Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A4DB7002DEC411EF8FB86617C4F9AE02.roa
File: A4DB7002DEC411EF8FB86617C4F9AE02.roa (raw, json)
Hash identifier: 9wliUKtnmjwzpGIpGkC5odLw2o3Y9Oo8Am+uAVtHrU4=
Subject key identifier: 3A:A9:BA:D8:9F:9A:24:EB:14:5F:2B:CD:E8:B0:AE:AC:59:B2:A1:D6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A41C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A4DB7002DEC411EF8FB86617C4F9AE02.roa
Signing time: Thu 30 Jan 2025 08:43:11 +0000
ROA not before: Thu 30 Jan 2025 08:43:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.116.60.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.109.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.164.0.0/23 maxlen: 24
103.167.157.0/24 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.236.112.0/22 maxlen: 24
103.242.236.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.36.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 30 Jan 2025 10:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42012 (0xa41c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 30 08:43:11 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679b3b9e-d1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:3b:15:89:2c:2e:e6:1d:d5:f8:93:f4:3b:
de:e3:09:e0:14:ed:41:ac:52:84:ba:ea:af:0c:88:
08:4d:e0:2e:28:c6:ec:e7:5e:2d:ea:24:13:e9:c8:
0c:9c:15:06:75:0d:ac:48:57:e5:f8:08:ca:98:f2:
07:30:37:60:48:59:c2:30:94:25:89:4f:70:a2:ab:
cb:68:ae:eb:e5:aa:a3:3e:ab:7c:02:df:f2:a8:24:
d7:7e:06:31:3a:25:9c:a6:cb:a0:56:30:b3:f7:b1:
fa:59:2c:a8:c2:16:c9:b2:5d:01:cd:d2:a6:1f:af:
0b:1d:7b:dc:02:dc:45:00:78:ed:86:45:04:9b:95:
c9:cf:4d:00:4e:85:71:d8:c9:b9:49:7c:15:cf:ae:
53:bd:e4:2b:d0:9e:94:af:d1:33:0d:a6:85:99:94:
5b:70:b5:94:f7:76:0b:27:16:a0:e8:64:a9:4e:ea:
8b:b2:2c:12:54:8d:ce:5f:cf:f9:7c:23:df:16:d2:
bc:c3:92:28:44:83:f0:88:20:df:7e:2c:35:ff:47:
b6:f7:d2:2b:a7:f5:41:f2:b3:c5:4a:c0:b7:a8:24:
4b:b0:b3:96:44:ae:f9:56:1e:52:77:5f:7c:33:27:
c1:c2:9c:b8:44:d1:20:8d:62:81:9b:f4:5c:8d:1f:
e8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A9:BA:D8:9F:9A:24:EB:14:5F:2B:CD:E8:B0:AE:AC:59:B2:A1:D6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A4DB7002DEC411EF8FB86617C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.231.116.0/22
43.239.112.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.116.60.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.142.64.0/23
103.143.109.0/24
103.144.112.0/23
103.153.208.0/23
103.155.194.0/23
103.164.0.0/23
103.167.157.0/24
103.171.8.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.180.216.0/23
103.192.72.0/22
103.199.92.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.236.112.0/22
103.242.236.0/22
103.254.200.0/22
137.59.204.0/22
139.5.36.0/22
139.5.96.0/22
203.191.56.0/22
220.158.140.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
51:4f:ba:a8:0a:29:e2:b2:3c:aa:02:b0:b5:1b:e1:65:d8:97:
68:e3:e6:d5:ec:30:25:4c:2c:68:54:c9:bf:6f:f0:ba:4c:2a:
74:0a:a2:7c:a5:2c:87:61:44:13:c6:53:e7:9f:e1:eb:58:1a:
25:eb:8f:d5:63:dd:b9:f1:b0:31:11:e4:df:b4:4c:4b:9a:86:
02:f1:2b:fb:67:c9:85:76:d1:02:04:6b:17:77:35:80:75:55:
ee:9e:cd:e2:b8:91:0c:0f:7d:e2:8d:53:16:e7:6f:69:46:8f:
e2:5d:c2:d2:0b:d5:a3:35:ef:4a:4c:9a:68:b5:1f:e2:ff:ae:
a7:03:fa:70:0f:0c:13:e8:5c:32:6f:af:b6:d5:2e:e6:6b:36:
40:aa:34:49:c4:92:1f:5a:d1:a4:49:b3:c8:08:ef:b1:07:ff:
39:33:60:22:a8:e5:21:32:e7:dc:a5:98:9f:13:03:78:d6:af:
f6:57:5a:72:2d:c6:53:91:de:24:33:52:b8:ba:7e:ca:4e:8d:
2e:96:47:2b:74:b8:af:8a:a6:d0:5b:b7:6d:82:63:82:ce:6d:
cc:29:5c:85:61:b8:d8:be:97:3c:85:0f:b8:c2:f0:69:ca:45:
77:4f:19:92:f9:63:9c:56:e9:c2:af:51:de:1d:cf:9c:0f:6d:
d2:b2:0f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:28:17 2025 by rpki-client