Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/253B21D2057D11F092ADAD30C4F9AE02.roa
File: 253B21D2057D11F092ADAD30C4F9AE02.roa (raw, json)
Hash identifier: 6Ol/yQw6vIJfB9kjVaPGM1/zxgyWUThU4sOs/r3IHC8=
Subject key identifier: 45:97:30:DA:4F:5C:50:8D:EE:22:54:3B:39:F7:0C:72:39:32:09:8A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AC21
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/253B21D2057D11F092ADAD30C4F9AE02.roa
Signing time: Mon 24 Mar 2025 07:56:28 +0000
ROA not before: Mon 24 Mar 2025 07:56:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.239.152.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
45.251.32.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.44.104.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.51.152.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.44.0/23 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.98.79.0/24 maxlen: 24
103.99.48.0/23 maxlen: 24
103.108.76.0/22 maxlen: 24
103.109.108.0/22 maxlen: 24
103.110.72.0/23 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.135.60.0/22 maxlen: 24
103.136.64.0/22 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.180.0/23 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.170.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.50.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.158.216.0/23 maxlen: 24
103.159.137.0/24 maxlen: 24
103.159.178.0/23 maxlen: 24
103.161.64.0/23 maxlen: 24
103.162.80.0/23 maxlen: 24
103.165.10.0/23 maxlen: 24
103.165.20.0/23 maxlen: 24
103.165.26.0/23 maxlen: 24
103.166.220.0/23 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
103.171.60.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.26.0/23 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.12.0/23 maxlen: 24
103.175.58.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.175.186.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.191.86.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.219.140.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.234.64.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.245.170.0/23 maxlen: 24
103.254.96.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
115.166.132.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
202.9.55.0/24 maxlen: 24
203.191.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Mar 2025 12:38:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44065 (0xac21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 24 07:56:28 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67e1102c-571e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:16:c6:6a:05:60:f0:da:c9:b4:90:a4:50:ef:
10:23:a4:11:b8:53:46:2c:b0:ed:82:0f:1c:56:4b:
25:3b:ac:e5:5d:62:5b:a4:c8:fe:dd:6e:88:5f:16:
80:5c:9b:09:96:39:b5:0d:49:43:30:c0:69:0b:e2:
9c:a3:45:97:61:0f:0a:0b:5a:9f:58:fb:7b:32:9c:
26:89:0b:11:cd:9d:10:a0:11:66:74:a7:4e:eb:80:
fb:8b:aa:41:98:ec:59:94:00:40:98:12:ce:80:f0:
0e:ca:d2:84:36:dd:43:67:19:9a:53:14:d8:c9:19:
a2:7a:a0:af:92:9d:af:44:2c:3e:d9:2d:21:08:4b:
57:67:91:ef:41:93:d2:44:24:1c:86:08:96:13:89:
2c:8d:a3:29:9a:14:63:58:25:4b:bc:d6:cb:ef:45:
2d:d5:76:c8:28:42:94:53:04:c5:f9:da:ad:39:f4:
1f:84:61:22:aa:de:fe:0a:d6:b6:bb:70:7b:0c:8d:
33:70:85:8a:0a:f1:b2:08:96:21:db:e3:1a:99:38:
52:c9:ba:4b:f4:7d:4a:b0:a2:c3:70:43:f2:b3:10:
8d:24:59:b8:87:f9:79:a1:74:bc:c2:8b:1b:fc:bf:
fd:d0:d2:10:c7:ca:47:ec:88:aa:89:16:ad:9b:a6:
d8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:97:30:DA:4F:5C:50:8D:EE:22:54:3B:39:F7:0C:72:39:32:09:8A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/253B21D2057D11F092ADAD30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.239.152.0/22
45.114.156.0/22
45.251.32.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.44.104.0/22
103.47.152.0/24
103.51.92.0/22
103.51.152.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.44.0/23
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.98.79.0/24
103.99.48.0/23
103.108.76.0/22
103.109.108.0/22
103.110.72.0/23
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.135.60.0/22
103.136.64.0/22
103.139.88.0/23
103.142.64.0/23
103.143.180.0/23
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.170.0/23
103.155.194.0/23
103.157.50.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.158.216.0/23
103.159.137.0/24
103.159.178.0/23
103.161.64.0/23
103.162.80.0/23
103.165.10.0/23
103.165.20.0/23
103.165.26.0/23
103.166.220.0/23
103.169.58.0/23
103.171.8.0/23
103.171.54.0/23
103.171.60.0/23
103.171.236.0/23
103.173.41.0/24
103.174.26.0/23
103.174.42.0/23
103.175.12.0/23
103.175.58.0/23
103.175.106.0/23
103.175.186.0/23
103.176.142.0/24
103.180.216.0/23
103.190.12.0/23
103.191.86.0/23
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.219.140.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.234.64.0/22
103.236.112.0/22
103.245.170.0/23
103.254.96.0/22
103.254.200.0/22
115.166.132.0/22
137.59.204.0/22
139.5.96.0/22
202.9.55.0/24
203.191.56.0/22
Signature Algorithm: sha256WithRSAEncryption
34:5a:b5:6f:87:7f:cc:39:a9:dd:15:07:1f:82:7a:02:e9:39:
a5:20:9a:8b:f3:62:3c:fb:8a:73:d6:04:2e:f4:e9:2e:f6:b0:
ab:0d:b9:0b:82:68:57:7d:63:00:92:43:cd:ef:6a:f2:82:03:
99:1e:63:a5:ac:21:e1:de:11:84:8d:91:59:37:86:4b:b9:db:
b9:d3:a1:a5:a2:c5:df:68:15:09:c3:9f:7f:98:50:f6:ce:b0:
af:05:9b:65:ed:23:6a:aa:17:35:5f:2a:9e:f1:44:ee:e5:75:
a4:f3:a3:c3:c6:2b:e6:b9:a8:4d:37:f9:cf:0d:25:61:52:2e:
ad:8b:88:e3:20:b9:29:b0:83:ff:f9:53:10:54:6c:cc:c2:c5:
d6:26:af:f6:ca:bb:36:96:42:74:bb:da:17:d7:e5:a7:e3:ce:
f5:2d:4f:e1:e9:1d:81:2e:33:67:0f:4f:6e:bb:c9:35:fd:b8:
ca:27:7f:00:a8:71:c7:8f:70:18:68:0d:b0:1e:61:16:c6:cb:
61:ef:05:f2:f3:92:07:1c:6b:6f:99:d0:19:aa:a4:20:c7:cd:
5a:cf:2f:a4:5b:49:a8:c1:6e:f9:f0:08:9f:87:2b:d2:0a:29:
af:f9:c3:da:c7:9e:bb:bd:11:29:ec:ed:52:64:38:72:b8:2d:
fc:dc:12:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:10 2025 by rpki-client