Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F426BEBED88411EFBA9C0D72C4F9AE02.roa
File: F426BEBED88411EFBA9C0D72C4F9AE02.roa (raw, json)
Hash identifier: NQbxT6zH13CzG/rgmyt1BfJ1zKHfR6SF/q8ny5hV9Lk=
Subject key identifier: F5:E7:FE:AB:E3:A2:B8:AE:DA:D0:6B:02:F4:25:5D:04:06:D2:7D:BD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A34C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F426BEBED88411EFBA9C0D72C4F9AE02.roa
Signing time: Wed 22 Jan 2025 05:51:41 +0000
ROA not before: Wed 22 Jan 2025 05:51:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133661
IP address blocks: 45.248.156.0/22 maxlen: 24
45.248.160.0/22 maxlen: 24
101.0.32.0/22 maxlen: 24
101.0.37.0/24 maxlen: 24
101.0.38.0/24 maxlen: 24
101.0.41.0/24 maxlen: 24
101.0.42.0/24 maxlen: 24
101.0.45.0/24 maxlen: 24
101.0.49.0/24 maxlen: 24
101.0.50.0/24 maxlen: 24
101.0.53.0/24 maxlen: 24
101.0.54.0/23 maxlen: 24
101.0.57.0/24 maxlen: 24
103.40.196.0/22 maxlen: 24
103.41.20.0/22 maxlen: 24
103.41.24.0/22 maxlen: 24
103.41.36.0/22 maxlen: 24
103.66.204.0/22 maxlen: 24
103.66.208.0/22 maxlen: 24
103.72.168.0/22 maxlen: 24
103.72.220.0/22 maxlen: 24
103.73.148.0/24 maxlen: 24
103.73.149.0/24 maxlen: 24
103.73.150.0/24 maxlen: 24
103.110.248.0/24 maxlen: 24
103.110.249.0/24 maxlen: 24
103.110.250.0/24 maxlen: 24
103.110.251.0/24 maxlen: 24
103.114.64.0/24 maxlen: 24
103.114.65.0/24 maxlen: 24
103.114.66.0/24 maxlen: 24
103.114.67.0/24 maxlen: 24
103.142.198.0/24 maxlen: 24
103.165.72.0/23 maxlen: 24
103.165.76.0/23 maxlen: 23
103.165.76.0/24 maxlen: 24
103.166.214.0/23 maxlen: 23
103.166.215.0/24 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.212.0/23 maxlen: 24
103.168.0.0/23 maxlen: 24
103.168.22.0/24 maxlen: 24
103.168.32.0/23 maxlen: 23
103.168.33.0/24 maxlen: 24
103.169.242.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.174.92.0/23 maxlen: 24
103.178.64.0/23 maxlen: 24
103.178.202.0/23 maxlen: 23
103.178.203.0/24 maxlen: 24
103.179.10.0/23 maxlen: 24
103.179.100.0/23 maxlen: 24
103.179.102.0/23 maxlen: 24
103.179.120.0/23 maxlen: 23
103.179.120.0/24 maxlen: 24
103.179.224.0/23 maxlen: 23
103.179.224.0/24 maxlen: 24
103.179.226.0/23 maxlen: 23
103.179.226.0/24 maxlen: 24
103.180.168.0/23 maxlen: 23
103.180.168.0/24 maxlen: 24
103.180.174.0/23 maxlen: 23
103.180.174.0/24 maxlen: 24
103.180.212.0/23 maxlen: 24
103.180.214.0/23 maxlen: 24
103.180.238.0/23 maxlen: 24
103.181.56.0/23 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.150.0/23 maxlen: 23
103.181.151.0/24 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.154.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.183.30.0/23 maxlen: 24
103.183.32.0/23 maxlen: 24
103.183.34.0/23 maxlen: 24
103.183.216.0/23 maxlen: 24
103.187.84.0/23 maxlen: 24
103.187.96.0/23 maxlen: 24
103.187.102.0/23 maxlen: 24
103.187.130.0/23 maxlen: 24
103.187.158.0/23 maxlen: 24
103.187.170.0/23 maxlen: 24
103.217.116.0/22 maxlen: 24
103.217.120.0/22 maxlen: 24
103.223.8.0/22 maxlen: 24
103.223.12.0/22 maxlen: 24
114.134.24.0/22 maxlen: 24
163.47.212.0/22 maxlen: 24
175.176.184.0/22 maxlen: 24
180.188.224.0/24 maxlen: 24
180.188.232.0/24 maxlen: 24
180.188.236.0/23 maxlen: 24
180.188.241.0/24 maxlen: 24
180.188.242.0/23 maxlen: 24
180.188.246.0/23 maxlen: 24
180.188.248.0/24 maxlen: 24
180.188.249.0/24 maxlen: 24
180.188.250.0/24 maxlen: 24
180.188.251.0/24 maxlen: 24
180.188.252.0/22 maxlen: 24
202.14.120.0/22 maxlen: 24
203.76.178.0/24 maxlen: 24
203.76.180.0/24 maxlen: 24
203.76.181.0/24 maxlen: 24
203.76.188.0/24 maxlen: 24
203.76.190.0/24 maxlen: 24
203.76.191.0/24 maxlen: 24
203.115.68.0/24 maxlen: 24
203.115.73.0/24 maxlen: 24
203.115.84.0/23 maxlen: 24
203.115.91.0/24 maxlen: 24
210.89.39.0/24 maxlen: 24
210.89.58.0/23 maxlen: 24
210.89.61.0/24 maxlen: 24
210.89.62.0/23 maxlen: 24
223.130.28.0/22 maxlen: 24
2001:df0:e400::/48 maxlen: 48
2001:df2:e200::/48 maxlen: 48
2001:df2:e600::/48 maxlen: 48
2400:7b20::/32 maxlen: 32
2401:a880::/32 maxlen: 48
2404:7c80::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Jan 2025 06:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41804 (0xa34c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 22 05:51:41 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6790876d-40c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:72:03:6e:24:9b:1d:cf:c9:0d:da:45:eb:
22:e7:6d:7a:5e:17:13:97:2c:37:89:25:62:f4:55:
7c:50:29:92:6e:7a:e9:2a:a9:10:03:5d:80:cf:a7:
79:dd:22:7e:8c:18:f7:76:5f:61:36:63:83:b3:46:
3e:c8:51:fa:ed:d5:24:29:d9:ee:16:fe:5c:c5:5b:
0b:f3:7e:d3:23:2e:c3:16:9b:ef:f8:5d:ac:f4:ed:
ad:79:99:58:68:47:a6:2c:55:f0:eb:0a:60:9b:9b:
01:8c:01:f4:6c:9e:f1:e3:a2:58:40:9a:27:14:82:
c7:12:5d:a0:b8:6b:5d:82:29:ec:fd:aa:04:84:59:
19:fd:cc:e0:c2:ca:c4:57:09:dd:8c:55:e9:ab:97:
00:bd:6e:d3:5b:54:dd:12:62:bc:a2:f4:41:1d:28:
12:a2:9e:58:8c:17:11:44:46:07:e3:6b:0a:1b:56:
46:6d:b4:c1:e8:59:45:75:60:69:b4:85:a6:5d:2e:
ef:6d:c0:3e:3c:70:0d:86:14:da:01:b5:69:d7:5f:
b2:af:9e:83:eb:56:f5:9e:98:ed:4a:10:ee:8f:78:
34:46:f9:a5:57:3c:59:34:79:c5:f0:dd:cc:cc:b2:
05:ff:25:6a:76:65:ad:36:6e:f4:cb:ae:51:eb:0c:
9d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E7:FE:AB:E3:A2:B8:AE:DA:D0:6B:02:F4:25:5D:04:06:D2:7D:BD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F426BEBED88411EFBA9C0D72C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.156.0-45.248.163.255
101.0.32.0/22
101.0.37.0-101.0.38.255
101.0.41.0-101.0.42.255
101.0.45.0/24
101.0.49.0-101.0.50.255
101.0.53.0-101.0.55.255
101.0.57.0/24
103.40.196.0/22
103.41.20.0-103.41.27.255
103.41.36.0/22
103.66.204.0-103.66.211.255
103.72.168.0/22
103.72.220.0/22
103.73.148.0-103.73.150.255
103.110.248.0/22
103.114.64.0/22
103.142.198.0/24
103.165.72.0/23
103.165.76.0/23
103.166.214.0/23
103.167.154.0/23
103.167.182.0/23
103.167.212.0/23
103.168.0.0/23
103.168.22.0/24
103.168.32.0/23
103.169.242.0/23
103.170.36.0/23
103.174.92.0/23
103.178.64.0/23
103.178.202.0/23
103.179.10.0/23
103.179.100.0/22
103.179.120.0/23
103.179.224.0/22
103.180.168.0/23
103.180.174.0/23
103.180.212.0/22
103.180.238.0/23
103.181.56.0/23
103.181.110.0/23
103.181.150.0-103.181.155.255
103.181.174.0/23
103.183.30.0-103.183.35.255
103.183.216.0/23
103.187.84.0/23
103.187.96.0/23
103.187.102.0/23
103.187.130.0/23
103.187.158.0/23
103.187.170.0/23
103.217.116.0-103.217.123.255
103.223.8.0/21
114.134.24.0/22
163.47.212.0/22
175.176.184.0/22
180.188.224.0/24
180.188.232.0/24
180.188.236.0/23
180.188.241.0-180.188.243.255
180.188.246.0-180.188.255.255
202.14.120.0/22
203.76.178.0/24
203.76.180.0/23
203.76.188.0/24
203.76.190.0/23
203.115.68.0/24
203.115.73.0/24
203.115.84.0/23
203.115.91.0/24
210.89.39.0/24
210.89.58.0/23
210.89.61.0-210.89.63.255
223.130.28.0/22
IPv6:
2001:df0:e400::/48
2001:df2:e200::/48
2001:df2:e600::/48
2400:7b20::/32
2401:a880::/32
2404:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
54:df:6e:f2:a6:fd:54:b5:12:70:83:f8:d3:e4:ef:95:95:cd:
dc:88:77:6e:05:51:41:d7:c6:4f:02:ee:93:ee:3a:b3:67:7d:
ff:8e:fb:87:64:f6:25:cd:25:cd:4d:4f:05:35:5f:73:89:d6:
e3:60:79:52:04:c7:4a:3c:4e:9f:9f:e8:09:2f:15:42:e8:fd:
54:a5:a6:9c:ab:7c:6d:83:85:dd:8c:c6:88:cf:de:aa:9e:15:
61:bc:8b:13:c4:04:a3:7d:83:51:fb:2c:48:41:d6:bc:b6:6c:
54:d9:d6:34:8b:b2:35:42:4b:39:d5:d7:42:02:88:dd:7f:17:
69:64:be:09:cd:54:c1:12:63:c5:c3:b0:0c:9d:0f:9c:eb:81:
f8:b2:53:a7:a4:30:ee:03:60:59:6d:5c:1b:33:eb:0a:ab:f1:
29:1a:83:0f:06:e8:49:71:1b:a6:8c:f5:1b:f0:ab:57:01:ce:
47:fa:7e:98:f8:e4:b5:0d:36:6c:ad:39:0a:c1:8d:4d:6d:63:
8c:7e:f2:97:05:98:52:e1:40:a1:e2:db:69:d6:33:d0:fd:c6:
58:43:25:d4:0c:17:f6:8f:e9:83:dc:0e:4d:ce:02:01:67:44:
86:84:d2:15:8b:c2:55:7c:5e:1d:b4:d5:0f:b6:18:f8:18:6b:
04:19:d2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:26:51 2025 by rpki-client