Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4234C342345911EF8D94C838C4F9AE02.roa
File: 4234C342345911EF8D94C838C4F9AE02.roa (raw, json)
Hash identifier: wVSTkpnW/NbyXW8WM7Ji8huWgu43UwsEk8MBcSpoK2I=
Subject key identifier: 45:BB:29:EA:B3:28:BA:FD:BB:7E:7A:7B:27:4B:06:D2:9C:A4:6D:1C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9337
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4234C342345911EF8D94C838C4F9AE02.roa
Signing time: Thu 27 Jun 2024 07:45:44 +0000
ROA not before: Thu 27 Jun 2024 07:45:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134026
IP address blocks: 45.115.104.0/22 maxlen: 24
103.55.88.0/22 maxlen: 24
103.70.200.0/22 maxlen: 24
103.92.112.0/24 maxlen: 24
103.160.72.0/23 maxlen: 24
103.163.124.0/23 maxlen: 24
103.169.156.0/24 maxlen: 24
103.171.222.0/23 maxlen: 24
103.177.174.0/24 maxlen: 24
103.179.222.0/23 maxlen: 24
103.184.70.0/23 maxlen: 24
103.209.220.0/22 maxlen: 24
2405:5c0::/32 maxlen: 32
2405:80c0::/32 maxlen: 32
2407:c8c0::/32 maxlen: 37
Validation: Failed, certificate revoked on Wed 21 Aug 2024 08:55:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37687 (0x9337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 27 07:45:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=667d18a8-1597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:61:0c:d5:a3:4d:f0:bb:89:95:c8:bd:ed:
4c:34:c5:87:60:71:fb:32:8e:d5:fa:78:83:59:1b:
e9:8f:3f:f6:4e:e6:bf:39:eb:ce:4b:e7:9c:f6:0f:
a7:64:22:29:0c:11:b8:e6:4b:65:08:e1:ab:42:58:
29:e7:d5:8a:6b:cd:56:b2:4e:6d:58:99:66:10:b4:
c3:1c:14:29:af:0a:8f:b9:a7:34:7d:73:65:15:d4:
92:44:bb:9e:92:54:91:11:c8:30:b3:58:48:fa:75:
48:95:26:d7:ab:99:c7:65:c0:1f:e8:d5:70:00:5e:
9e:05:8d:19:c0:bc:ec:55:96:82:eb:ea:b6:01:4f:
41:6b:bf:11:bd:49:b6:d4:46:f1:1d:32:18:db:11:
7b:bc:69:87:bd:5e:40:f1:8c:11:b0:9d:ee:3c:e5:
c8:17:e6:a7:dc:0a:e7:cd:e6:8a:60:49:6e:e6:0d:
ca:c6:b1:b4:ee:58:53:e0:80:04:d8:c2:07:d2:e7:
46:5f:b5:da:89:34:a5:b1:bc:4d:4b:29:66:f1:d6:
bb:c0:fc:d0:02:73:72:17:5c:e3:1b:ff:3c:3b:16:
ae:2f:37:60:16:03:a1:33:5a:37:dd:c2:40:43:57:
24:ea:97:a2:f7:f2:68:06:b2:68:dc:f5:4c:24:85:
c9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BB:29:EA:B3:28:BA:FD:BB:7E:7A:7B:27:4B:06:D2:9C:A4:6D:1C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4234C342345911EF8D94C838C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.104.0/22
103.55.88.0/22
103.70.200.0/22
103.92.112.0/24
103.160.72.0/23
103.163.124.0/23
103.169.156.0/24
103.171.222.0/23
103.177.174.0/24
103.179.222.0/23
103.184.70.0/23
103.209.220.0/22
IPv6:
2405:5c0::/32
2405:80c0::/32
2407:c8c0::/32
Signature Algorithm: sha256WithRSAEncryption
15:18:b6:ad:02:74:f4:ea:09:15:eb:7f:e8:a6:73:14:c0:85:
28:0a:87:ca:c3:fd:31:32:75:dd:a0:c5:8e:3e:43:e2:ad:06:
b4:f9:05:65:1c:ac:7a:20:86:55:a0:87:67:4a:f3:df:7c:b1:
bc:bd:81:60:16:be:f3:02:c7:74:2f:da:f7:c7:7f:3a:1d:22:
ce:83:e5:6d:31:ab:92:e8:81:cb:ba:8d:5f:05:d1:82:a4:54:
b4:58:8d:bf:9f:0c:d5:93:fb:51:f1:fa:66:07:25:7e:65:5e:
19:bd:81:7d:e1:12:8d:f5:24:4e:ef:34:d6:69:35:ff:62:b2:
ed:6f:1b:b6:7c:8b:63:c7:e8:9b:d5:cc:29:b3:93:e6:4d:d3:
4f:e2:cd:6b:7b:3f:b4:26:04:2b:52:41:01:37:5d:4b:a7:42:
3a:cd:e0:bf:17:39:9d:34:66:b7:7c:c4:98:28:67:25:88:06:
be:20:12:7c:36:ec:97:f0:2b:ad:a2:7c:e7:df:7b:36:d3:2e:
a2:99:99:c2:c3:f5:ee:8e:3d:d6:9e:1e:d3:38:bb:2b:07:84:
3f:cf:3d:f9:2a:23:00:a9:ee:86:12:d9:67:37:32:4d:2a:d6:
1f:40:14:33:68:95:a3:26:e8:be:61:73:3b:7a:74:ff:7e:55:
c5:7a:21:0e
-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIDAJM3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDYyNzA3NDU0NFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY3ZDE4YTgtMTU5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALn2YQzVo03wu4mVyL3tTDTFh2Bx+zKO1fp4g1kb6Y8/9k7mvznrzkvnnPYP
p2QiKQwRuOZLZQjhq0JYKefVimvNVrJObViZZhC0wxwUKa8Kj7mnNH1zZRXUkkS7
npJUkRHIMLNYSPp1SJUm16uZx2XAH+jVcABengWNGcC87FWWguvqtgFPQWu/Eb1J
ttRG8R0yGNsRe7xph71eQPGMEbCd7jzlyBfmp9wK583mimBJbuYNysaxtO5YU+CA
BNjCB9LnRl+12ok0pbG8TUspZvHWu8D80AJzchdc4xv/PDsWri83YBYDoTNaN93C
QENXJOqXovfyaAayaNz1TCSFyU0CAwEAAaOCAvQwggLwMB0GA1UdDgQWBBRFuynq
syi6/bt+ensnSwbSnKRtHDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQyMzRDMzQy
MzQ1OTExRUY4RDk0QzgzOEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMH4GCCsGAQUFBwEHAQH/
BG8wbTBOBAIAATBIAwQCLXNoAwQCZzdYAwQCZ0bIAwQAZ1xwAwQBZ6BIAwQBZ6N8
AwQAZ6mcAwQBZ6veAwQAZ7GuAwQBZ7PeAwQBZ7hGAwQCZ9HcMBsEAgACMBUDBQAk
BQXAAwUAJAWAwAMFACQHyMAwDQYJKoZIhvcNAQELBQADggEBABUYtq0CdPTqCRXr
f+imcxTAhSgKh8rD/TEydd2gxY4+Q+KtBrT5BWUcrHoghlWgh2dK8998sby9gWAW
vvMCx3Qv2vfHfzodIs6D5W0xq5Logcu6jV8F0YKkVLRYjb+fDNWT+1Hx+mYHJX5l
Xhm9gX3hEo31JE7vNNZpNf9isu1vG7Z8i2PH6JvVzCmzk+ZN00/izWt7P7QmBCtS
QQE3XUunQjrN4L8XOZ00Zrd8xJgoZyWIBr4gEnw27JfwK62ifOffezbTLqKZmcLD
9e6OPdaeHtM4uysHhD/PPfkqIwCp7oYS2Wc3Mk0q1h9AFDNolaMm6L5hczt6dP9+
VcV6IQ4=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:31 2025 by rpki-client