Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3CB4B840BC5911EFA6871F2BC4F9AE02.roa
File: 3CB4B840BC5911EFA6871F2BC4F9AE02.roa (raw, json)
Hash identifier: LSMVOX6h5xeJ7NIx6ZyEp3ByelwAtQUCB16o+zzZcUk=
Subject key identifier: 7C:D6:B9:B1:FD:CF:75:B8:2E:73:EE:0A:86:BE:70:A5:26:12:3F:65
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9F68
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3CB4B840BC5911EFA6871F2BC4F9AE02.roa
Signing time: Tue 17 Dec 2024 09:28:13 +0000
ROA not before: Tue 17 Dec 2024 09:28:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10029
IP address blocks: 103.25.224.0/22 maxlen: 24
119.82.64.0/21 maxlen: 21
119.82.64.0/24 maxlen: 24
119.82.65.0/24 maxlen: 24
119.82.66.0/24 maxlen: 24
119.82.67.0/24 maxlen: 24
119.82.68.0/24 maxlen: 24
119.82.69.0/24 maxlen: 24
119.82.70.0/24 maxlen: 24
119.82.71.0/24 maxlen: 24
119.82.72.0/21 maxlen: 21
119.82.72.0/24 maxlen: 24
119.82.73.0/24 maxlen: 24
119.82.74.0/24 maxlen: 24
119.82.75.0/24 maxlen: 24
119.82.76.0/24 maxlen: 24
119.82.77.0/24 maxlen: 24
119.82.78.0/24 maxlen: 24
119.82.79.0/24 maxlen: 24
119.82.80.0/21 maxlen: 21
119.82.80.0/24 maxlen: 24
119.82.81.0/24 maxlen: 24
119.82.82.0/24 maxlen: 24
119.82.83.0/24 maxlen: 24
119.82.84.0/24 maxlen: 24
119.82.85.0/24 maxlen: 24
119.82.86.0/24 maxlen: 24
119.82.87.0/24 maxlen: 24
119.82.88.0/21 maxlen: 24
119.82.96.0/21 maxlen: 24
119.82.104.0/21 maxlen: 21
119.82.104.0/24 maxlen: 24
119.82.105.0/24 maxlen: 24
119.82.106.0/24 maxlen: 24
119.82.107.0/24 maxlen: 24
119.82.108.0/22 maxlen: 22
119.82.108.0/24 maxlen: 24
119.82.109.0/24 maxlen: 24
119.82.110.0/24 maxlen: 24
119.82.111.0/24 maxlen: 24
119.82.112.0/21 maxlen: 22
119.82.112.0/24 maxlen: 24
119.82.113.0/24 maxlen: 24
119.82.114.0/24 maxlen: 24
119.82.115.0/24 maxlen: 24
119.82.116.0/24 maxlen: 24
119.82.117.0/24 maxlen: 24
119.82.118.0/23 maxlen: 24
119.82.120.0/21 maxlen: 22
119.82.120.0/24 maxlen: 24
119.82.121.0/24 maxlen: 24
119.82.122.0/24 maxlen: 24
119.82.123.0/24 maxlen: 24
119.82.124.0/24 maxlen: 24
119.82.125.0/24 maxlen: 24
119.82.126.0/23 maxlen: 24
125.63.64.0/21 maxlen: 21
125.63.64.0/24 maxlen: 24
125.63.65.0/24 maxlen: 24
125.63.66.0/24 maxlen: 24
125.63.67.0/24 maxlen: 24
125.63.68.0/24 maxlen: 24
125.63.69.0/24 maxlen: 24
125.63.70.0/24 maxlen: 24
125.63.71.0/24 maxlen: 24
125.63.72.0/22 maxlen: 22
125.63.72.0/24 maxlen: 24
125.63.73.0/24 maxlen: 24
125.63.74.0/24 maxlen: 24
125.63.75.0/24 maxlen: 24
125.63.76.0/22 maxlen: 22
125.63.76.0/24 maxlen: 24
125.63.77.0/24 maxlen: 24
125.63.78.0/24 maxlen: 24
125.63.79.0/24 maxlen: 24
125.63.80.0/21 maxlen: 21
125.63.80.0/24 maxlen: 24
125.63.81.0/24 maxlen: 24
125.63.82.0/24 maxlen: 24
125.63.83.0/24 maxlen: 24
125.63.84.0/24 maxlen: 24
125.63.85.0/24 maxlen: 24
125.63.86.0/24 maxlen: 24
125.63.87.0/24 maxlen: 24
125.63.88.0/21 maxlen: 21
125.63.88.0/24 maxlen: 24
125.63.89.0/24 maxlen: 24
125.63.90.0/24 maxlen: 24
125.63.91.0/24 maxlen: 24
125.63.92.0/24 maxlen: 24
125.63.93.0/24 maxlen: 24
125.63.94.0/24 maxlen: 24
125.63.95.0/24 maxlen: 24
125.63.96.0/21 maxlen: 21
125.63.96.0/24 maxlen: 24
125.63.97.0/24 maxlen: 24
125.63.98.0/24 maxlen: 24
125.63.99.0/24 maxlen: 24
125.63.100.0/24 maxlen: 24
125.63.101.0/24 maxlen: 24
125.63.102.0/24 maxlen: 24
125.63.103.0/24 maxlen: 24
125.63.104.0/22 maxlen: 22
125.63.104.0/24 maxlen: 24
125.63.105.0/24 maxlen: 24
125.63.106.0/24 maxlen: 24
125.63.107.0/24 maxlen: 24
125.63.108.0/22 maxlen: 22
125.63.108.0/24 maxlen: 24
125.63.109.0/24 maxlen: 24
125.63.110.0/24 maxlen: 24
125.63.111.0/24 maxlen: 24
125.63.112.0/22 maxlen: 22
125.63.112.0/24 maxlen: 24
125.63.113.0/24 maxlen: 24
125.63.114.0/24 maxlen: 24
125.63.115.0/24 maxlen: 24
125.63.116.0/22 maxlen: 22
125.63.116.0/24 maxlen: 24
125.63.117.0/24 maxlen: 24
125.63.118.0/24 maxlen: 24
125.63.119.0/24 maxlen: 24
125.63.120.0/21 maxlen: 21
125.63.120.0/22 maxlen: 22
125.63.120.0/24 maxlen: 24
125.63.121.0/24 maxlen: 24
125.63.122.0/24 maxlen: 24
125.63.123.0/24 maxlen: 24
125.63.124.0/23 maxlen: 24
125.63.126.0/23 maxlen: 24
180.92.200.0/21 maxlen: 24
180.151.0.0/16 maxlen: 24
203.92.32.0/19 maxlen: 24
203.122.0.0/18 maxlen: 24
203.123.32.0/20 maxlen: 24
2001:fd0::/36 maxlen: 36
2001:fd0::/48 maxlen: 48
2001:fd0:d::/48 maxlen: 48
2001:fd0:da::/48 maxlen: 48
2001:fd0:100::/48 maxlen: 48
2001:fd0:101::/48 maxlen: 48
2001:fd0:200::/48 maxlen: 48
2001:fd0:300::/48 maxlen: 48
2001:fd0:400::/48 maxlen: 48
2001:fd0:401::/48 maxlen: 48
2001:fd0:402::/48 maxlen: 48
2001:fd0:403::/48 maxlen: 48
2001:fd0:404::/48 maxlen: 48
2001:fd0:405::/48 maxlen: 48
2001:fd0:406::/48 maxlen: 48
2001:fd0:410::/48 maxlen: 48
2001:fd0:1000::/36 maxlen: 36
2001:fd0:1000::/40 maxlen: 40
2001:fd0:1100::/40 maxlen: 40
2001:fd0:1200::/48 maxlen: 48
2001:fd0:1300::/48 maxlen: 48
2001:fd0:2000::/36 maxlen: 36
2001:fd0:2000::/40 maxlen: 40
2001:fd0:2200::/48 maxlen: 48
2001:fd0:2300::/48 maxlen: 48
2001:fd0:2400::/48 maxlen: 48
2001:fd0:3000::/36 maxlen: 36
2001:fd0:3000::/40 maxlen: 40
2001:fd0:3100::/40 maxlen: 40
2001:fd0:3100::/48 maxlen: 48
2001:fd0:3101::/48 maxlen: 48
2001:fd0:3200::/48 maxlen: 48
2001:fd0:3300::/48 maxlen: 48
2001:fd0:3400::/48 maxlen: 48
2400:f080::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 17 Dec 2024 09:44:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40808 (0x9f68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 17 09:28:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6761442d-1e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:61:33:6a:c1:e3:71:ed:20:29:e4:ad:53:bf:
84:06:95:34:c4:24:f8:86:2d:32:0e:d4:6e:9d:58:
8b:b8:f7:0a:37:4a:41:60:a0:b5:49:4d:69:e3:9c:
70:b1:61:3d:10:3c:19:5c:c2:ca:ac:b9:69:8d:59:
e4:44:c5:ea:3e:99:bf:61:e9:57:e8:e4:34:a5:fb:
b5:c6:e8:a5:3f:db:26:06:f3:e8:6f:e0:b2:f4:7d:
bc:39:09:73:13:da:d9:fb:e7:a9:04:bd:7e:ee:f9:
20:26:f6:5e:6c:00:ac:5c:32:dd:33:a3:cc:95:96:
f4:0a:a5:10:35:16:74:76:83:7c:2d:2b:20:86:a7:
ab:49:6d:55:c7:6d:3e:14:81:0d:6e:f0:77:ba:b2:
6e:09:bb:76:f4:82:d7:78:e4:c1:4f:8c:e9:6b:24:
12:08:62:c9:5d:be:6e:73:4a:b6:c6:b7:c3:dd:17:
6c:e0:fc:11:0f:ec:61:3c:18:82:1c:83:50:02:9c:
34:88:26:96:23:4d:89:23:20:2e:8b:65:eb:0e:b5:
1e:1a:d9:05:ea:22:fd:ca:f6:a1:fc:59:0e:23:97:
3c:4d:5b:fb:0a:8e:86:75:56:3e:e7:82:de:65:37:
d1:ad:38:92:a4:fe:6f:26:03:74:e7:7a:ac:db:c3:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D6:B9:B1:FD:CF:75:B8:2E:73:EE:0A:86:BE:70:A5:26:12:3F:65
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3CB4B840BC5911EFA6871F2BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.25.224.0/22
119.82.64.0/18
125.63.64.0/18
180.92.200.0/21
180.151.0.0/16
203.92.32.0/19
203.122.0.0/18
203.123.32.0/20
IPv6:
2001:fd0::/34
2400:f080::/32
Signature Algorithm: sha256WithRSAEncryption
af:01:ae:5a:51:e6:21:ca:2e:65:c9:8b:54:a5:16:c3:8d:78:
d1:da:4e:c4:3a:ff:79:5a:02:21:b5:27:5b:fa:b6:9f:6e:3f:
b6:48:e2:09:4f:59:be:73:cb:42:6a:14:f9:df:96:91:79:9c:
b0:40:55:95:10:1a:01:da:34:1a:ed:1a:77:ef:19:ed:14:b4:
80:75:88:ba:39:e4:22:8b:ac:f9:e4:dd:76:de:5e:94:7e:81:
9a:75:fc:2f:cb:ce:f7:51:cb:1e:85:c9:17:d6:34:d1:7c:d3:
b0:d9:12:2e:50:0d:06:f2:6c:fb:8d:dd:d4:f0:4e:db:61:78:
80:76:ec:e9:4a:77:25:56:4f:71:a5:76:ab:37:c6:2e:f2:4f:
9c:ec:3b:90:90:65:6b:20:a6:54:19:8c:96:2f:ff:ff:5e:f2:
ae:a7:3c:2f:fb:93:bb:37:dd:50:0a:e2:fa:b7:90:dd:5f:e2:
17:17:e9:ee:53:0b:46:dd:93:84:62:8e:7f:d8:03:de:a3:27:
3f:7d:c6:bd:ce:65:f8:55:2d:28:39:32:39:a1:76:fa:f3:0d:
5e:e2:31:ac:4a:ef:d8:67:0f:19:c8:2f:28:c8:ba:87:6d:fb:
ab:f1:9e:d8:ef:ac:b4:57:7f:28:64:d1:d8:43:36:79:ba:ec:
ce:d1:b0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:08:05 2025 by rpki-client