Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B74F6B1A145E11F0863C824EC4F9AE02.roa
File: B74F6B1A145E11F0863C824EC4F9AE02.roa (raw, json)
Hash identifier: O8B8GdJBVnmYUbyOIDZpvYxySi/DzFSaGXjq62y7rfw=
Subject key identifier: 8A:25:8B:A9:52:01:85:25:44:DB:0F:F9:1F:BD:69:5F:07:61:69:2B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: ADDC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B74F6B1A145E11F0863C824EC4F9AE02.roa
Signing time: Tue 08 Apr 2025 09:49:09 +0000
ROA not before: Tue 08 Apr 2025 09:49:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132296
IP address blocks: 43.248.68.0/24 maxlen: 24
43.248.69.0/24 maxlen: 24
43.248.70.0/24 maxlen: 24
43.248.71.0/24 maxlen: 24
45.119.12.0/24 maxlen: 24
45.119.13.0/24 maxlen: 24
45.119.14.0/24 maxlen: 24
45.119.15.0/24 maxlen: 24
103.57.252.0/24 maxlen: 24
103.57.253.0/24 maxlen: 24
103.57.254.0/24 maxlen: 24
103.57.255.0/24 maxlen: 24
103.116.169.0/24 maxlen: 24
103.148.138.0/23 maxlen: 24
103.171.126.0/23 maxlen: 24
103.177.129.0/24 maxlen: 24
103.181.147.0/24 maxlen: 24
103.204.164.0/24 maxlen: 24
103.204.166.0/24 maxlen: 24
103.255.36.0/24 maxlen: 24
103.255.37.0/24 maxlen: 24
103.255.38.0/24 maxlen: 24
103.255.39.0/24 maxlen: 24
2402:5c80::/32 maxlen: 32
2407:6fc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 08 Apr 2025 11:23:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44508 (0xaddc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 8 09:49:09 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f4f114-5cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c6:5c:a6:23:fa:8b:8d:f8:16:57:88:83:9b:
26:e5:22:0f:b7:2f:a0:b2:e3:0f:b6:d7:17:34:3d:
58:8b:c6:c6:a4:cb:c1:75:38:08:01:9e:89:23:09:
e4:6c:dd:fe:48:87:dd:eb:cd:1d:1f:aa:02:81:30:
c1:ed:bf:ab:9f:76:e1:b9:16:ce:fa:ff:b5:ce:31:
7d:2f:87:64:33:77:2e:38:68:e5:b5:ee:b6:70:bf:
4a:1b:62:ad:3c:43:a6:77:1a:a7:4d:88:80:c9:34:
7d:98:12:50:6a:75:e1:59:26:be:03:33:4b:aa:d6:
02:eb:fc:6e:13:1a:f3:c3:7e:5f:07:0b:e3:b3:38:
cf:eb:ee:21:1b:24:9b:e0:75:e5:62:4c:33:33:d5:
e5:1a:31:7c:e4:db:f8:a9:85:1c:d7:5e:5d:5e:92:
02:8d:de:73:7f:c0:b2:24:c9:e9:4b:e3:88:86:b2:
b9:74:97:37:98:fc:42:95:25:ba:da:4c:62:f7:54:
f3:16:36:68:70:60:d2:08:2b:c5:69:87:8b:e3:f5:
b7:b4:fa:a0:91:69:6c:e0:96:21:bf:73:05:69:cc:
9a:c2:a4:5d:90:1c:34:31:f7:20:b8:c1:9d:1b:e4:
37:59:f8:0c:c3:80:55:b0:53:09:a7:6a:f2:7f:53:
d7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:25:8B:A9:52:01:85:25:44:DB:0F:F9:1F:BD:69:5F:07:61:69:2B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B74F6B1A145E11F0863C824EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.68.0/22
45.119.12.0/22
103.57.252.0/22
103.116.169.0/24
103.148.138.0/23
103.171.126.0/23
103.177.129.0/24
103.181.147.0/24
103.204.164.0/24
103.204.166.0/24
103.255.36.0/22
IPv6:
2402:5c80::/32
2407:6fc0::/32
Signature Algorithm: sha256WithRSAEncryption
75:db:81:18:6a:cc:c3:9d:a4:69:93:2b:9e:1d:2b:85:f4:f3:
49:6b:3e:d2:c1:2d:c7:cb:f2:0c:6e:e7:c7:77:4c:f8:99:b6:
c9:a8:4b:aa:da:3f:7a:7f:bb:6e:04:92:98:69:8f:12:33:d1:
4c:75:43:d1:77:5f:1f:70:30:4b:64:91:41:39:14:d3:ba:2d:
b2:91:14:66:bf:17:49:ce:4a:51:80:9e:e5:60:76:a8:44:79:
7c:4a:00:96:c1:ea:d3:a7:1b:10:8f:c0:a4:08:69:7d:3c:f5:
c1:cf:b0:d4:eb:01:e7:63:72:86:84:d3:b3:a8:00:3b:a1:a2:
ab:c5:8c:22:4c:cd:c3:83:a2:95:bb:05:1b:a0:6d:a0:cb:7f:
7d:f7:91:78:0b:92:28:6a:08:d3:41:53:ca:41:58:b5:2c:89:
f2:e8:e2:59:42:3d:9f:37:cd:fc:06:7b:26:54:6e:f5:bb:cb:
0f:5b:85:d1:ef:53:19:72:12:82:cb:bd:b4:85:0c:f3:88:b3:
4c:32:58:40:69:a4:08:d4:e5:1b:dc:51:0f:ad:09:82:bc:f7:
65:7a:de:ba:1e:99:4d:b1:5b:0d:46:e2:07:4a:d9:56:7e:a9:
0b:69:c9:95:0e:18:67:49:50:7a:0f:12:a5:f4:fe:5d:27:9d:
3c:a0:cd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:28:08 2025 by rpki-client