Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/3E8B52A4C34F11EE8EFD7916C4F9AE02.roa
File: 3E8B52A4C34F11EE8EFD7916C4F9AE02.roa (raw, json)
Hash identifier: hIu2pfN0T4OIoceT9JdB6RQ38u3L1DjJaTYLb9pMkgc=
Subject key identifier: A7:2E:3A:50:28:28:42:68:4B:23:45:C3:EE:2F:2A:80:FF:96:57:FF
Certificate issuer: /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial: 34BA
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/3E8B52A4C34F11EE8EFD7916C4F9AE02.roa
Signing time: Fri 21 Mar 2025 04:16:24 +0000
ROA not before: Fri 21 Mar 2025 04:16:24 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 4741
IP address blocks: 203.149.0.0/18 maxlen: 18
203.149.0.0/19 maxlen: 19
203.149.0.0/20 maxlen: 20
203.149.0.0/22 maxlen: 22
203.149.0.0/24 maxlen: 24
203.149.6.0/24 maxlen: 24
203.149.8.0/24 maxlen: 24
203.149.10.0/24 maxlen: 24
203.149.16.0/20 maxlen: 20
203.149.20.0/24 maxlen: 24
203.149.21.0/24 maxlen: 24
203.149.29.0/24 maxlen: 24
203.149.31.0/24 maxlen: 24
203.149.32.0/19 maxlen: 19
203.149.32.0/24 maxlen: 24
203.149.37.0/24 maxlen: 24
203.149.38.0/24 maxlen: 24
203.149.44.0/24 maxlen: 24
203.149.45.0/24 maxlen: 24
203.149.46.0/23 maxlen: 23
203.149.48.0/20 maxlen: 20
203.149.62.0/24 maxlen: 24
210.246.64.0/18 maxlen: 18
210.246.64.0/19 maxlen: 19
210.246.64.0/20 maxlen: 20
210.246.80.0/20 maxlen: 20
210.246.96.0/19 maxlen: 19
210.246.96.0/20 maxlen: 20
210.246.112.0/20 maxlen: 20
210.246.128.0/17 maxlen: 17
210.246.128.0/18 maxlen: 18
210.246.128.0/20 maxlen: 20
210.246.144.0/20 maxlen: 20
210.246.150.0/24 maxlen: 24
210.246.151.0/24 maxlen: 24
210.246.152.0/24 maxlen: 24
210.246.154.0/24 maxlen: 24
210.246.155.0/24 maxlen: 24
210.246.176.0/20 maxlen: 20
210.246.176.0/21 maxlen: 21
210.246.184.0/21 maxlen: 21
210.246.192.0/18 maxlen: 18
210.246.192.0/20 maxlen: 20
210.246.206.0/24 maxlen: 24
210.246.207.0/24 maxlen: 24
210.246.208.0/24 maxlen: 24
210.246.209.0/24 maxlen: 24
210.246.210.0/24 maxlen: 24
210.246.211.0/24 maxlen: 24
210.246.212.0/24 maxlen: 24
210.246.213.0/24 maxlen: 24
210.246.214.0/24 maxlen: 24
210.246.218.0/24 maxlen: 24
210.246.219.0/24 maxlen: 24
210.246.253.0/24 maxlen: 24
2403:c000::/32 maxlen: 32
2403:c000:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Mar 2025 11:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13498 (0x34ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Validity
Not Before: Mar 21 04:16:24 2025 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=67dce817-b29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e4:d8:20:19:bb:61:e0:79:0b:ce:b0:e8:c8:
f2:d3:ff:14:cb:38:01:d6:68:e2:85:23:f5:4b:45:
7b:b6:40:6a:69:09:d4:79:ef:85:95:bc:9c:11:de:
03:74:38:a0:db:75:88:53:d9:6b:16:48:57:84:83:
af:6e:2a:b0:65:1c:97:2f:9d:51:d3:e4:ee:6a:f6:
54:94:07:d9:4a:14:8e:75:31:4b:d0:5e:77:92:03:
9b:29:3a:59:03:20:86:b1:54:b6:8e:3e:a8:b1:a4:
0d:fe:b0:21:3a:0f:8d:63:12:c3:42:f9:02:c9:4e:
55:30:4d:7b:ee:8f:32:c2:55:fb:64:1c:f8:cb:d6:
eb:7a:2c:98:42:97:3d:7e:9e:f8:fd:5a:0b:94:12:
bd:b2:6d:0c:77:1a:b9:62:8f:34:9c:c2:81:1b:9f:
72:11:e9:0c:dd:2b:1a:04:33:78:a1:c6:6c:d3:10:
6c:0d:cd:7c:84:f4:a0:95:54:0f:28:94:28:53:26:
90:a8:b8:54:17:b2:4a:3c:66:cb:25:57:02:23:b0:
1f:47:8e:fb:30:48:57:4f:36:e3:42:d0:11:b9:02:
fc:07:23:2c:3a:eb:54:05:30:69:f7:4c:34:bc:c2:
3c:6c:38:24:3b:02:0a:aa:82:3f:a7:ee:e9:81:11:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2E:3A:50:28:28:42:68:4B:23:45:C3:EE:2F:2A:80:FF:96:57:FF
X509v3 Authority Key Identifier:
keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/3E8B52A4C34F11EE8EFD7916C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.149.0.0/18
210.246.64.0-210.246.255.255
IPv6:
2403:c000::/32
Signature Algorithm: sha256WithRSAEncryption
33:80:1c:0b:4c:d4:9a:ac:b6:e0:6b:b0:1a:b4:04:c0:bc:05:
d5:ea:7b:64:f5:0e:3a:82:76:55:04:ec:77:25:06:75:7f:05:
89:04:5a:9e:6e:03:0f:cc:e5:ae:97:72:7f:cd:95:38:11:d9:
a2:26:ba:ad:48:1f:86:ec:f4:ac:d0:d2:8d:f9:6e:43:a4:8b:
90:a0:ba:e4:ba:67:55:81:ae:b3:18:86:6c:a0:9a:8d:43:e8:
b6:2f:f9:6f:e2:9c:f1:40:98:11:57:e6:63:5e:52:58:54:cb:
20:85:2a:14:6f:7d:bb:ef:94:7b:00:29:a1:24:9e:31:7a:aa:
46:31:8b:cf:f5:f1:d1:83:de:2d:9a:ef:12:e0:01:22:35:02:
a3:ec:f3:af:17:df:59:c6:66:36:ac:45:a1:7b:24:58:54:7a:
3e:8e:7f:16:15:f6:aa:a7:c5:8a:01:e5:f2:70:96:e4:ab:7f:
25:90:24:fa:7a:df:fd:db:58:27:b4:9a:af:61:ae:6e:76:e5:
79:18:b7:56:a1:6f:f0:59:78:24:9c:93:1f:a0:b5:48:4b:cb:
27:35:cd:5e:6d:2d:c7:23:26:13:6c:30:01:d5:f4:d4:bb:04:
b7:ba:0e:4f:38:9c:d8:96:c2:82:24:e3:1a:d8:46:49:f1:e5:
d1:87:d3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:00:36 2025 by rpki-client