Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C9C1F4E151211F0B760D514C4F9AE02.roa
File: 3C9C1F4E151211F0B760D514C4F9AE02.roa (raw, json)
Hash identifier: i6pcKAXaTgHyiTyZUtshCSM1T4o4AmRKl7Ud52tw0yg=
Subject key identifier: AB:BA:0E:19:01:3B:F5:F9:AF:25:9A:B7:C1:B6:BF:06:83:CC:2F:BB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AE30
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C9C1F4E151211F0B760D514C4F9AE02.roa
Signing time: Wed 09 Apr 2025 12:39:42 +0000
ROA not before: Wed 09 Apr 2025 12:39:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133676
IP address blocks: 36.50.82.0/24 maxlen: 24
43.225.74.0/24 maxlen: 24
43.230.196.0/22 maxlen: 24
43.239.132.0/22 maxlen: 24
43.240.4.0/24 maxlen: 24
43.240.6.0/24 maxlen: 24
43.240.7.0/24 maxlen: 24
43.250.252.0/22 maxlen: 24
45.64.8.0/24 maxlen: 24
45.64.9.0/24 maxlen: 24
45.64.10.0/24 maxlen: 24
45.64.11.0/24 maxlen: 24
45.248.24.0/24 maxlen: 24
45.248.26.0/23 maxlen: 24
103.42.88.0/22 maxlen: 24
103.47.12.0/23 maxlen: 24
103.47.15.0/24 maxlen: 24
103.47.72.0/23 maxlen: 24
103.47.74.0/23 maxlen: 24
103.47.172.0/23 maxlen: 24
103.47.174.0/23 maxlen: 24
103.49.232.0/23 maxlen: 24
103.54.24.0/23 maxlen: 24
103.54.26.0/24 maxlen: 24
103.62.147.0/24 maxlen: 24
103.80.34.0/23 maxlen: 24
103.82.72.0/22 maxlen: 24
103.85.118.0/23 maxlen: 24
103.87.204.0/22 maxlen: 24
103.93.172.0/22 maxlen: 24
103.93.212.0/23 maxlen: 24
103.98.53.0/24 maxlen: 24
103.101.116.0/24 maxlen: 24
103.101.117.0/24 maxlen: 24
103.101.118.0/23 maxlen: 24
103.103.163.0/24 maxlen: 24
103.105.228.0/23 maxlen: 24
103.105.230.0/23 maxlen: 24
103.109.180.0/23 maxlen: 24
103.109.182.0/23 maxlen: 24
103.114.188.0/23 maxlen: 24
103.118.180.0/22 maxlen: 24
103.147.88.0/23 maxlen: 24
103.148.66.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.173.218.0/24 maxlen: 24
103.177.202.0/23 maxlen: 24
103.178.58.0/23 maxlen: 24
103.181.90.0/23 maxlen: 24
103.182.44.0/23 maxlen: 24
103.184.184.0/23 maxlen: 24
103.186.44.0/23 maxlen: 24
103.189.146.0/24 maxlen: 24
103.189.147.0/24 maxlen: 24
103.191.182.0/23 maxlen: 24
103.191.234.0/23 maxlen: 24
103.195.26.0/23 maxlen: 24
103.204.168.0/22 maxlen: 24
103.211.56.0/23 maxlen: 24
103.211.58.0/24 maxlen: 24
103.211.190.0/23 maxlen: 24
103.212.136.0/23 maxlen: 24
103.212.138.0/23 maxlen: 24
103.213.6.0/23 maxlen: 24
103.225.205.0/24 maxlen: 24
103.225.206.0/23 maxlen: 24
103.226.200.0/22 maxlen: 24
103.227.95.0/24 maxlen: 24
103.248.120.0/24 maxlen: 24
103.248.121.0/24 maxlen: 24
139.5.16.0/23 maxlen: 24
139.5.18.0/23 maxlen: 24
2405:5540::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 11 Apr 2025 06:17:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44592 (0xae30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 9 12:39:42 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f66a8e-08d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:08:f5:d8:92:08:82:30:c4:69:ba:ef:fb:
3e:f5:f4:03:53:bd:a8:63:7c:56:a9:b2:12:2b:d1:
7b:43:67:bd:3f:70:c5:88:1f:cc:5b:ba:b5:f1:be:
0b:5b:3c:97:aa:32:e5:01:c2:6b:bf:54:d2:39:13:
f8:50:5d:22:d5:0c:65:98:a2:5d:2f:02:65:6f:1e:
2b:02:f3:51:c6:fe:08:3a:48:8b:eb:42:74:b6:33:
6e:5f:d4:4b:b3:1d:ec:8e:7e:be:41:aa:6d:fa:0c:
73:4a:de:50:cf:13:df:69:6c:b0:ba:e7:07:74:72:
c0:ea:56:42:8c:4e:e6:cc:57:36:89:f7:dd:ca:8a:
df:be:bb:8d:54:c7:0d:a4:0a:db:d4:46:cb:26:d8:
5a:3b:09:4e:ba:3f:90:bf:2e:9a:28:bb:6a:29:88:
92:43:e4:db:28:62:18:8d:0e:46:40:a3:6e:7f:42:
9c:ff:3c:6d:35:5d:db:b5:c9:ef:b9:c9:c8:2f:3d:
ba:ff:36:92:c4:fa:e8:be:89:5e:98:6a:d8:bc:65:
4d:3c:37:11:d4:79:98:9a:64:97:da:ba:6b:dc:93:
a6:0d:18:6a:f0:71:20:1a:5b:2d:c4:c1:c5:7b:7b:
75:b5:65:4d:2e:02:37:b6:a1:de:23:fb:66:04:93:
82:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BA:0E:19:01:3B:F5:F9:AF:25:9A:B7:C1:B6:BF:06:83:CC:2F:BB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3C9C1F4E151211F0B760D514C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.82.0/24
43.225.74.0/24
43.230.196.0/22
43.239.132.0/22
43.240.4.0/24
43.240.6.0/23
43.250.252.0/22
45.64.8.0/22
45.248.24.0/24
45.248.26.0/23
103.42.88.0/22
103.47.12.0/23
103.47.15.0/24
103.47.72.0/22
103.47.172.0/22
103.49.232.0/23
103.54.24.0-103.54.26.255
103.62.147.0/24
103.80.34.0/23
103.82.72.0/22
103.85.118.0/23
103.87.204.0/22
103.93.172.0/22
103.93.212.0/23
103.98.53.0/24
103.101.116.0/22
103.103.163.0/24
103.105.228.0/22
103.109.180.0/22
103.114.188.0/23
103.118.180.0/22
103.147.88.0/23
103.148.66.0/23
103.153.208.0/23
103.173.218.0/24
103.177.202.0/23
103.178.58.0/23
103.181.90.0/23
103.182.44.0/23
103.184.184.0/23
103.186.44.0/23
103.189.146.0/23
103.191.182.0/23
103.191.234.0/23
103.195.26.0/23
103.204.168.0/22
103.211.56.0-103.211.58.255
103.211.190.0/23
103.212.136.0/22
103.213.6.0/23
103.225.205.0-103.225.207.255
103.226.200.0/22
103.227.95.0/24
103.248.120.0/23
139.5.16.0/22
IPv6:
2405:5540::/32
Signature Algorithm: sha256WithRSAEncryption
a5:50:19:e4:e1:e1:2e:4d:22:76:c0:cc:3d:d4:d2:4d:56:e8:
ae:e3:3e:89:b5:71:bb:71:af:12:a5:ae:45:dd:c9:f0:f9:30:
dc:b3:b0:cb:3c:60:d7:58:0c:a1:c6:62:6a:bb:45:e5:f8:6d:
2d:3b:4b:d7:a2:57:1b:13:5f:e2:65:ec:0f:a6:52:68:ef:61:
e6:0f:d3:ec:52:54:72:63:b4:50:ae:d8:f0:ea:13:27:3c:54:
f8:39:bb:51:5d:b7:d8:cc:15:d2:d6:1e:3d:24:b7:bf:6c:29:
de:e5:64:02:41:e0:b3:bb:70:dd:f6:12:97:be:7e:6e:fa:a5:
bf:1e:5e:a0:a6:9d:d3:91:c8:4a:f6:46:50:a3:9c:41:8b:2d:
98:db:88:10:63:65:91:1c:0a:ff:74:3e:00:79:6e:85:0c:76:
85:63:75:5a:20:f3:68:d5:ae:1b:8d:79:c9:44:71:0a:5b:0c:
bf:2f:e2:9b:72:ea:9e:8a:79:4d:2a:c3:10:1c:e5:46:16:2b:
ee:42:87:28:66:16:3f:b6:53:54:12:10:73:f1:44:26:a2:bc:
da:b0:c4:2f:f9:7d:b8:78:aa:61:a9:10:0b:4c:42:e8:d1:78:
54:a5:03:83:18:ed:de:9f:6f:2f:0d:f1:08:ae:ae:e0:c9:28:
64:70:54:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:07:59 2025 by rpki-client