Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1F166D360AD011F0BDF21F60C4F9AE02.roa
File: 1F166D360AD011F0BDF21F60C4F9AE02.roa (raw, json)
Hash identifier: dt4Mn4pUopw+8gDnhOpNok2bb7QELtxYbkeirlnosKI=
Subject key identifier: 23:49:26:62:EB:BC:0E:09:B7:D6:44:06:24:87:74:2C:51:0E:C3:AF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: ACF3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1F166D360AD011F0BDF21F60C4F9AE02.roa
Signing time: Thu 27 Mar 2025 05:55:44 +0000
ROA not before: Thu 27 Mar 2025 05:55:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.109.108.0/22 maxlen: 24
103.110.72.0/23 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.135.60.0/22 maxlen: 24
103.136.64.0/22 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.180.0/23 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.170.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.50.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.158.216.0/23 maxlen: 24
103.159.137.0/24 maxlen: 24
103.166.220.0/23 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
103.171.60.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.26.0/23 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.12.0/23 maxlen: 24
103.175.58.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.191.86.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.234.64.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44275 (0xacf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 27 05:55:44 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67e4e860-60e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a8:08:51:21:da:76:22:82:1c:fd:08:bf:c7:
cf:7d:f5:3e:a1:31:0b:f6:d9:4c:08:13:e9:11:75:
b3:90:29:ec:61:8e:53:cd:84:5d:fb:70:7f:9e:fb:
54:62:53:9b:88:7f:d5:33:b5:80:a5:b4:51:24:7b:
b1:26:10:04:2e:de:72:f5:67:16:81:bf:3f:25:93:
05:f6:ba:53:8a:cf:e8:f2:64:54:09:e4:74:c8:61:
62:d6:79:7a:8b:bd:2b:5b:0c:93:15:da:a3:1e:d5:
84:ea:76:34:ba:a5:dd:c2:60:06:ad:c4:ef:d8:b7:
cd:28:8c:2e:10:9b:14:10:e6:ba:f9:7c:73:c1:eb:
59:68:e1:f8:5c:03:cd:bc:fd:5f:fb:83:ea:5b:a3:
6e:dd:5a:bc:2e:6c:70:aa:16:90:d1:1c:9e:e4:15:
93:fe:c4:7a:c6:44:13:cf:94:f4:32:61:1b:0e:4a:
a8:be:bb:3b:85:7a:2d:fb:07:83:82:51:44:4f:b8:
63:f6:2b:a9:5f:12:44:8e:7a:d7:1d:20:a7:06:e9:
79:a4:d8:c3:7e:53:0a:bb:bf:0e:20:8d:fd:4e:0f:
8c:a0:ec:c9:0c:3f:1c:0e:6e:c0:61:4e:71:96:4a:
d6:06:3e:cd:86:e0:94:95:15:7f:17:c1:bd:31:9e:
a8:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:49:26:62:EB:BC:0E:09:B7:D6:44:06:24:87:74:2C:51:0E:C3:AF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1F166D360AD011F0BDF21F60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.14.196.0/22
103.16.140.0/22
103.108.76.0/22
103.109.108.0/22
103.110.72.0/23
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.135.60.0/22
103.136.64.0/22
103.139.88.0/23
103.142.64.0/23
103.143.180.0/23
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.170.0/23
103.155.194.0/23
103.157.50.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.158.216.0/23
103.159.137.0/24
103.166.220.0/23
103.169.58.0/23
103.171.8.0/23
103.171.54.0/23
103.171.60.0/23
103.171.236.0/23
103.173.41.0/24
103.174.26.0/23
103.174.42.0/23
103.175.12.0/23
103.175.58.0/23
103.175.106.0/23
103.176.142.0/24
103.180.216.0/23
103.190.12.0/23
103.191.86.0/23
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.234.64.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:54:6a:0b:48:af:f4:dc:86:17:ae:17:2e:f8:72:a9:ae:98:
ae:6d:d1:f7:a1:8c:5e:95:8b:7b:59:b0:3e:88:28:d2:0a:93:
5b:02:29:3c:44:72:8b:73:d0:0e:6a:18:93:10:44:f0:b9:95:
cf:b2:22:66:06:bf:f1:50:7c:72:d4:57:a2:e7:e4:75:3e:de:
0f:d6:d8:9a:67:ed:34:78:31:cd:7e:9b:af:e6:8b:ce:b7:07:
cb:39:50:fd:5a:ea:c4:cf:33:74:18:0e:c1:c2:76:6c:4b:ef:
62:e3:b1:50:d4:e4:96:81:d7:48:87:7b:ac:37:37:e1:c1:e1:
c4:6f:68:eb:66:19:54:53:fe:c7:71:60:31:5b:31:53:6a:f6:
7b:9c:af:87:ad:75:e7:24:d1:89:24:18:62:6c:41:95:22:55:
1d:fc:61:f6:ec:94:20:08:9a:01:80:c9:dc:88:f3:17:32:f9:
4f:6d:f2:63:8e:1e:99:bb:97:47:d3:54:ee:95:1c:3c:43:6c:
10:4e:e3:85:98:18:16:4a:2d:d3:87:a2:2b:af:10:b9:00:75:
41:8c:31:44:89:50:c4:cc:c0:26:5c:72:4f:a0:aa:f6:18:25:
a2:e1:f6:e1:e2:f6:5b:72:3f:89:af:25:bd:5a:d8:c5:a6:7e:
5a:40:8b:31
-----BEGIN CERTIFICATE-----
MIIGqDCCBZCgAwIBAgIDAKzzMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDMyNzA1NTU0NFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjdlNGU4NjAtNjBlMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL6oCFEh2nYighz9CL/Hz331PqExC/bZTAgT6RF1s5Ap7GGOU82EXftwf577
VGJTm4h/1TO1gKW0USR7sSYQBC7ecvVnFoG/PyWTBfa6U4rP6PJkVAnkdMhhYtZ5
eou9K1sMkxXaox7VhOp2NLql3cJgBq3E79i3zSiMLhCbFBDmuvl8c8HrWWjh+FwD
zbz9X/uD6lujbt1avC5scKoWkNEcnuQVk/7EesZEE8+U9DJhGw5KqL67O4V6LfsH
g4JRRE+4Y/YrqV8SRI561x0gpwbpeaTYw35TCru/DiCN/U4PjKDsyQw/HA5uwGFO
cZZK1gY+zYbglJUVfxfBvTGeqOkCAwEAAaOCA8swggPHMB0GA1UdDgQWBBQjSSZi
67wOCbfWRAYkh3QsUQ7DrzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFGMTY2RDM2
MEFEMDExRjBCREYyMUY2MEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBUwYIKwYBBQUHAQcB
Af8EggFCMIIBPjCCAToEAgABMIIBMgMEAmcOxAMEAmcQjAMEAmdsTAMEAmdtbAME
AWduSAMEAmdvgAMEAmd2CAMEAGeEywMEAGeFdAMEAmeHPAMEAmeIQAMEAWeLWAME
AWeOQAMEAWePtAMEAGeP1wMEAWeQcAMEAGeaGgMEAWebqgMEAWebwgMEAWedMgME
AGedRQMEAGeebwMEAGeetAMEAWee2AMEAGefiQMEAWem3AMEAWepOgMEAWerCAME
AWerNgMEAWerPAMEAWer7AMEAGetKQMEAWeuGgMEAWeuKgMEAWevDAMEAWevOgME
AWevagMEAGewjgMEAWe02AMEAWe+DAMEAWe/VgMEAmfASAMEAmfHXAMEAmfHkAME
AmfIMAMEAmfOQAMEAmfUhAMEAWfgMgMEAmfi4AMEAmfkrAMEAmfqQDANBgkqhkiG
9w0BAQsFAAOCAQEAHVRqC0iv9NyGF64XLvhyqa6Yrm3R96GMXpWLe1mwPogo0gqT
WwIpPERyi3PQDmoYkxBE8LmVz7IiZga/8VB8ctRXoufkdT7eD9bYmmftNHgxzX6b
r+aLzrcHyzlQ/VrqxM8zdBgOwcJ2bEvvYuOxUNTkloHXSId7rDc34cHhxG9o62YZ
VFP+x3FgMVsxU2r2e5yvh6115yTRiSQYYmxBlSJVHfxh9uyUIAiaAYDJ3IjzFzL5
T23yY44embuXR9NU7pUcPENsEE7jhZgYFkot04eiK68QuQB1QYwxRIlQxMzAJlxy
T6Cq9hglouH24eL2W3I/ia8lvVrYxaZ+WkCLMQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:13 2025 by rpki-client