Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11448B28FD8A11EF8D4C4271C4F9AE02.roa
File: 11448B28FD8A11EF8D4C4271C4F9AE02.roa (raw, json)
Hash identifier: aYoJdWxuxze9YywNB9QrwimvKLyLeFndetDOhW/64VA=
Subject key identifier: 5C:E6:85:81:8F:49:D5:3A:89:26:17:97:38:09:12:D6:9A:3A:DD:1B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AAD4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11448B28FD8A11EF8D4C4271C4F9AE02.roa
Signing time: Wed 12 Mar 2025 12:04:20 +0000
ROA not before: Wed 12 Mar 2025 12:04:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17665
IP address blocks: 36.255.88.0/22 maxlen: 24
43.230.40.0/22 maxlen: 24
45.117.72.0/22 maxlen: 24
45.118.104.0/22 maxlen: 24
59.152.120.0/22 maxlen: 24
103.10.224.0/22 maxlen: 24
103.27.48.0/22 maxlen: 24
103.38.68.0/23 maxlen: 24
103.38.128.0/22 maxlen: 24
103.57.140.0/22 maxlen: 24
103.58.152.0/22 maxlen: 24
103.59.204.0/22 maxlen: 24
103.86.68.0/23 maxlen: 24
103.88.57.0/24 maxlen: 24
103.88.58.0/24 maxlen: 24
103.88.59.0/24 maxlen: 24
103.92.112.0/24 maxlen: 24
103.92.113.0/24 maxlen: 24
103.92.114.0/24 maxlen: 24
103.92.115.0/24 maxlen: 24
103.98.36.0/24 maxlen: 24
103.98.37.0/24 maxlen: 24
103.99.196.0/23 maxlen: 24
103.99.198.0/23 maxlen: 24
103.115.129.0/24 maxlen: 24
103.115.130.0/24 maxlen: 24
103.135.64.0/24 maxlen: 24
103.135.65.0/24 maxlen: 24
103.136.172.0/22 maxlen: 24
103.142.114.0/23 maxlen: 24
103.144.188.0/23 maxlen: 24
103.147.1.0/24 maxlen: 24
103.158.170.0/23 maxlen: 24
103.159.98.0/24 maxlen: 24
103.159.212.0/24 maxlen: 24
103.161.40.0/23 maxlen: 24
103.162.74.0/23 maxlen: 24
103.164.46.0/23 maxlen: 24
103.165.28.0/23 maxlen: 24
103.168.177.0/24 maxlen: 24
103.168.232.0/23 maxlen: 24
103.169.156.0/23 maxlen: 24
103.171.9.0/24 maxlen: 24
103.174.159.0/24 maxlen: 24
103.175.30.0/24 maxlen: 24
103.175.31.0/24 maxlen: 24
103.176.176.0/24 maxlen: 24
103.176.194.0/23 maxlen: 24
103.177.174.0/23 maxlen: 24
103.178.74.0/24 maxlen: 24
103.178.168.0/23 maxlen: 24
103.179.122.0/24 maxlen: 24
103.182.130.0/23 maxlen: 24
103.184.40.0/24 maxlen: 24
103.184.41.0/24 maxlen: 24
103.186.121.0/24 maxlen: 24
103.186.176.0/24 maxlen: 24
103.199.192.0/22 maxlen: 24
103.203.36.0/22 maxlen: 24
103.206.8.0/24 maxlen: 24
103.206.9.0/24 maxlen: 24
103.206.10.0/24 maxlen: 24
103.206.11.0/24 maxlen: 24
103.209.68.0/22 maxlen: 22
103.209.68.0/24 maxlen: 24
103.209.69.0/24 maxlen: 24
103.209.70.0/24 maxlen: 24
103.209.71.0/24 maxlen: 24
103.215.164.0/22 maxlen: 24
103.244.224.0/24 maxlen: 24
103.245.103.0/24 maxlen: 24
103.251.52.0/22 maxlen: 24
111.223.24.0/22 maxlen: 24
157.119.44.0/22 maxlen: 24
162.12.246.0/23 maxlen: 24
202.148.60.0/22 maxlen: 24
203.189.248.0/22 maxlen: 24
203.192.192.0/20 maxlen: 24
203.192.208.0/22 maxlen: 24
203.192.212.0/24 maxlen: 24
203.192.213.0/24 maxlen: 24
203.192.214.0/24 maxlen: 24
203.192.215.0/24 maxlen: 24
203.192.216.0/24 maxlen: 24
203.192.217.0/24 maxlen: 24
203.192.218.0/24 maxlen: 24
203.192.219.0/24 maxlen: 24
203.192.220.0/22 maxlen: 24
203.192.224.0/23 maxlen: 24
203.192.226.0/24 maxlen: 24
203.192.227.0/24 maxlen: 24
203.192.228.0/22 maxlen: 24
203.192.232.0/22 maxlen: 24
203.192.236.0/24 maxlen: 24
203.192.237.0/24 maxlen: 24
203.192.238.0/23 maxlen: 24
203.192.240.0/20 maxlen: 20
203.192.240.0/24 maxlen: 24
203.192.241.0/24 maxlen: 24
203.192.242.0/24 maxlen: 24
203.192.243.0/24 maxlen: 24
203.192.244.0/24 maxlen: 24
203.192.245.0/24 maxlen: 24
203.192.246.0/24 maxlen: 24
203.192.247.0/24 maxlen: 24
203.192.248.0/24 maxlen: 24
203.192.249.0/24 maxlen: 24
203.192.250.0/24 maxlen: 24
203.192.251.0/24 maxlen: 24
203.192.252.0/24 maxlen: 24
203.192.253.0/24 maxlen: 24
203.192.254.0/24 maxlen: 24
203.192.255.0/24 maxlen: 24
203.194.96.0/24 maxlen: 24
203.194.97.0/24 maxlen: 24
203.194.98.0/24 maxlen: 24
203.194.99.0/24 maxlen: 24
203.194.100.0/24 maxlen: 24
203.194.101.0/24 maxlen: 24
203.194.102.0/24 maxlen: 24
203.194.103.0/24 maxlen: 24
203.194.104.0/24 maxlen: 24
203.194.105.0/24 maxlen: 24
203.194.106.0/24 maxlen: 24
203.194.107.0/24 maxlen: 24
203.194.108.0/24 maxlen: 24
203.194.109.0/24 maxlen: 24
203.194.110.0/24 maxlen: 24
203.194.111.0/24 maxlen: 24
2001:df1:9980::/48 maxlen: 48
2001:df1:9980:1::/64 maxlen: 64
2001:df1:9980:2::/64 maxlen: 64
2001:df1:9980:3::/64 maxlen: 64
2001:df1:9980:4::/64 maxlen: 64
2001:df1:9980:5::/64 maxlen: 64
2001:df2:4c0::/48 maxlen: 48
2404:ba00::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Mar 2025 05:56:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43732 (0xaad4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 12 12:04:20 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67d17844-de6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3f:e3:47:06:47:0b:4f:e8:44:c9:e5:32:ca:
c5:73:5a:b1:eb:05:9c:38:0b:b2:e0:7a:38:48:7f:
3d:30:56:62:57:08:4a:65:fc:f8:52:10:17:96:bc:
8e:2b:51:93:d5:4d:b3:79:80:a5:8e:57:03:42:b0:
cd:88:b3:c7:c8:4e:58:6b:b4:b6:7d:d8:c4:d3:6b:
8e:1a:53:c1:6b:d9:13:12:94:78:fd:e7:5d:95:be:
61:23:92:f9:79:22:2f:e8:80:0e:d1:63:f5:31:82:
35:49:9c:1e:b8:68:b8:b9:a7:d0:69:96:7a:e2:fc:
03:04:2b:aa:3c:f9:4e:70:52:18:80:f3:45:ae:ec:
e5:c0:6e:60:10:13:37:2b:e5:0f:93:1d:34:a5:81:
d9:f2:8e:2e:1a:6d:26:c1:23:01:44:c8:5f:15:10:
44:1c:fe:05:95:ae:65:4a:84:11:37:15:91:07:24:
0b:78:9a:e7:92:6a:68:34:cb:a8:91:9d:72:a4:e5:
7d:05:4b:34:e5:3d:bd:ec:09:71:a8:75:b0:43:f6:
13:ae:8f:ba:6d:d9:43:d4:0c:d2:ba:fb:b6:6b:44:
2a:3c:3b:c1:5b:6a:f5:12:e5:c8:6a:c4:81:a7:b7:
be:7b:ca:ba:ae:8b:fd:1e:bf:0a:2b:57:d6:93:3f:
d3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E6:85:81:8F:49:D5:3A:89:26:17:97:38:09:12:D6:9A:3A:DD:1B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11448B28FD8A11EF8D4C4271C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.88.0/22
43.230.40.0/22
45.117.72.0/22
45.118.104.0/22
59.152.120.0/22
103.10.224.0/22
103.27.48.0/22
103.38.68.0/23
103.38.128.0/22
103.57.140.0/22
103.58.152.0/22
103.59.204.0/22
103.86.68.0/23
103.88.57.0-103.88.59.255
103.92.112.0/22
103.98.36.0/23
103.99.196.0/22
103.115.129.0-103.115.130.255
103.135.64.0/23
103.136.172.0/22
103.142.114.0/23
103.144.188.0/23
103.147.1.0/24
103.158.170.0/23
103.159.98.0/24
103.159.212.0/24
103.161.40.0/23
103.162.74.0/23
103.164.46.0/23
103.165.28.0/23
103.168.177.0/24
103.168.232.0/23
103.169.156.0/23
103.171.9.0/24
103.174.159.0/24
103.175.30.0/23
103.176.176.0/24
103.176.194.0/23
103.177.174.0/23
103.178.74.0/24
103.178.168.0/23
103.179.122.0/24
103.182.130.0/23
103.184.40.0/23
103.186.121.0/24
103.186.176.0/24
103.199.192.0/22
103.203.36.0/22
103.206.8.0/22
103.209.68.0/22
103.215.164.0/22
103.244.224.0/24
103.245.103.0/24
103.251.52.0/22
111.223.24.0/22
157.119.44.0/22
162.12.246.0/23
202.148.60.0/22
203.189.248.0/22
203.192.192.0/18
203.194.96.0/20
IPv6:
2001:df1:9980::/48
2001:df2:4c0::/48
2404:ba00::/32
Signature Algorithm: sha256WithRSAEncryption
b1:f6:b7:8a:24:44:e8:6c:c3:04:c0:12:60:e5:60:6c:06:28:
6c:e7:d4:0c:e9:12:cc:e2:f4:f4:7d:7c:72:23:67:3e:34:9e:
cf:f3:1d:26:46:4e:20:f5:f1:fe:14:50:85:bf:59:74:5d:aa:
17:33:b9:80:37:13:3a:d5:2b:c7:4b:7c:d1:e1:c0:e4:d0:fb:
dd:d0:2a:23:95:5d:00:3c:8a:1e:89:c6:d6:65:1d:26:02:a9:
6f:c1:94:b6:9e:c4:55:ca:62:b9:ce:01:7d:ed:48:51:20:69:
6d:df:3e:8d:b2:bb:f5:00:ad:b7:96:7a:21:10:67:e9:be:53:
53:46:65:3f:0d:e2:f6:9b:71:37:d3:fa:6a:4b:c6:47:70:8a:
c2:b3:2c:d9:ad:41:17:53:6e:32:4e:74:72:8a:c8:61:e4:a2:
0e:fd:3e:c1:1e:99:72:8d:5f:84:f4:5f:55:2c:90:1f:ba:08:
e1:24:af:2d:39:6c:bd:cc:70:5f:55:c0:dd:d3:db:96:f7:28:
e5:96:5f:dc:92:56:14:49:f2:dc:bb:20:1d:cd:a9:84:44:31:
68:13:15:5e:7d:8b:33:ce:ce:74:66:1e:b8:03:d0:57:1e:61:
c2:b7:ea:09:eb:7b:24:be:1a:4f:df:31:14:9a:20:eb:99:86:
12:9e:8d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:44 2025 by rpki-client