Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3037BA440A3E11F09A5DF23FC4F9AE02.roa
File: 3037BA440A3E11F09A5DF23FC4F9AE02.roa (raw, json)
Hash identifier: 2BQFDKOR8Z7o65mR5wKlXHTxJ9gHScaDnaA9PNj63tI=
Subject key identifier: 4E:55:21:80:CE:5B:C1:3B:17:E0:5C:8D:39:76:89:54:22:E1:04:7C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: ACDF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3037BA440A3E11F09A5DF23FC4F9AE02.roa
Signing time: Wed 26 Mar 2025 12:31:06 +0000
ROA not before: Wed 26 Mar 2025 12:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.239.152.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
45.251.32.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.44.104.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.72.106.0/23 maxlen: 24
103.82.44.0/23 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.98.79.0/24 maxlen: 24
103.98.194.0/23 maxlen: 24
103.99.48.0/23 maxlen: 24
103.108.76.0/22 maxlen: 24
103.109.108.0/22 maxlen: 24
103.110.72.0/23 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.135.60.0/22 maxlen: 24
103.136.64.0/22 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.180.0/23 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.170.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.50.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.158.216.0/23 maxlen: 24
103.159.137.0/24 maxlen: 24
103.159.178.0/23 maxlen: 24
103.162.80.0/23 maxlen: 24
103.165.10.0/23 maxlen: 24
103.165.26.0/23 maxlen: 24
103.166.220.0/23 maxlen: 24
103.169.58.0/23 maxlen: 24
103.169.156.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
103.171.60.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.26.0/23 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.0.0/23 maxlen: 24
103.175.12.0/23 maxlen: 24
103.175.58.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.191.86.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.234.64.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.245.170.0/23 maxlen: 24
103.253.168.0/22 maxlen: 24
103.254.96.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
115.166.132.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
202.9.55.0/24 maxlen: 24
203.191.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Mar 2025 05:35:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44255 (0xacdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 26 12:31:06 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67e3f38a-e68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:5c:1d:18:ee:96:23:a0:31:10:1f:d0:22:
f9:e1:6d:81:d4:b1:47:72:13:46:e4:30:e2:c5:9f:
46:9b:c8:96:7d:fc:59:1d:8a:9b:9a:d4:f8:0f:d7:
15:60:a2:4e:27:67:8c:ee:00:42:a2:f1:db:e9:75:
f1:bf:b7:15:3f:3c:08:b1:9f:05:0c:39:28:17:4d:
ec:02:1d:eb:e7:da:fb:26:e5:a6:e0:d6:b4:73:72:
95:27:b9:1b:32:68:9b:83:e2:61:79:f3:9a:4b:45:
c8:a2:2d:60:ce:70:05:2a:c8:f2:e0:e7:d8:f9:69:
62:f7:50:4f:4b:8c:02:7c:c9:d0:f8:bb:49:40:03:
94:15:e9:a8:6a:1c:4b:76:2f:14:30:b3:a7:0f:90:
ae:0c:16:02:9c:11:a3:9e:d1:00:02:a1:61:7f:b7:
f2:7c:44:6e:52:64:9e:0d:41:e6:b0:5d:2c:a8:f5:
1e:0e:49:05:46:cf:21:d0:97:42:51:71:05:4f:f7:
fd:43:56:b9:eb:0d:df:3e:14:47:f9:82:ca:b0:b9:
60:60:78:a3:3e:45:97:e7:a0:fe:e1:72:6c:00:c7:
81:64:62:53:e1:6e:df:51:45:01:67:88:38:63:31:
f1:2c:98:fd:c7:b9:b5:f2:e7:a2:48:bd:db:b1:c1:
64:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:55:21:80:CE:5B:C1:3B:17:E0:5C:8D:39:76:89:54:22:E1:04:7C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3037BA440A3E11F09A5DF23FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.239.152.0/22
45.114.156.0/22
45.251.32.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.44.104.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.72.106.0/23
103.82.44.0/23
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.98.79.0/24
103.98.194.0/23
103.99.48.0/23
103.108.76.0/22
103.109.108.0/22
103.110.72.0/23
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.135.60.0/22
103.136.64.0/22
103.139.88.0/23
103.142.64.0/23
103.143.180.0/23
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.170.0/23
103.155.194.0/23
103.157.50.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.158.216.0/23
103.159.137.0/24
103.159.178.0/23
103.162.80.0/23
103.165.10.0/23
103.165.26.0/23
103.166.220.0/23
103.169.58.0/23
103.169.156.0/23
103.171.8.0/23
103.171.54.0/23
103.171.60.0/23
103.171.236.0/23
103.173.41.0/24
103.174.26.0/23
103.174.42.0/23
103.175.0.0/23
103.175.12.0/23
103.175.58.0/23
103.175.106.0/23
103.176.142.0/24
103.180.216.0/23
103.190.12.0/23
103.191.86.0/23
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.234.64.0/22
103.236.112.0/22
103.245.170.0/23
103.253.168.0/22
103.254.96.0/22
103.254.200.0/22
115.166.132.0/22
137.59.204.0/22
139.5.96.0/22
202.9.55.0/24
203.191.56.0/22
Signature Algorithm: sha256WithRSAEncryption
92:24:09:2f:b8:fe:14:b5:c7:6a:9a:7d:83:32:50:1b:20:f2:
9e:e5:00:7d:4a:a3:66:13:92:fd:6d:a9:b5:73:52:ad:71:74:
00:94:de:fd:fa:95:ac:7d:89:7d:0d:89:be:5a:8b:ca:0c:17:
77:84:cb:f7:bb:74:0f:3a:0c:84:c2:0a:da:fd:42:68:c1:bb:
c5:63:c2:c2:a1:f6:08:de:93:c4:87:4c:5f:b9:00:d8:86:0c:
aa:5b:f7:5e:d1:e1:13:0e:ec:18:e3:ac:c1:48:1b:e4:50:77:
c7:1f:6a:0a:ba:b8:0f:ad:1d:4e:35:20:ff:1c:6c:c1:18:6a:
5f:ad:c4:2c:bd:bb:56:59:6c:a8:3f:09:1f:72:16:b2:d5:ee:
93:a2:fa:71:f5:1b:c8:f9:75:d2:b6:6a:b8:83:92:3f:8e:f0:
b5:51:ca:cf:89:d0:17:ff:d4:22:73:10:94:de:e7:aa:2e:a1:
31:b1:77:1c:99:dd:99:0c:c4:36:f5:ca:32:0f:73:24:a4:e1:
52:38:6b:a0:7a:33:0a:33:f4:93:67:7b:ca:21:e8:37:95:50:
6b:93:0e:4f:18:cc:4c:00:40:35:0c:ae:d0:a7:89:c9:91:b1:
9c:78:13:bb:a5:92:09:c9:31:7b:65:85:11:82:39:d0:c1:09:
9e:28:84:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:41 2025 by rpki-client