Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/153CC8B6EDF511EFA3A41A14C4F9AE02.roa
File: 153CC8B6EDF511EFA3A41A14C4F9AE02.roa (raw, json)
Hash identifier: Z9lyHvNHU36Kn5MKwbQIaVkN1kBMP7uqSQT/7Sn/IQM=
Subject key identifier: FB:FC:92:88:E9:98:EE:25:26:CE:FC:96:AB:5C:D9:BA:37:82:B2:5C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A67B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/153CC8B6EDF511EFA3A41A14C4F9AE02.roa
Signing time: Tue 18 Feb 2025 12:37:15 +0000
ROA not before: Tue 18 Feb 2025 12:37:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134022
IP address blocks: 45.115.184.0/24 maxlen: 24
45.115.185.0/24 maxlen: 24
45.115.186.0/24 maxlen: 24
45.115.187.0/24 maxlen: 24
103.44.48.0/22 maxlen: 24
103.66.212.0/22 maxlen: 24
103.121.240.0/24 maxlen: 24
103.121.241.0/24 maxlen: 24
103.121.242.0/24 maxlen: 24
103.121.243.0/24 maxlen: 24
103.131.93.0/24 maxlen: 24
103.169.246.0/23 maxlen: 24
103.182.140.0/24 maxlen: 24
103.182.141.0/24 maxlen: 24
2404:d9c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 26 Mar 2025 06:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42619 (0xa67b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 18 12:37:15 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67b47efb-998d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c5:60:04:f9:41:83:b6:43:78:21:14:a6:64:
89:20:62:bc:49:93:78:2a:df:4c:e6:32:60:d5:1e:
bf:c8:ed:28:36:c4:ca:dc:e1:44:5e:68:af:d0:22:
ac:09:14:5f:35:1b:36:2c:00:d9:5a:b1:e5:bb:7a:
65:54:5d:a0:45:db:2e:c2:65:85:f0:be:27:8f:48:
84:d7:73:dc:9e:b2:ca:45:96:c0:35:cf:1a:9b:83:
4d:dd:a3:0a:46:03:1d:76:27:89:f4:80:9d:3d:d7:
9e:9f:8f:82:16:39:92:7f:85:ad:8c:48:0e:06:25:
bc:5e:98:9a:99:7e:76:33:6b:1f:d9:72:4f:57:0c:
70:9e:a4:ba:6b:dd:69:b7:84:5f:96:19:45:c2:f2:
fd:59:84:28:ca:db:a8:ed:b6:26:df:22:f9:d8:53:
36:89:f6:ad:e4:99:8c:c7:4d:1b:07:3a:0a:2a:cc:
da:b0:18:e3:0c:af:e7:aa:a8:13:db:6e:0a:5b:39:
9f:30:5d:f0:9a:0e:98:c5:97:09:ed:e4:c9:a8:11:
40:ff:59:45:28:bd:91:30:ad:07:ad:e4:ba:a1:31:
d3:56:15:29:cb:f4:4c:e4:84:05:b3:fd:6c:93:a1:
4d:b4:75:cb:5c:53:4b:a0:2a:83:cd:01:ed:64:ea:
f3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FC:92:88:E9:98:EE:25:26:CE:FC:96:AB:5C:D9:BA:37:82:B2:5C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/153CC8B6EDF511EFA3A41A14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.184.0/22
103.44.48.0/22
103.66.212.0/22
103.121.240.0/22
103.131.93.0/24
103.169.246.0/23
103.182.140.0/23
IPv6:
2404:d9c0::/32
Signature Algorithm: sha256WithRSAEncryption
18:db:3d:3f:63:ea:c7:08:12:a7:f1:49:0e:21:0b:73:a2:b1:
8f:04:dc:7a:c2:df:87:af:47:90:c2:64:14:b5:0c:9f:37:d9:
83:a3:1c:e4:f7:df:0f:b6:5c:03:50:9d:5a:d1:68:f7:70:11:
f3:71:cd:d6:03:ad:e3:4c:21:28:ee:09:a8:11:ce:b4:44:79:
c6:50:ba:ac:32:c9:5d:b5:69:12:fc:26:bd:6f:c1:63:b7:0f:
dd:4d:92:bb:a1:2d:d8:77:34:f1:31:db:b4:6f:59:b0:92:0b:
11:6e:53:bb:bd:bd:e7:ac:87:cd:ca:76:6b:d0:3e:aa:34:c9:
44:6d:3f:6a:2a:c2:00:7e:e3:ff:e1:fc:fa:90:6d:56:8f:a8:
8b:b7:20:d9:5d:ff:9f:67:a2:81:1f:63:b3:e4:3e:f3:bf:fb:
f3:c0:9d:53:a2:ff:6a:c5:13:c8:d6:e0:33:81:94:9d:25:38:
34:1d:9e:49:62:41:bb:f1:44:d7:86:a2:74:1c:61:33:0f:a3:
04:e4:00:7e:34:a5:c5:cc:c8:2a:b7:e8:92:15:57:75:39:fa:
a6:11:bf:93:38:58:15:07:8c:2d:ea:4c:1b:fa:03:cc:6d:ec:
9d:f8:9d:23:91:a6:ac:6a:25:8b:d6:34:fd:19:0c:e0:5c:f3:
40:a4:97:d6
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgIDAKZ7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDIxODEyMzcxNVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjdiNDdlZmItOTk4ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPHFYAT5QYO2Q3ghFKZkiSBivEmTeCrfTOYyYNUev8jtKDbEytzhRF5or9Ai
rAkUXzUbNiwA2Vqx5bt6ZVRdoEXbLsJlhfC+J49IhNdz3J6yykWWwDXPGpuDTd2j
CkYDHXYnifSAnT3Xnp+PghY5kn+FrYxIDgYlvF6Ympl+djNrH9lyT1cMcJ6kumvd
abeEX5YZRcLy/VmEKMrbqO22Jt8i+dhTNon2reSZjMdNGwc6CirM2rAY4wyv56qo
E9tuCls5nzBd8JoOmMWXCe3kyagRQP9ZRSi9kTCtB63kuqEx01YVKcv0TOSEBbP9
bJOhTbR1y1xTS6Aqg80B7WTq8z8CAwEAAaOCAsgwggLEMB0GA1UdDgQWBBT7/JKI
6ZjuJSbO/JarXNm6N4KyXDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE1M0NDOEI2
RURGNTExRUZBM0E0MUExNEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFIGCCsGAQUFBwEHAQH/
BEMwQTAwBAIAATAqAwQCLXO4AwQCZywwAwQCZ0LUAwQCZ3nwAwQAZ4NdAwQBZ6n2
AwQBZ7aMMA0EAgACMAcDBQAkBNnAMA0GCSqGSIb3DQEBCwUAA4IBAQAY2z0/Y+rH
CBKn8UkOIQtzorGPBNx6wt+Hr0eQwmQUtQyfN9mDoxzk998PtlwDUJ1a0Wj3cBHz
cc3WA63jTCEo7gmoEc60RHnGULqsMsldtWkS/Ca9b8Fjtw/dTZK7oS3YdzTxMdu0
b1mwkgsRblO7vb3nrIfNynZr0D6qNMlEbT9qKsIAfuP/4fz6kG1Wj6iLtyDZXf+f
Z6KBH2Oz5D7zv/vzwJ1Tov9qxRPI1uAzgZSdJTg0HZ5JYkG78UTXhqJ0HGEzD6ME
5AB+NKXFzMgqt+iSFVd1OfqmEb+TOFgVB4wt6kwb+gPMbeyd+J0jkaasaiWL1jT9
GQzgXPNApJfW
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:54:04 2025 by rpki-client