Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25DC5B86E46411EF8BEF682DC4F9AE02.roa
File: 25DC5B86E46411EF8BEF682DC4F9AE02.roa (raw, json)
Hash identifier: 4/ewU8f9dK4cbrGvPMJZKLmKbH4oCxNcvnbnnthKHx8=
Subject key identifier: 78:63:C6:F0:C7:54:18:E7:7B:D2:6D:EB:34:7D:65:B5:B0:E8:4D:B6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A51E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25DC5B86E46411EF8BEF682DC4F9AE02.roa
Signing time: Fri 07 Feb 2025 05:14:17 +0000
ROA not before: Fri 07 Feb 2025 05:14:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58678
IP address blocks: 43.241.28.0/22 maxlen: 24
43.241.128.0/22 maxlen: 24
43.241.132.0/22 maxlen: 24
43.242.208.0/24 maxlen: 24
43.242.209.0/24 maxlen: 24
43.242.210.0/24 maxlen: 24
43.242.211.0/24 maxlen: 24
43.242.224.0/22 maxlen: 24
43.242.228.0/22 maxlen: 24
45.64.84.0/22 maxlen: 24
45.114.192.0/22 maxlen: 24
45.117.0.0/22 maxlen: 24
45.127.120.0/22 maxlen: 24
45.250.248.0/24 maxlen: 24
45.250.249.0/24 maxlen: 24
45.250.250.0/24 maxlen: 24
103.14.232.0/22 maxlen: 24
103.17.12.0/23 maxlen: 24
103.26.52.0/22 maxlen: 22
103.26.52.0/24 maxlen: 24
103.26.53.0/24 maxlen: 24
103.26.54.0/24 maxlen: 24
103.26.55.0/24 maxlen: 24
103.26.56.0/22 maxlen: 24
103.42.160.0/22 maxlen: 24
103.48.56.0/23 maxlen: 24
103.48.58.0/24 maxlen: 24
103.48.59.0/24 maxlen: 24
103.48.100.0/22 maxlen: 24
103.57.96.0/23 maxlen: 24
103.59.212.0/22 maxlen: 24
103.66.80.0/22 maxlen: 22
103.66.80.0/24 maxlen: 24
103.66.81.0/24 maxlen: 24
103.66.82.0/24 maxlen: 24
103.66.83.0/24 maxlen: 24
103.69.238.0/24 maxlen: 24
103.74.236.0/22 maxlen: 24
103.77.152.0/22 maxlen: 23
103.77.152.0/23 maxlen: 24
103.77.154.0/24 maxlen: 24
103.89.40.0/22 maxlen: 24
103.111.132.0/22 maxlen: 24
103.112.32.0/24 maxlen: 24
103.112.33.0/24 maxlen: 24
103.112.34.0/24 maxlen: 24
103.112.35.0/24 maxlen: 24
103.117.184.0/24 maxlen: 24
103.117.187.0/24 maxlen: 24
103.137.152.0/22 maxlen: 24
103.148.207.0/24 maxlen: 24
103.153.151.0/24 maxlen: 24
103.155.170.0/24 maxlen: 24
103.162.190.0/23 maxlen: 24
103.163.188.0/24 maxlen: 24
103.163.189.0/24 maxlen: 24
103.166.112.0/23 maxlen: 24
103.168.62.0/24 maxlen: 24
103.168.63.0/24 maxlen: 24
103.173.208.0/23 maxlen: 24
103.174.30.0/24 maxlen: 24
103.174.38.0/24 maxlen: 24
103.178.212.0/23 maxlen: 24
103.181.209.0/24 maxlen: 24
103.185.11.0/24 maxlen: 24
103.204.119.0/24 maxlen: 24
103.209.18.0/24 maxlen: 24
103.209.19.0/24 maxlen: 24
103.215.114.0/23 maxlen: 24
103.216.144.0/22 maxlen: 24
103.218.100.0/22 maxlen: 24
103.219.164.0/24 maxlen: 24
103.219.165.0/24 maxlen: 24
103.219.166.0/24 maxlen: 24
103.219.167.0/24 maxlen: 24
103.220.80.0/22 maxlen: 24
103.220.212.0/22 maxlen: 24
103.226.0.0/22 maxlen: 24
103.226.4.0/22 maxlen: 24
103.226.28.0/22 maxlen: 24
103.232.24.0/22 maxlen: 24
124.108.16.0/22 maxlen: 24
2001:df6:f180::/48 maxlen: 48
2404:bd00::/48 maxlen: 48
2404:bd00:1::/48 maxlen: 48
2404:bd00:2::/48 maxlen: 48
2404:bd00:3::/48 maxlen: 48
2404:bd00:4::/48 maxlen: 48
2404:bd00:5::/48 maxlen: 48
2404:bd00:6::/48 maxlen: 48
2404:bd00:7::/48 maxlen: 48
2404:bd00:8::/48 maxlen: 48
2404:bd00:a::/48 maxlen: 48
2404:bd00:b::/48 maxlen: 48
2404:bd00:c::/48 maxlen: 48
2404:bd00:d::/48 maxlen: 48
2404:bd00:e::/48 maxlen: 48
2404:bd00:f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 20 Feb 2025 08:50:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42270 (0xa51e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 7 05:14:17 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67a596a8-6367
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:4b:d3:0a:c0:d9:47:6b:44:d3:09:01:88:
74:c0:55:fe:10:71:2d:81:9b:34:d4:d1:1f:ac:1d:
51:24:52:2d:14:1e:14:dd:ac:53:c1:2e:58:31:15:
4f:56:55:81:68:89:fb:5d:76:9e:9f:86:c5:7e:e9:
bb:c4:83:06:0f:b4:f2:aa:d1:83:64:9f:a4:f1:09:
e4:a0:7c:55:44:24:95:fe:ab:a4:9f:52:e6:6d:a1:
8f:3c:6c:25:e4:1b:92:91:92:50:bb:cd:00:3b:7c:
23:09:90:f4:28:39:9a:3a:42:89:57:65:79:02:69:
35:96:69:fe:71:0f:87:2e:6d:92:db:bb:ba:48:11:
e3:62:a5:de:0a:57:c8:09:cd:52:af:4a:2c:31:a8:
7f:15:87:41:3d:20:42:60:a8:6d:85:33:56:0b:11:
ef:d6:91:6b:3b:fa:f5:4b:06:78:89:23:82:e6:9d:
37:1a:eb:9b:f8:ae:1c:ee:c7:33:4d:c1:74:b8:22:
53:6c:9e:5a:8a:c5:a4:11:5c:ed:6c:2a:18:74:c4:
1e:20:88:9b:03:74:93:28:e8:d3:79:ca:f7:16:4b:
a8:f1:ce:94:c4:fd:22:b5:2b:8f:37:97:4f:24:0a:
6c:dd:0c:31:71:2f:6a:f0:0d:a6:35:a9:ef:e9:2c:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:63:C6:F0:C7:54:18:E7:7B:D2:6D:EB:34:7D:65:B5:B0:E8:4D:B6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25DC5B86E46411EF8BEF682DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.28.0/22
43.241.128.0/21
43.242.208.0/22
43.242.224.0/21
45.64.84.0/22
45.114.192.0/22
45.117.0.0/22
45.127.120.0/22
45.250.248.0-45.250.250.255
103.14.232.0/22
103.17.12.0/23
103.26.52.0-103.26.59.255
103.42.160.0/22
103.48.56.0/22
103.48.100.0/22
103.57.96.0/23
103.59.212.0/22
103.66.80.0/22
103.69.238.0/24
103.74.236.0/22
103.77.152.0/22
103.89.40.0/22
103.111.132.0/22
103.112.32.0/22
103.117.184.0/24
103.117.187.0/24
103.137.152.0/22
103.148.207.0/24
103.153.151.0/24
103.155.170.0/24
103.162.190.0/23
103.163.188.0/23
103.166.112.0/23
103.168.62.0/23
103.173.208.0/23
103.174.30.0/24
103.174.38.0/24
103.178.212.0/23
103.181.209.0/24
103.185.11.0/24
103.204.119.0/24
103.209.18.0/23
103.215.114.0/23
103.216.144.0/22
103.218.100.0/22
103.219.164.0/22
103.220.80.0/22
103.220.212.0/22
103.226.0.0/21
103.226.28.0/22
103.232.24.0/22
124.108.16.0/22
IPv6:
2001:df6:f180::/48
2404:bd00::-2404:bd00:8:ffff:ffff:ffff:ffff:ffff
2404:bd00:a::-2404:bd00:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8c:74:5a:e1:53:c9:4e:88:9a:7c:f5:ec:af:ad:15:c6:8a:a3:
d6:9c:ef:75:4b:72:56:51:3a:f9:99:5b:99:e0:1d:9b:63:e5:
14:d0:c8:74:43:98:f2:f2:af:08:d8:37:66:c0:f4:39:e6:95:
17:1f:59:c7:15:1c:bc:e0:41:4d:62:1b:f3:f6:bb:a6:e5:84:
bd:b7:de:3b:ff:0b:69:e4:59:2d:4f:5a:ce:6e:8b:a1:a4:ff:
cd:58:d7:fb:85:5c:08:37:60:b3:b5:05:79:a9:ab:7d:c8:e1:
ad:2e:a4:7c:5c:2b:2a:42:6c:e9:4a:11:c9:1a:36:52:ec:b5:
a1:66:67:2c:7d:e4:a6:eb:35:57:da:3d:b6:73:b3:27:b7:51:
51:b8:45:c1:24:6f:f8:4d:da:54:81:9d:92:b2:a6:f0:5a:5d:
1d:d2:92:a5:e4:6f:4c:c3:24:8e:a0:b3:d1:ae:81:54:f1:0a:
32:bf:66:2e:60:f8:f0:8e:f2:f7:5e:ed:a4:e7:39:b3:a1:6e:
97:0e:e0:d5:f1:1f:7d:2a:f2:1d:d6:c2:8c:0e:44:54:dc:b1:
22:96:12:cb:3d:a9:16:90:8c:a8:b3:7a:fe:6d:1e:a7:76:73:
26:4b:60:30:a3:2d:5d:63:ad:99:67:3b:91:a1:9d:5e:ba:a2:
3c:2d:4a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:36 2025 by rpki-client