Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/235A0F4A86CF11EFB927ED10C4F9AE02.roa
File: 235A0F4A86CF11EFB927ED10C4F9AE02.roa (raw, json)
Hash identifier: 8v2uQURJXRseOLemc5q22XWdr+Nbu2VW9K8Wb3hQLx8=
Subject key identifier: 66:D8:76:CA:FC:0A:AB:4A:A8:32:09:14:40:10:9A:60:28:BF:D8:36
Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial: 27B3
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/235A0F4A86CF11EFB927ED10C4F9AE02.roa
Signing time: Tue 28 Jan 2025 01:25:41 +0000
ROA not before: Tue 28 Jan 2025 01:25:41 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 23930
IP address blocks: 43.243.126.0/24 maxlen: 24
43.243.127.0/24 maxlen: 24
103.38.214.0/24 maxlen: 24
103.38.215.0/24 maxlen: 24
116.93.0.0/23 maxlen: 23
116.93.1.0/24 maxlen: 24
116.93.4.0/23 maxlen: 23
116.93.4.0/24 maxlen: 24
116.93.5.0/24 maxlen: 24
116.93.7.0/24 maxlen: 24
116.93.8.0/23 maxlen: 23
116.93.8.0/24 maxlen: 24
116.93.9.0/24 maxlen: 24
116.93.10.0/23 maxlen: 23
116.93.10.0/24 maxlen: 24
116.93.11.0/24 maxlen: 24
116.93.12.0/23 maxlen: 23
116.93.12.0/24 maxlen: 24
116.93.13.0/24 maxlen: 24
116.93.15.0/24 maxlen: 24
116.93.16.0/23 maxlen: 23
116.93.17.0/24 maxlen: 24
116.93.18.0/23 maxlen: 23
116.93.18.0/24 maxlen: 24
116.93.20.0/24 maxlen: 24
116.93.21.0/24 maxlen: 24
116.93.22.0/23 maxlen: 23
116.93.23.0/24 maxlen: 24
116.93.24.0/22 maxlen: 22
116.93.24.0/23 maxlen: 23
116.93.24.0/24 maxlen: 24
116.93.25.0/24 maxlen: 24
116.93.26.0/23 maxlen: 23
116.93.26.0/24 maxlen: 24
116.93.27.0/24 maxlen: 24
116.93.28.0/23 maxlen: 23
116.93.28.0/24 maxlen: 24
116.93.29.0/24 maxlen: 24
116.93.30.0/23 maxlen: 23
116.93.30.0/24 maxlen: 24
116.93.31.0/24 maxlen: 24
116.93.32.0/23 maxlen: 23
116.93.32.0/24 maxlen: 24
116.93.33.0/24 maxlen: 24
116.93.34.0/23 maxlen: 23
116.93.34.0/24 maxlen: 24
116.93.36.0/23 maxlen: 23
116.93.36.0/24 maxlen: 24
116.93.37.0/24 maxlen: 24
116.93.38.0/23 maxlen: 23
116.93.38.0/24 maxlen: 24
116.93.39.0/24 maxlen: 24
116.93.40.0/24 maxlen: 24
116.93.41.0/24 maxlen: 24
116.93.42.0/24 maxlen: 24
116.93.43.0/24 maxlen: 24
116.93.44.0/24 maxlen: 24
116.93.45.0/24 maxlen: 24
116.93.46.0/23 maxlen: 23
116.93.47.0/24 maxlen: 24
116.93.48.0/23 maxlen: 23
116.93.49.0/24 maxlen: 24
116.93.50.0/23 maxlen: 23
116.93.51.0/24 maxlen: 24
116.93.52.0/24 maxlen: 24
116.93.54.0/23 maxlen: 23
116.93.54.0/24 maxlen: 24
116.93.61.0/24 maxlen: 24
116.93.62.0/24 maxlen: 24
116.93.63.0/24 maxlen: 24
116.93.64.0/24 maxlen: 24
116.93.65.0/24 maxlen: 24
116.93.66.0/24 maxlen: 24
116.93.67.0/24 maxlen: 24
116.93.71.0/24 maxlen: 24
116.93.74.0/24 maxlen: 24
116.93.75.0/24 maxlen: 24
116.93.78.0/24 maxlen: 24
116.93.79.0/24 maxlen: 24
116.93.80.0/23 maxlen: 23
116.93.80.0/24 maxlen: 24
116.93.85.0/24 maxlen: 24
116.93.87.0/24 maxlen: 24
116.93.88.0/24 maxlen: 24
116.93.90.0/24 maxlen: 24
116.93.91.0/24 maxlen: 24
116.93.93.0/24 maxlen: 24
116.93.96.0/24 maxlen: 24
116.93.97.0/24 maxlen: 24
116.93.100.0/24 maxlen: 24
116.93.102.0/24 maxlen: 24
116.93.105.0/24 maxlen: 24
116.93.106.0/24 maxlen: 24
116.93.107.0/24 maxlen: 24
116.93.108.0/24 maxlen: 24
116.93.109.0/24 maxlen: 24
116.93.110.0/24 maxlen: 24
116.93.111.0/24 maxlen: 24
116.93.112.0/24 maxlen: 24
116.93.114.0/24 maxlen: 24
116.93.115.0/24 maxlen: 24
116.93.117.0/24 maxlen: 24
116.93.118.0/24 maxlen: 24
116.93.119.0/24 maxlen: 24
116.93.120.0/24 maxlen: 24
116.93.121.0/24 maxlen: 24
116.93.122.0/24 maxlen: 24
116.93.124.0/24 maxlen: 24
116.93.126.0/24 maxlen: 24
116.93.127.0/24 maxlen: 24
121.127.6.0/24 maxlen: 24
121.127.7.0/24 maxlen: 24
121.127.8.0/24 maxlen: 24
121.127.9.0/24 maxlen: 24
121.127.10.0/24 maxlen: 24
121.127.11.0/24 maxlen: 24
121.127.12.0/23 maxlen: 23
121.127.12.0/24 maxlen: 24
121.127.13.0/24 maxlen: 24
121.127.14.0/23 maxlen: 23
121.127.14.0/24 maxlen: 24
121.127.15.0/24 maxlen: 24
121.127.16.0/24 maxlen: 24
121.127.17.0/24 maxlen: 24
121.127.18.0/24 maxlen: 24
121.127.20.0/23 maxlen: 23
121.127.20.0/24 maxlen: 24
121.127.21.0/24 maxlen: 24
121.127.22.0/23 maxlen: 23
121.127.22.0/24 maxlen: 24
121.127.23.0/24 maxlen: 24
121.127.26.0/23 maxlen: 23
121.127.26.0/24 maxlen: 24
121.127.27.0/24 maxlen: 24
121.127.28.0/23 maxlen: 23
121.127.28.0/24 maxlen: 24
121.127.29.0/24 maxlen: 24
121.127.30.0/23 maxlen: 23
121.127.30.0/24 maxlen: 24
121.127.31.0/24 maxlen: 24
203.99.232.0/21 maxlen: 21
203.99.232.0/23 maxlen: 23
203.99.232.0/24 maxlen: 24
203.99.233.0/24 maxlen: 24
203.99.234.0/24 maxlen: 24
203.99.235.0/24 maxlen: 24
203.99.236.0/24 maxlen: 24
203.99.237.0/24 maxlen: 24
203.99.238.0/23 maxlen: 23
203.99.238.0/24 maxlen: 24
203.99.239.0/24 maxlen: 24
203.208.24.0/21 maxlen: 21
203.208.24.0/23 maxlen: 23
203.208.24.0/24 maxlen: 24
203.208.25.0/24 maxlen: 24
203.208.26.0/24 maxlen: 24
203.208.27.0/24 maxlen: 24
203.208.28.0/24 maxlen: 24
203.208.29.0/24 maxlen: 24
203.208.30.0/24 maxlen: 24
2401:9800::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10163 (0x27b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145446
Validity
Not Before: Jan 28 01:25:41 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67983214-61f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1b:0b:68:8f:98:b5:e2:b1:31:1c:91:29:df:
54:f7:0c:69:e9:7c:ac:80:2e:51:53:64:5e:06:69:
7f:54:2c:2c:5d:20:13:95:d9:6b:51:57:64:24:59:
60:d5:1a:2f:40:13:f4:0c:57:a7:c6:78:18:62:4e:
19:e4:e6:96:d6:6e:c0:51:bb:3f:7b:dc:77:7f:c3:
fa:8a:c2:a3:a6:bc:f1:f5:67:5d:31:f3:d0:89:70:
be:05:16:75:d2:45:49:b0:29:11:70:5a:f0:c1:ed:
58:ab:13:55:35:c7:e0:12:ee:7a:ba:d5:1f:ad:18:
a4:2f:4d:60:78:36:a9:36:35:ce:33:cc:d6:73:e0:
08:67:34:90:0b:a1:c2:27:45:21:a3:b3:35:98:37:
ba:a4:e4:4f:d2:d6:7a:8f:6d:13:92:f4:fe:05:cb:
c5:10:a4:d2:90:fd:b4:9d:50:50:f8:14:00:b2:78:
54:05:f3:c9:51:72:7f:5d:5f:73:68:3e:62:b6:15:
a1:7d:ef:82:b1:9f:0f:88:16:6f:31:b0:a3:3b:70:
9a:9e:44:01:37:44:31:f1:71:97:f0:76:01:14:c0:
d4:2b:1e:11:52:36:99:31:74:fc:23:fd:25:96:38:
16:98:04:73:0f:e8:ad:0e:ab:0e:34:30:9d:4d:36:
83:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:D8:76:CA:FC:0A:AB:4A:A8:32:09:14:40:10:9A:60:28:BF:D8:36
X509v3 Authority Key Identifier:
keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/235A0F4A86CF11EFB927ED10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.126.0/23
103.38.214.0/23
116.93.0.0/23
116.93.4.0/23
116.93.7.0-116.93.13.255
116.93.15.0-116.93.52.255
116.93.54.0/23
116.93.61.0-116.93.67.255
116.93.71.0/24
116.93.74.0/23
116.93.78.0-116.93.81.255
116.93.85.0/24
116.93.87.0-116.93.88.255
116.93.90.0/23
116.93.93.0/24
116.93.96.0/23
116.93.100.0/24
116.93.102.0/24
116.93.105.0-116.93.112.255
116.93.114.0/23
116.93.117.0-116.93.122.255
116.93.124.0/24
116.93.126.0/23
121.127.6.0-121.127.18.255
121.127.20.0/22
121.127.26.0-121.127.31.255
203.99.232.0/21
203.208.24.0/21
IPv6:
2401:9800::/32
Signature Algorithm: sha256WithRSAEncryption
47:59:f3:b3:8f:7f:8b:9e:61:18:8e:60:ee:74:52:70:12:5e:
9a:19:5b:aa:81:84:bc:70:00:b9:f3:86:f0:90:55:8e:75:72:
1b:b0:68:dd:c1:47:63:66:a6:f1:f9:4e:9d:49:33:2b:cc:25:
fb:86:36:8e:4e:c9:10:a1:29:06:bd:5f:30:cb:5d:e5:7a:a7:
9f:74:6a:74:4c:ec:df:dc:8b:5d:54:8f:02:a1:e6:48:07:11:
4e:e0:43:e2:20:42:c2:d2:09:e8:50:e8:64:43:46:bd:06:4a:
9b:55:eb:86:18:88:50:bd:f7:6b:7f:a0:dd:35:f1:86:8a:3f:
59:5d:6b:39:4f:d3:d3:3d:f5:35:46:c0:19:29:71:a2:6e:2f:
a9:59:ae:9f:14:97:67:94:10:52:04:fa:f7:76:b6:2c:8a:01:
e8:53:0f:f8:cb:94:8f:0f:da:9d:4f:b6:a7:22:ea:9d:60:86:
ef:e1:dd:78:c9:76:c0:d7:86:bf:67:61:ea:fe:3c:88:d5:39:
6d:ee:05:4f:98:43:74:8e:d9:40:13:8d:f7:39:e3:43:f6:ec:
5f:1b:68:fc:dd:e2:aa:7c:9c:b9:5e:6a:e1:36:85:a5:83:80:
22:e4:75:05:0b:10:38:dd:c8:8d:9d:47:43:6f:d5:73:58:38:
f7:ca:61:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:32:17 2025 by rpki-client