Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/FDF5B07EE0D411EEBE1D5525C4F9AE02.roa
File: FDF5B07EE0D411EEBE1D5525C4F9AE02.roa (raw, json)
Hash identifier: cDe1bTMKFdtQzO8fLaz6rkJQ0SeWQp0dIAWZ7SO/W5c=
Subject key identifier: 2C:BE:77:94:71:3E:3D:B1:34:52:CB:A6:14:21:0C:82:32:E7:DE:9F
Certificate issuer: /CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Certificate serial: 3522
Authority key identifier: AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/FDF5B07EE0D411EEBE1D5525C4F9AE02.roa
Signing time: Wed 13 Mar 2024 00:59:49 +0000
ROA not before: Wed 13 Mar 2024 00:59:49 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 3758
IP address blocks: 14.100.0.0/17 maxlen: 17
42.60.0.0/16 maxlen: 24
42.61.0.0/16 maxlen: 24
58.185.0.0/16 maxlen: 24
101.78.64.0/18 maxlen: 18
115.42.128.0/17 maxlen: 17
115.42.160.0/24 maxlen: 24
115.42.161.0/24 maxlen: 24
115.42.181.0/24 maxlen: 24
115.42.185.0/24 maxlen: 24
115.42.195.0/24 maxlen: 24
115.42.196.0/24 maxlen: 24
115.42.204.0/24 maxlen: 24
115.42.206.0/24 maxlen: 24
115.42.217.0/24 maxlen: 24
115.42.219.0/24 maxlen: 24
115.42.222.0/24 maxlen: 24
115.42.251.0/24 maxlen: 24
115.42.255.0/24 maxlen: 24
115.66.0.0/16 maxlen: 16
115.66.0.0/17 maxlen: 17
115.66.128.0/17 maxlen: 17
116.12.128.0/17 maxlen: 17
116.12.137.0/24 maxlen: 24
116.12.138.0/24 maxlen: 24
116.12.147.0/24 maxlen: 24
116.12.154.0/24 maxlen: 24
116.12.156.0/24 maxlen: 24
116.12.205.0/24 maxlen: 24
116.12.206.0/24 maxlen: 24
116.12.213.0/24 maxlen: 24
116.12.214.0/24 maxlen: 24
116.12.226.0/24 maxlen: 24
116.12.229.0/24 maxlen: 24
116.12.234.0/24 maxlen: 24
116.12.235.0/24 maxlen: 24
116.12.238.0/24 maxlen: 24
116.12.243.0/24 maxlen: 24
116.14.0.0/15 maxlen: 15
116.14.0.0/16 maxlen: 16
116.14.0.0/17 maxlen: 17
116.14.64.0/21 maxlen: 21
116.14.128.0/17 maxlen: 17
116.15.0.0/16 maxlen: 16
116.15.40.0/21 maxlen: 21
116.15.96.0/22 maxlen: 22
116.15.108.0/23 maxlen: 23
116.15.112.0/21 maxlen: 21
116.15.136.0/22 maxlen: 22
118.200.0.0/16 maxlen: 24
118.201.0.0/17 maxlen: 24
118.201.128.0/18 maxlen: 24
118.201.192.0/18 maxlen: 18
118.201.192.0/19 maxlen: 24
118.201.224.0/19 maxlen: 24
119.73.128.0/17 maxlen: 17
119.73.130.0/24 maxlen: 24
119.73.145.0/24 maxlen: 24
119.73.148.0/24 maxlen: 24
119.73.162.0/24 maxlen: 24
119.73.191.0/24 maxlen: 24
119.73.197.0/24 maxlen: 24
119.73.201.0/24 maxlen: 24
119.73.226.0/24 maxlen: 24
119.73.242.0/24 maxlen: 24
119.73.246.0/24 maxlen: 24
119.73.251.0/24 maxlen: 24
119.73.253.0/24 maxlen: 24
119.74.0.0/16 maxlen: 16
119.74.16.0/22 maxlen: 22
119.74.74.0/23 maxlen: 23
119.75.0.0/18 maxlen: 18
119.75.19.0/24 maxlen: 24
119.75.33.0/24 maxlen: 24
119.75.36.0/24 maxlen: 24
119.75.41.0/24 maxlen: 24
119.75.48.0/24 maxlen: 24
119.75.53.0/24 maxlen: 24
119.75.57.0/24 maxlen: 24
121.6.0.0/16 maxlen: 24
121.7.0.0/16 maxlen: 24
124.66.128.0/19 maxlen: 19
124.66.133.0/24 maxlen: 24
124.66.150.0/24 maxlen: 24
124.66.156.0/24 maxlen: 24
124.66.157.0/24 maxlen: 24
124.66.158.0/24 maxlen: 24
124.66.159.0/24 maxlen: 24
180.255.0.0/18 maxlen: 24
180.255.64.0/18 maxlen: 18
203.125.0.0/16 maxlen: 24
203.126.0.0/16 maxlen: 24
203.127.0.0/16 maxlen: 24
203.169.64.0/18 maxlen: 18
219.74.0.0/16 maxlen: 16
219.74.211.0/24 maxlen: 24
219.75.0.0/17 maxlen: 17
219.75.24.0/24 maxlen: 24
219.75.32.0/24 maxlen: 24
219.75.94.0/23 maxlen: 23
220.255.0.0/22 maxlen: 22
220.255.0.0/24 maxlen: 24
220.255.1.0/24 maxlen: 24
220.255.2.0/24 maxlen: 24
220.255.3.0/24 maxlen: 24
220.255.4.0/22 maxlen: 22
220.255.4.0/24 maxlen: 24
220.255.5.0/24 maxlen: 24
220.255.6.0/24 maxlen: 24
220.255.7.0/24 maxlen: 24
220.255.8.0/21 maxlen: 21
220.255.11.0/24 maxlen: 24
220.255.12.0/24 maxlen: 24
220.255.13.0/24 maxlen: 24
220.255.14.0/24 maxlen: 24
220.255.15.0/24 maxlen: 24
220.255.16.0/20 maxlen: 20
220.255.32.0/19 maxlen: 19
220.255.64.0/18 maxlen: 18
220.255.128.0/17 maxlen: 17
220.255.175.0/24 maxlen: 24
220.255.206.0/23 maxlen: 23
220.255.221.0/24 maxlen: 24
2001:c20::/32 maxlen: 32
2001:c20::/38 maxlen: 38
2001:c20:10::/48 maxlen: 48
2001:c20:18::/48 maxlen: 48
2001:c20:400::/38 maxlen: 38
2001:c20:401::/48 maxlen: 48
2001:c20:403::/48 maxlen: 48
2001:c20:801::/48 maxlen: 48
2001:c20:2006::/48 maxlen: 48
2001:c20:2007::/48 maxlen: 48
2001:c20:2010::/48 maxlen: 48
2001:c20:3001::/48 maxlen: 48
2001:c20:3c00::/38 maxlen: 38
2001:c20:4800::/38 maxlen: 38
2001:c20:4805::/48 maxlen: 48
2001:c20:48ba::/48 maxlen: 48
2001:c20:48da::/48 maxlen: 48
2001:c20:48fe::/48 maxlen: 48
2001:c20:4c00::/38 maxlen: 38
2001:c20:5000::/38 maxlen: 38
2001:c20:5008::/48 maxlen: 48
2001:c20:6c00::/38 maxlen: 38
2001:c20:7009::/48 maxlen: 48
2001:c20:7800::/38 maxlen: 38
2001:c20:7804::/48 maxlen: 48
2001:c20:7806::/48 maxlen: 48
2001:c20:7807::/48 maxlen: 48
2001:c20:8400::/38 maxlen: 38
2001:c20:8405::/48 maxlen: 48
2001:c20:8406::/48 maxlen: 48
2001:c20:8407::/48 maxlen: 48
2001:c20:8408::/48 maxlen: 48
2001:c20:8409::/48 maxlen: 48
2001:c20:a005::/48 maxlen: 48
2001:c20:b005::/48 maxlen: 48
2001:c20:c814::/48 maxlen: 48
2001:c20:d004::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 Apr 2024 00:53:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13602 (0x3522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915F89C/serialNumber=AF8F0CFB47FBFCC7C4933C473CDB36442B5051CE
Validity
Not Before: Mar 13 00:59:49 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65f0fa85-dcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:06:b2:e3:79:fe:71:b0:51:2d:f7:35:31:
d6:48:bb:b1:0c:df:1f:b0:4b:a7:ad:8a:9f:2e:97:
a5:16:1e:e0:1c:13:4c:2f:fd:7c:ce:33:8f:ee:77:
a7:cc:54:9f:9e:0d:80:5a:8d:2f:da:07:f1:2f:91:
84:27:d1:8b:7b:0a:81:01:ad:22:0d:00:23:da:23:
2f:5d:63:07:b6:81:4d:9d:fb:70:5a:15:25:66:c9:
36:1b:3a:ee:af:1d:6a:ca:d2:87:2b:53:b5:6d:5d:
28:be:03:58:8b:45:5b:7c:46:52:a6:42:d7:80:49:
17:ad:87:96:7e:05:d3:cc:01:1f:9c:cc:61:24:73:
bb:de:60:df:bb:ff:33:0c:bd:23:e3:2a:6f:24:a5:
bf:7a:bc:94:6a:1a:6f:84:4b:53:76:b5:86:0b:aa:
ef:be:98:71:00:d1:40:b1:d9:6a:ac:b4:77:7e:bf:
88:ac:91:f9:46:0e:06:f1:85:cc:ac:52:28:5b:9a:
a2:c7:22:c6:9a:df:f7:9b:81:35:d0:05:dc:d7:c2:
2d:47:6e:52:cc:cd:98:2d:ad:bf:66:db:a0:e4:88:
9f:b7:be:4c:1e:b5:a1:f0:ce:cb:95:ca:b8:c7:ef:
9a:a9:3c:8a:de:7d:f6:b7:31:f6:d2:a6:c4:c8:25:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BE:77:94:71:3E:3D:B1:34:52:CB:A6:14:21:0C:82:32:E7:DE:9F
X509v3 Authority Key Identifier:
keyid:AF:8F:0C:FB:47:FB:FC:C7:C4:93:3C:47:3C:DB:36:44:2B:50:51:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/r48M-0f7_MfEkzxHPNs2RCtQUc4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r48M-0f7_MfEkzxHPNs2RCtQUc4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/6907C3E21D8311E29B35A5D808B02CD2/FDF5B07EE0D411EEBE1D5525C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.100.0.0/17
42.60.0.0/15
58.185.0.0/16
101.78.64.0/18
115.42.128.0/17
115.66.0.0/16
116.12.128.0/17
116.14.0.0/15
118.200.0.0/15
119.73.128.0-119.75.63.255
121.6.0.0/15
124.66.128.0/19
180.255.0.0/17
203.125.0.0-203.127.255.255
203.169.64.0/18
219.74.0.0-219.75.127.255
220.255.0.0/16
IPv6:
2001:c20::/32
Signature Algorithm: sha256WithRSAEncryption
91:c1:32:33:d8:d1:7a:e4:18:5a:6c:62:ba:0d:d7:49:09:64:
c7:19:15:5b:52:2c:d6:7f:9d:7d:e9:31:a6:6b:23:92:d5:35:
26:0b:47:eb:7a:a0:45:e8:a0:1e:e1:8f:60:13:d1:6c:8c:3b:
76:2a:e9:22:90:f6:0b:82:12:8c:14:8b:26:03:86:52:54:8f:
8a:cb:40:51:22:67:08:48:90:35:17:21:b2:12:96:66:78:c5:
1b:65:d1:93:3f:43:54:eb:6a:fd:5f:7e:2c:b6:be:14:91:ed:
c0:a4:b7:3f:e2:7c:05:c6:f6:70:e4:ef:22:05:62:a4:10:44:
46:76:54:8e:1c:ed:9a:0c:39:ba:71:e6:e4:0f:98:bd:4f:c4:
12:00:41:d3:eb:c6:ec:8b:a6:f2:08:b1:39:a4:d4:0a:f5:ba:
ab:31:30:bd:dd:ef:d9:b0:5f:b9:8c:34:fa:be:67:32:86:7c:
9e:7d:84:db:13:60:f7:16:5f:91:62:6a:f5:39:88:b7:0a:77:
cc:00:a1:e4:0f:9a:3d:e0:b0:ac:85:0b:c1:47:c9:ff:ac:93:
a4:4e:4a:ae:40:c0:f2:fe:0a:a8:83:ee:96:99:b1:bc:36:cf:
dd:47:06:1f:1f:de:0d:79:a1:2e:52:46:79:b0:ec:cb:47:6b:
1b:7b:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-ams.rpki-client.org