Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5502984146B11F0AA714D87C4F9AE02.roa
File: E5502984146B11F0AA714D87C4F9AE02.roa (raw, json)
Hash identifier: atgZRBkzN3gAXhMfR05Zv+RSgaNJxsNv1s1ZVQQUmfE=
Subject key identifier: F1:81:22:D6:D0:2A:1A:27:C8:39:64:AD:DB:D5:39:E7:A5:77:3D:B6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AE49
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5502984146B11F0AA714D87C4F9AE02.roa
Signing time: Fri 11 Apr 2025 11:58:00 +0000
ROA not before: Fri 11 Apr 2025 11:58:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132296
IP address blocks: 43.248.68.0/24 maxlen: 24
43.248.69.0/24 maxlen: 24
43.248.70.0/24 maxlen: 24
43.248.71.0/24 maxlen: 24
45.119.12.0/24 maxlen: 24
45.119.13.0/24 maxlen: 24
45.119.14.0/24 maxlen: 24
45.119.15.0/24 maxlen: 24
103.57.252.0/24 maxlen: 24
103.57.253.0/24 maxlen: 24
103.57.254.0/24 maxlen: 24
103.57.255.0/24 maxlen: 24
103.116.169.0/24 maxlen: 24
103.148.138.0/23 maxlen: 24
103.157.230.0/23 maxlen: 24
103.171.126.0/23 maxlen: 24
103.174.26.0/23 maxlen: 24
103.177.129.0/24 maxlen: 24
103.181.147.0/24 maxlen: 24
103.204.166.0/24 maxlen: 24
103.255.36.0/24 maxlen: 24
103.255.37.0/24 maxlen: 24
103.255.38.0/24 maxlen: 24
103.255.39.0/24 maxlen: 24
2402:5c80::/32 maxlen: 32
2407:6fc0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 16 Apr 2025 11:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44617 (0xae49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 11 11:58:00 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67f903c8-ba7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:66:e5:34:d5:05:1a:22:fb:cd:31:01:ee:
b3:2d:f8:6d:7b:48:2b:a7:ca:85:29:c7:69:66:56:
60:98:f4:9a:93:6d:7c:45:98:df:d3:51:17:f3:6e:
06:8e:9c:08:e5:42:af:88:7b:b3:f5:45:33:4d:6b:
2b:d4:c1:be:ff:ad:0d:4e:c2:19:ad:00:fc:41:48:
45:22:54:32:7a:d2:61:12:46:df:f6:3c:55:18:aa:
96:a8:2f:1c:30:ff:25:42:7c:52:b4:99:0d:40:a8:
62:f6:f0:7f:b4:71:0d:70:1c:f8:e9:02:20:f2:bb:
d3:5c:8d:cc:70:f0:b2:8a:d5:5c:cd:bc:a6:13:b6:
8c:96:82:75:61:ac:95:f2:81:d4:4f:0d:68:2b:af:
45:82:f4:4d:93:cf:2d:b9:07:c2:e7:8a:0c:28:2d:
55:78:91:53:95:48:35:56:04:bb:8b:7b:19:28:75:
03:2d:f9:fb:89:ff:66:49:9d:5f:96:22:ae:a1:80:
3e:59:82:69:9d:a4:58:47:0b:2d:05:b2:6f:e5:bd:
de:d8:b5:ba:73:0d:e4:f1:db:52:61:22:5e:74:9b:
b7:79:e8:f2:5d:30:66:3a:4e:40:b2:b2:d6:c5:0a:
93:5d:85:cd:2f:4c:da:2f:e9:c2:45:c7:73:64:76:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:81:22:D6:D0:2A:1A:27:C8:39:64:AD:DB:D5:39:E7:A5:77:3D:B6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E5502984146B11F0AA714D87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.68.0/22
45.119.12.0/22
103.57.252.0/22
103.116.169.0/24
103.148.138.0/23
103.157.230.0/23
103.171.126.0/23
103.174.26.0/23
103.177.129.0/24
103.181.147.0/24
103.204.166.0/24
103.255.36.0/22
IPv6:
2402:5c80::/32
2407:6fc0::/32
Signature Algorithm: sha256WithRSAEncryption
aa:9a:d1:4a:f4:be:4a:fb:57:ee:b9:5e:71:05:1c:75:8e:86:
eb:e9:07:ca:a8:2a:5d:35:6e:88:0b:fb:b6:e3:e9:32:33:f3:
8a:0b:d0:4f:5f:b6:87:28:65:17:53:f5:02:a2:97:86:08:74:
fb:45:1c:7e:58:fd:94:13:68:af:02:dc:e2:48:f9:cc:04:11:
cf:22:8a:fe:f5:eb:fe:31:58:1a:fb:d0:29:d7:ec:2a:d7:31:
3e:ae:99:06:c5:4e:d7:59:85:19:39:1c:a7:be:71:67:cc:37:
7b:75:57:4d:97:dc:21:c1:c9:d2:2e:53:98:dc:36:8a:6d:17:
b6:d5:66:63:f3:06:df:2a:28:99:43:bc:3b:48:c0:da:9f:be:
f9:45:07:38:2c:23:6d:3c:6f:d9:f9:20:35:f3:c1:df:ec:a9:
61:9e:18:56:0a:61:61:aa:ee:5d:4a:8a:2c:d5:be:e9:5f:d1:
9f:91:b4:11:e4:d0:19:b3:d8:94:e9:e2:57:9f:c7:2d:d9:f3:
6d:d9:f0:9a:a4:4b:fa:2e:78:14:10:cb:70:93:41:fb:e2:bc:
65:ba:de:d7:f2:32:81:32:a1:50:33:60:f1:04:a9:81:70:9c:
da:c9:bc:f9:2f:c6:9e:00:3f:f8:26:d2:ca:42:ac:4a:ea:e3:
5d:a6:3a:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:10:59 2025 by rpki-client