:8b:4a:c0:a7:b8:d5:1d:88:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6D:77:E8:D5:64:37:D1:00:49:B1:11:DA:08:7E:C7:70:B9:0A:EA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/38DCBEF00A0311F0ADBF1286C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.239.152.0/22
45.114.156.0/22
45.251.32.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.44.104.0/22
103.47.152.0/24
103.51.92.0/22
103.51.152.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.72.106.0/23
103.82.44.0/23
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.98.79.0/24
103.98.194.0/23
103.99.48.0/23
103.108.76.0/22
103.109.108.0/22
103.110.72.0/23
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.134.164.0/22
103.135.60.0/22
103.136.64.0/22
103.139.88.0/23
103.142.64.0/23
103.143.180.0/23
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.170.0/23
103.155.194.0/23
103.157.50.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.158.216.0/23
103.159.137.0/24
103.159.178.0/23
103.162.80.0/23
103.165.10.0/23
103.165.20.0/23
103.165.26.0/23
103.166.220.0/23
103.169.58.0/23
103.169.156.0/23
103.171.8.0/23
103.171.54.0/23
103.171.60.0/23
103.171.236.0/23
103.173.41.0/24
103.174.26.0/23
103.174.42.0/23
103.175.0.0/23
103.175.12.0/23
103.175.58.0/23
103.175.106.0/23
103.176.142.0/24
103.180.216.0/23
103.181.8.0/23
103.182.140.0/23
103.190.12.0/23
103.191.86.0/23
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.234.64.0/22
103.236.112.0/22
103.245.170.0/23
103.254.96.0/22
103.254.200.0/22
115.166.132.0/22
137.59.204.0/22
139.5.96.0/22
202.9.55.0/24
203.191.56.0/22
Signature Algorithm: sha256WithRSAEncryption
10:c6:1a:fa:50:dc:2f:a1:59:21:f8:60:ed:9e:d6:cf:af:b2:
58:9a:20:33:5f:65:00:26:ab:3a:ca:24:4b:99:ea:3f:27:5f:
17:c4:97:5e:81:e8:84:32:a9:95:27:16:64:d5:a6:f3:da:c1:
0e:8d:53:18:6b:95:27:1d:ab:35:0b:a2:53:a4:68:38:79:2e:
d9:52:da:63:92:b1:57:74:22:48:36:eb:87:d5:f1:d5:c9:ea:
6f:fd:7d:9c:c6:57:77:bc:21:9d:2c:3a:6b:d0:de:22:07:46:
a0:c2:db:fc:65:ad:48:0b:46:14:a9:31:ae:e3:3a:46:5c:11:
b8:ad:3a:df:53:e1:56:61:33:a4:68:d5:c5:72:a8:cb:47:db:
37:39:e0:ab:3c:1d:4a:1c:07:31:23:65:19:a6:94:0a:83:a0:
82:71:69:85:dd:d0:0d:39:4d:9f:76:d4:35:26:f8:16:af:9f:
2a:17:0c:6f:77:e7:c0:db:47:f2:ff:1c:cb:a1:bf:79:b2:69:
00:50:4d:d2:9b:93:63:15:d8:aa:2c:0a:7e:12:d3:a4:65:f5:
d8:4d:3b:84:f7:d8:f1:bf:37:b5:05:8f:47:bf:07:a2:33:70:
e7:11:c7:f1:31:9f:dd:02:ce:7c:a3:e6:31:5b:82:c7:cc:43:
0b:29:34:64
-----BEGIN CERTIFICATE-----
MIIHtjCCBp6gAwIBAgIDAKyfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDMyNjA3MDMwMVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjdlM2E2YTQtNTE1YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL/L3LjRkvZsjGemoDGV0RnQPkR7E/1xsWK+BEM98pUTJM1jGBfn6pPKeT3i
rrCeePbnprUpMAUqv+4zFkNHlhThy3CyUL6Nx6ZyKpQCzUOwmjeMOEDzFiNOn879
7fMbnt249cWbFqOSJSRaAYqroiUffxoMOTafP1biN3x8q+M1ioodeRdbzBra1Rv+
wiFTDsnihT2RbB4YS7PfPUogNOiCbqbKahsP6IuxCnWYX0Y224vtunROIWVoDhkq
+EuJFa7aay3sU/aAv4DPO+vBxwoyqMfGyX5wtvJAeFbM7oH6p1u65sBCJbIsHzNT
I8l5szqxsSZ0a4tKwKe41R2IhC8CAwEAAaOCBNkwggTVMB0GA1UdDgQWBBT8bXfo
1WQ30QBJsRHaCH7HcLkK6jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM4RENCRUYw
MEEwMzExRjBBREJGMTI4NkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIICYQYIKwYBBQUHAQcB
Af8EggJQMIICTDCCAkgEAgABMIICQAMEAivlyAMEAivndAMEAivvcAMEAivvmAME
Ai1ynAMEAi37IAMEAmcOxAMEAmcQjAMEAGcaqQMEAGcbqAMEAWcbqgMEAmcpKAME
AmcsaAMEAGcvmAMEAmczXAMEAmczmAMEAmc0MAMEAmc2YAMEAmc3VAMEAWdIagME
AWdSLAMEAmdSkAMEAmdWFAMEAmdYfAMEAGdiTwMEAWdiwgMEAWdjMAMEAmdsTAME
AmdtbAMEAWduSAMEAmdvgAMEAmd2CAMEAGeEywMEAGeFdAMEAmeGpAMEAmeHPAME
AmeIQAMEAWeLWAMEAWeOQAMEAWePtAMEAGeP1wMEAWeQcAMEAGeaGgMEAWebqgME
AWebwgMEAWedMgMEAGedRQMEAGeebwMEAGeetAMEAWee2AMEAGefiQMEAWefsgME
AWeiUAMEAWelCgMEAWelFAMEAWelGgMEAWem3AMEAWepOgMEAWepnAMEAWerCAME
AWerNgMEAWerPAMEAWer7AMEAGetKQMEAWeuGgMEAWeuKgMEAWevAAMEAWevDAME
AWevOgMEAWevagMEAGewjgMEAWe02AMEAWe1CAMEAWe2jAMEAWe+DAMEAWe/VgME
AmfASAMEAmfHXAMEAmfHkAMEAmfIMAMEAmfOQAMEAmfUhAMEAWfgMgMEAmfi4AME
AmfkrAMEAmfkuAMEAmfqQAMEAmfscAMEAWf1qgMEAmf+YAMEAmf+yAMEAnOmhAME
Aok7zAMEAosFYAMEAMoJNwMEAsu/ODANBgkqhkiG9w0BAQsFAAOCAQEAEMYa+lDc
L6FZIfhg7Z7Wz6+yWJogM19lACarOsokS5nqPydfF8SXXoHohDKplScWZNWm89rB
Do1TGGuVJx2rNQuiU6RoOHku2VLaY5KxV3QiSDbrh9Xx1cnqb/19nMZXd7whnSw6
a9DeIgdGoMLb/GWtSAtGFKkxruM6RlwRuK0631PhVmEzpGjVxXKoy0fbNzngqzwd
ShwHMSNlGaaUCoOggnFphd3QDTlNn3bUNSb4Fq+fKhcMb3fnwNtH8v8cy6G/ebJp
AFBN0puTYxXYqiwKfhLTpGX12E07hPfY8b83tQWPR78HojNw5xHH8TGf3QLOfKPm
MVuCx8xDCyk0ZA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:27:40 2025 by rpki-client