Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CF3417C4E92C11EF9193AA55C4F9AE02.roa
File: CF3417C4E92C11EF9193AA55C4F9AE02.roa (raw, json)
Hash identifier: 2Y/s03s3Pn6yWOX+kewRECkEKuCTSUisOtQpPPgnNRs=
Subject key identifier: C5:C9:80:95:4F:D5:9F:92:5F:38:39:4E:AF:20:CC:58:D0:9F:21:9C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A5E6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CF3417C4E92C11EF9193AA55C4F9AE02.roa
Signing time: Wed 12 Feb 2025 10:33:34 +0000
ROA not before: Wed 12 Feb 2025 10:33:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.109.0/24 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.228.0/23 maxlen: 24
103.158.180.0/24 maxlen: 24
103.159.137.0/24 maxlen: 24
103.167.157.0/24 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.242.236.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Feb 2025 11:54:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42470 (0xa5e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 12 10:33:33 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67ac78fd-c131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8f:e8:95:a8:11:a8:1b:dc:85:97:88:f5:da:
0b:8d:4f:c8:a5:4b:66:f0:61:c6:97:66:40:7b:be:
ca:11:c3:3d:35:1f:a5:3a:4a:3f:9e:c0:98:0e:a1:
ad:4f:0d:89:17:3d:da:56:62:1f:a1:ab:b1:f5:52:
fd:32:b0:a0:00:6d:9b:ef:7d:28:d3:2f:4c:b9:0b:
a8:0f:3e:cc:d8:ac:dc:70:3a:6b:f1:26:ab:86:c5:
93:49:3e:34:6a:9d:13:6f:7c:c2:8d:02:29:88:8e:
11:a2:93:52:ee:a7:51:5e:87:74:90:8f:5e:87:bf:
a0:95:38:3e:5e:93:5c:e8:81:d8:48:52:37:ff:88:
16:07:9a:a2:f4:09:f6:c1:2f:50:01:56:84:65:8b:
33:33:40:5d:4a:61:14:dc:56:df:a7:57:17:0f:bf:
40:de:5a:ae:55:b9:9f:b9:f6:75:89:5c:56:18:3d:
9c:60:63:23:bf:d8:33:47:7e:40:d5:b8:a7:42:4e:
79:50:ec:e0:64:a1:66:8b:88:01:d3:6e:fd:e1:93:
dd:b4:8c:3d:b2:7e:f7:ed:0b:99:ff:a3:a1:7d:b6:
29:ad:8c:93:0e:d2:49:62:d6:b3:e9:27:68:7e:b2:
11:f8:bb:22:82:dd:d1:f2:12:f6:15:03:45:9d:56:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C9:80:95:4F:D5:9F:92:5F:38:39:4E:AF:20:CC:58:D0:9F:21:9C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CF3417C4E92C11EF9193AA55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.143.109.0/24
103.143.215.0/24
103.144.112.0/23
103.153.208.0/23
103.154.26.0/24
103.155.194.0/23
103.157.228.0/23
103.158.180.0/24
103.159.137.0/24
103.167.157.0/24
103.169.58.0/23
103.171.8.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.175.106.0/23
103.180.216.0/23
103.192.72.0/22
103.199.92.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.236.112.0/22
103.242.236.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
220.158.140.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
3f:d0:e9:2c:60:d2:b7:88:18:be:1b:04:bb:40:96:34:7c:f5:
7c:68:60:0e:e5:20:9d:99:48:2a:6c:6c:1a:d4:ce:c8:15:cd:
fa:8c:ef:74:66:33:f0:0b:ca:45:5d:4d:b4:1d:91:12:f1:db:
2b:7d:34:ff:9a:da:7e:35:0e:ee:9d:4e:1c:7c:66:80:05:48:
a8:ec:e2:e3:ec:06:7b:c3:c5:2c:67:86:84:00:ee:63:3b:bc:
fb:98:c6:6b:d9:7a:a2:7a:8d:ac:e5:32:e3:ae:93:4c:98:50:
fc:f5:af:71:1f:49:9c:5c:4c:ff:4d:3d:dd:55:2b:bf:c9:06:
0e:1e:ef:55:9b:d5:2f:7f:f3:59:06:97:b9:67:61:63:02:70:
a0:79:7a:b6:b0:31:d9:66:e3:4e:08:e1:5b:d3:73:dc:dc:d7:
48:7b:7e:da:a9:78:3f:4e:75:f6:37:77:43:f1:7d:c4:da:e1:
e6:9c:26:fb:0c:68:73:a6:86:eb:f6:22:5a:f3:a7:11:32:34:
4a:c0:9d:c6:6c:85:6b:df:b4:ec:dc:82:b7:38:e2:d0:97:87:
ae:8e:02:11:ac:12:bc:f3:91:2d:82:b8:9d:d8:76:a5:03:b0:
c3:4e:bf:59:64:6a:35:ab:ea:7f:3b:3b:b3:27:14:72:ea:c6:
82:f4:2d:59
-----BEGIN CERTIFICATE-----
MIIHAzCCBeugAwIBAgIDAKXmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDIxMjEwMzMzM1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjdhYzc4ZmQtYzEzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOOP6JWoEagb3IWXiPXaC41PyKVLZvBhxpdmQHu+yhHDPTUfpTpKP57AmA6h
rU8NiRc92lZiH6GrsfVS/TKwoABtm+99KNMvTLkLqA8+zNis3HA6a/Emq4bFk0k+
NGqdE298wo0CKYiOEaKTUu6nUV6HdJCPXoe/oJU4Pl6TXOiB2EhSN/+IFgeaovQJ
9sEvUAFWhGWLMzNAXUphFNxW36dXFw+/QN5arlW5n7n2dYlcVhg9nGBjI7/YM0d+
QNW4p0JOeVDs4GShZouIAdNu/eGT3bSMPbJ+9+0Lmf+joX22Ka2Mkw7SSWLWs+kn
aH6yEfi7IoLd0fIS9hUDRZ1WcC8CAwEAAaOCBCYwggQiMB0GA1UdDgQWBBTFyYCV
T9Wfkl84OU6vIMxY0J8hnDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NGMzQxN0M0
RTkyQzExRUY5MTkzQUE1NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBrgYIKwYBBQUHAQcB
Af8EggGdMIIBmTCCAXAEAgABMIIBaAMEAivhAAMEAivlyAMEAivndAMEAivvcAME
Ai1ynAMEAmcOxAMEAmcQjAMEAGcaqQMEAGcbqAMEAWcbqgMEAmcpKAMEAGcvmAME
AmczXAMEAmc0MAMEAmc2YAMEAmc3VAMEAmdSkAMEAmdWFAMEAmdYfAMEAmdsTAME
AmdvgAMEAmd2CAMEAGeEywMEAGeFdAMEAWeLWAMEAWeOQAMEAGePbQMEAGeP1wME
AWeQcAMEAWeZ0AMEAGeaGgMEAWebwgMEAWed5AMEAGeetAMEAGefiQMEAGennQME
AWepOgMEAWerCAMEAWer7AMEAWetDgMEAGetKQMEAWeuKgMEAWevagMEAWe02AME
AmfASAMEAmfHXAMEAmfIMAMEAmfOQAMEAmfUhAMEAWfgMgMEAmfi4AMEAmfkrAME
AmfkuAMEAmfscAMEAmfy7AMEAmf+yAMEAok7zAMEAosFYAMEAsu/OAMEAtyejDAj
BAIAAjAdMBIDBwEkANGAAGYDBwEkANGAAGgDBwEkANGAAHAwDQYJKoZIhvcNAQEL
BQADggEBAD/Q6Sxg0reIGL4bBLtAljR89XxoYA7lIJ2ZSCpsbBrUzsgVzfqM73Rm
M/ALykVdTbQdkRLx2yt9NP+a2n41Du6dThx8ZoAFSKjs4uPsBnvDxSxnhoQA7mM7
vPuYxmvZeqJ6jazlMuOuk0yYUPz1r3EfSZxcTP9NPd1VK7/JBg4e71Wb1S9/81kG
l7lnYWMCcKB5erawMdlm404I4VvTc9zc10h7ftqpeD9OdfY3d0PxfcTa4eacJvsM
aHOmhuv2IlrzpxEyNErAncZshWvftOzcgrc44tCXh66OAhGsErzzkS2CuJ3YdqUD
sMNOv1lkajWr6n87O7MnFHLqxoL0LVk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:54:44 2025 by rpki-client