Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6254DE0AE78211EFB75A8A38C4F9AE02.roa
File: 6254DE0AE78211EFB75A8A38C4F9AE02.roa (raw, json)
Hash identifier: hyLQaAmsE8Xm6HJzL2qPCM78DnVVi8XYqXPAJpg6L5U=
Subject key identifier: 84:3A:18:7E:C6:E9:74:EA:5D:1C:E0:7D:42:3E:D2:9C:80:DF:F8:54
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A59D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6254DE0AE78211EFB75A8A38C4F9AE02.roa
Signing time: Mon 10 Feb 2025 07:41:06 +0000
ROA not before: Mon 10 Feb 2025 07:41:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.109.0/24 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.144.188.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.2.0/23 maxlen: 24
103.157.228.0/23 maxlen: 24
103.158.180.0/24 maxlen: 24
103.159.137.0/24 maxlen: 24
103.164.0.0/23 maxlen: 24
103.167.157.0/24 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.102.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.242.236.0/22 maxlen: 24
103.252.168.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 11:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42397 (0xa59d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 10 07:41:05 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67a9ad91-0b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ed:b4:35:3d:f8:e3:8c:52:42:e1:1e:8e:d4:
f4:50:06:5e:31:f1:6c:3c:80:e6:82:50:f8:19:4b:
f1:8b:42:93:ff:38:62:14:bd:b4:2b:c8:87:a6:c9:
f8:2a:be:18:8b:74:86:3c:38:fb:6b:f2:6f:0e:90:
1d:2b:e1:1b:2f:b7:75:f8:bf:8b:9e:c6:57:18:54:
ac:61:0f:10:07:54:4b:f7:7d:5e:bc:00:73:c3:2d:
c0:25:58:18:9b:dc:30:b6:39:ee:cc:74:f5:b2:7d:
8e:47:9b:9b:e2:88:93:13:a9:08:e4:11:9a:74:da:
ae:82:4a:03:c5:f9:a6:1e:87:47:f8:b6:60:1e:37:
3a:09:1a:c3:99:2d:f4:25:5b:c5:53:6f:b9:2b:25:
34:d7:05:62:74:a4:01:a4:5f:f2:14:c0:dc:2e:8a:
da:42:28:5c:6e:82:e3:ea:58:64:95:ee:37:d7:19:
34:9c:14:54:08:ff:d0:b6:0e:f7:35:1e:47:98:96:
63:ca:e3:0d:bd:bb:fb:f5:60:ab:5e:fb:ea:09:96:
f2:91:4c:22:d1:34:66:89:5d:74:c3:9c:70:73:53:
6b:70:8d:b1:24:f2:b9:d0:e6:16:a5:3e:a4:d5:97:
0e:9b:08:48:15:81:fe:21:0d:a2:50:65:8b:14:9f:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3A:18:7E:C6:E9:74:EA:5D:1C:E0:7D:42:3E:D2:9C:80:DF:F8:54
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6254DE0AE78211EFB75A8A38C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.143.109.0/24
103.143.215.0/24
103.144.112.0/23
103.144.188.0/23
103.153.208.0/23
103.155.194.0/23
103.157.2.0/23
103.157.228.0/23
103.158.180.0/24
103.159.137.0/24
103.164.0.0/23
103.167.157.0/24
103.169.58.0/23
103.171.8.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.175.102.0/23
103.175.106.0/23
103.180.216.0/23
103.192.72.0/22
103.199.92.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.236.112.0/22
103.242.236.0/22
103.252.168.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
220.158.140.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
7a:72:52:c7:4d:68:3d:fe:6e:d0:6f:ba:d1:95:36:79:cf:2e:
50:b2:67:b7:51:4e:f6:5f:00:dd:cf:32:24:5e:ec:0a:2f:ed:
0c:12:d6:1e:5b:1f:e3:06:d2:41:bc:a2:07:a2:a8:82:da:8e:
54:20:b8:5a:9d:0d:2e:84:7e:6a:8e:47:ff:85:eb:3f:7d:28:
b8:c1:42:98:50:dd:73:38:04:93:0f:08:c0:64:29:33:7e:b7:
4c:78:c0:20:54:da:3b:8e:1c:05:cf:88:7b:d7:1e:85:bd:93:
30:25:fc:dd:75:54:f8:a1:e2:66:8e:4e:74:e2:90:f8:8d:c3:
c6:ec:04:fb:e6:51:4c:da:9f:5d:bc:e3:38:f6:26:60:ce:68:
ab:7b:d7:b0:8a:7c:c2:e7:7a:0a:82:9f:3c:ee:e5:fd:e3:8c:
e6:c2:7f:66:e5:e5:40:73:68:ea:c1:ad:50:9f:5c:27:91:a4:
be:6e:ce:9c:f6:2f:19:5d:39:fe:80:ad:d7:36:4e:2f:2a:8e:
50:fe:61:44:28:88:2d:7e:70:52:d8:77:17:e7:68:57:63:47:
44:97:7d:33:87:d7:b2:b7:06:d7:cd:4d:44:16:69:dc:fe:11:
ed:86:22:a6:70:23:4e:e4:9b:79:8b:9f:9f:b7:cd:5a:41:0e:
58:79:68:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:10:25 2025 by rpki-client