Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6AAB7E222B3B11F092ED2B63C4F9AE02.roa
File: 6AAB7E222B3B11F092ED2B63C4F9AE02.roa (raw, json)
Hash identifier: GD6DWXmc8SzBR2LB9flol4CNs456Vcn01JhuhChdYzA=
Subject key identifier: E4:B4:A9:1A:93:00:02:33:0F:75:5F:9B:08:58:64:C7:39:3B:AA:94
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: B103
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6AAB7E222B3B11F092ED2B63C4F9AE02.roa
Signing time: Wed 07 May 2025 12:04:24 +0000
ROA not before: Wed 07 May 2025 12:04:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132215
IP address blocks: 1.6.136.0/24 maxlen: 24
1.6.226.0/24 maxlen: 24
1.6.227.0/24 maxlen: 24
1.6.228.0/24 maxlen: 24
1.7.142.0/24 maxlen: 24
1.7.151.0/24 maxlen: 24
1.7.161.0/24 maxlen: 24
1.7.162.0/24 maxlen: 24
1.7.180.0/24 maxlen: 24
1.7.200.0/24 maxlen: 24
1.7.201.0/24 maxlen: 24
1.7.202.0/24 maxlen: 24
43.227.132.0/22 maxlen: 24
45.127.208.0/22 maxlen: 24
45.127.228.0/22 maxlen: 24
45.127.236.0/22 maxlen: 24
58.84.20.0/22 maxlen: 24
58.84.24.0/22 maxlen: 24
59.152.80.0/22 maxlen: 24
61.14.204.0/22 maxlen: 24
103.7.128.0/22 maxlen: 24
103.15.228.0/22 maxlen: 24
103.59.140.0/22 maxlen: 24
103.70.60.0/22 maxlen: 24
103.119.240.0/22 maxlen: 23
103.119.241.0/24 maxlen: 24
103.119.242.0/23 maxlen: 24
103.120.28.0/22 maxlen: 24
103.196.188.0/22 maxlen: 24
103.196.216.0/22 maxlen: 24
103.196.224.0/22 maxlen: 24
103.197.36.0/22 maxlen: 24
103.197.40.0/22 maxlen: 24
103.197.80.0/22 maxlen: 24
103.197.100.0/22 maxlen: 24
103.197.124.0/22 maxlen: 24
103.197.128.0/22 maxlen: 24
103.197.136.0/22 maxlen: 24
103.197.140.0/22 maxlen: 24
103.200.76.0/22 maxlen: 24
103.200.80.0/22 maxlen: 24
103.200.88.0/22 maxlen: 24
103.203.80.0/22 maxlen: 24
103.218.228.0/22 maxlen: 24
111.235.68.0/22 maxlen: 24
114.134.16.0/22 maxlen: 24
202.177.153.0/24 maxlen: 24
202.177.157.0/24 maxlen: 24
218.185.248.0/22 maxlen: 24
220.158.128.0/22 maxlen: 24
220.158.144.0/22 maxlen: 24
220.158.168.0/22 maxlen: 24
220.158.172.0/22 maxlen: 24
220.158.180.0/22 maxlen: 24
220.158.184.0/22 maxlen: 24
223.31.120.0/24 maxlen: 24
223.31.121.0/24 maxlen: 24
223.31.122.0/24 maxlen: 24
223.31.123.0/24 maxlen: 24
223.31.159.0/24 maxlen: 24
223.31.174.0/24 maxlen: 24
2401:ac20::/32 maxlen: 36
Validation: Failed, certificate revoked on Wed 07 May 2025 12:08:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45315 (0xb103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 7 12:04:24 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=681b4c48-69c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:be:2c:c7:c9:9d:32:98:a5:e5:e7:bd:73:
ca:3b:8c:1b:ec:bd:b9:4c:85:cb:d0:bb:fa:02:f3:
a1:3a:e4:1c:fe:ed:9c:d4:75:2e:90:6d:39:bb:3f:
33:ae:59:d7:30:f3:5e:56:3d:eb:67:61:f2:07:73:
15:10:ba:2b:75:a5:8f:2b:62:f8:89:03:26:c9:72:
39:64:f8:89:c8:00:d6:bf:7b:63:22:03:98:63:b7:
2b:7f:42:83:06:53:82:51:42:69:c6:fb:c1:54:42:
ba:ec:65:2e:3c:30:c2:9a:b6:c7:11:4e:33:50:0d:
6e:20:50:e6:28:61:ee:71:77:73:b8:d4:52:5f:26:
53:74:ab:ee:25:94:20:60:d8:3c:cf:ed:99:40:a9:
e2:c9:b3:d8:48:17:fd:98:d7:82:67:6c:fb:f0:05:
6f:f3:d1:ae:6b:e0:e6:59:61:2b:e0:ca:99:00:60:
0f:96:42:35:25:22:d7:d5:a1:4e:f6:d6:cc:fa:7b:
29:8b:b7:c4:5e:8f:7d:e6:35:1d:98:ce:29:dd:05:
a8:39:6a:00:81:5b:b1:08:98:fa:88:6a:34:36:21:
94:24:65:08:25:73:46:32:5d:eb:df:ae:03:9d:1d:
ed:61:3e:42:49:fe:1a:d2:cf:cf:b5:a9:a0:88:38:
15:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B4:A9:1A:93:00:02:33:0F:75:5F:9B:08:58:64:C7:39:3B:AA:94
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6AAB7E222B3B11F092ED2B63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.6.136.0/24
1.6.226.0-1.6.228.255
1.7.142.0/24
1.7.151.0/24
1.7.161.0-1.7.162.255
1.7.180.0/24
1.7.200.0-1.7.202.255
43.227.132.0/22
45.127.208.0/22
45.127.228.0/22
45.127.236.0/22
58.84.20.0-58.84.27.255
59.152.80.0/22
61.14.204.0/22
103.7.128.0/22
103.15.228.0/22
103.59.140.0/22
103.70.60.0/22
103.119.240.0/22
103.120.28.0/22
103.196.188.0/22
103.196.216.0/22
103.196.224.0/22
103.197.36.0-103.197.43.255
103.197.80.0/22
103.197.100.0/22
103.197.124.0-103.197.131.255
103.197.136.0/21
103.200.76.0-103.200.83.255
103.200.88.0/22
103.203.80.0/22
103.218.228.0/22
111.235.68.0/22
114.134.16.0/22
202.177.153.0/24
202.177.157.0/24
218.185.248.0/22
220.158.128.0/22
220.158.144.0/22
220.158.168.0/21
220.158.180.0-220.158.187.255
223.31.120.0/22
223.31.159.0/24
223.31.174.0/24
IPv6:
2401:ac20::/32
Signature Algorithm: sha256WithRSAEncryption
15:d4:e9:0f:41:3e:4b:93:b6:ec:77:0f:03:c6:16:a8:ee:56:
94:b1:5a:7f:c6:68:37:da:a4:27:5b:d4:52:50:9c:19:e9:c1:
72:86:80:4c:90:32:b1:34:fe:05:a8:9b:a6:6e:96:69:b2:d5:
13:af:84:87:ed:2e:4d:5b:99:25:0f:55:ec:15:bf:1b:f4:7a:
e4:2a:42:bc:3a:af:09:54:ea:a4:72:9b:85:d0:e8:91:da:1d:
02:c3:68:23:af:5c:a9:8a:c8:dd:8c:4f:c4:ed:03:0b:90:f4:
10:1b:8a:b5:df:71:96:0a:28:b4:ea:1e:a4:f6:54:34:70:85:
67:67:17:8d:22:69:65:2b:8b:99:c0:fc:90:e1:00:71:d7:ad:
74:cd:4a:e5:f6:73:9b:d8:4c:2c:3d:b0:16:34:fc:5d:9f:2a:
ce:ff:ac:fa:d8:4c:d6:be:b2:23:a7:98:06:41:cd:4e:f2:5e:
fb:f5:e0:1b:59:78:d9:ac:ea:33:6d:12:4d:6a:d6:78:ff:0e:
e8:bb:46:7c:4c:f6:1b:74:b1:51:f0:ec:00:24:38:05:a6:b5:
05:96:fe:6d:57:c7:6e:ac:4d:9e:d9:4d:90:e2:8c:99:48:18:
a2:58:22:1e:87:b6:97:31:41:06:20:90:69:25:11:7f:d2:c1:
53:8a:f8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:04:05 2025 by rpki-client