Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/522382ACFB3711EFB4B61F58C4F9AE02.roa
File: 522382ACFB3711EFB4B61F58C4F9AE02.roa (raw, json)
Hash identifier: fBlsq8OQfVsBWEOi1BnSJz8sAOCwZWahowTuzoRtO7U=
Subject key identifier: 27:55:D3:BD:50:F5:A6:CE:EB:CA:DB:B2:EB:13:90:EA:0A:E6:74:A6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A96B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/522382ACFB3711EFB4B61F58C4F9AE02.roa
Signing time: Fri 07 Mar 2025 09:38:53 +0000
ROA not before: Fri 07 Mar 2025 09:38:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18002
IP address blocks: 14.102.0.0/24 maxlen: 24
14.102.1.0/24 maxlen: 24
14.102.2.0/23 maxlen: 24
14.102.2.0/24 maxlen: 24
14.102.3.0/24 maxlen: 24
14.102.22.0/23 maxlen: 24
14.102.22.0/24 maxlen: 24
14.102.23.0/24 maxlen: 24
14.102.24.0/22 maxlen: 24
14.102.24.0/24 maxlen: 24
14.102.25.0/24 maxlen: 24
14.102.26.0/24 maxlen: 24
14.102.27.0/24 maxlen: 24
14.102.32.0/22 maxlen: 24
14.102.32.0/24 maxlen: 24
14.102.33.0/24 maxlen: 24
14.102.34.0/24 maxlen: 24
14.102.35.0/24 maxlen: 24
14.102.36.0/23 maxlen: 24
14.102.36.0/24 maxlen: 24
14.102.37.0/24 maxlen: 24
14.102.38.0/24 maxlen: 24
14.102.40.0/22 maxlen: 24
14.102.40.0/24 maxlen: 24
14.102.41.0/24 maxlen: 24
14.102.42.0/24 maxlen: 24
14.102.43.0/24 maxlen: 24
14.102.44.0/24 maxlen: 24
14.102.45.0/24 maxlen: 24
14.102.48.0/24 maxlen: 24
14.102.50.0/24 maxlen: 24
14.102.56.0/23 maxlen: 24
14.102.56.0/24 maxlen: 24
14.102.57.0/24 maxlen: 24
14.102.59.0/24 maxlen: 24
14.102.64.0/22 maxlen: 24
14.102.64.0/24 maxlen: 24
14.102.65.0/24 maxlen: 24
14.102.66.0/24 maxlen: 24
14.102.67.0/24 maxlen: 24
14.102.68.0/22 maxlen: 24
14.102.68.0/24 maxlen: 24
14.102.69.0/24 maxlen: 24
14.102.70.0/24 maxlen: 24
14.102.71.0/24 maxlen: 24
14.102.72.0/22 maxlen: 24
14.102.72.0/24 maxlen: 24
14.102.73.0/24 maxlen: 24
14.102.74.0/24 maxlen: 24
14.102.75.0/24 maxlen: 24
14.102.76.0/23 maxlen: 24
14.102.78.0/24 maxlen: 24
14.102.80.0/22 maxlen: 24
14.102.80.0/24 maxlen: 24
14.102.81.0/24 maxlen: 24
14.102.82.0/24 maxlen: 24
14.102.83.0/24 maxlen: 24
14.102.88.0/24 maxlen: 24
14.102.91.0/24 maxlen: 24
14.102.92.0/23 maxlen: 24
14.102.95.0/24 maxlen: 24
14.102.96.0/23 maxlen: 24
14.102.96.0/24 maxlen: 24
14.102.97.0/24 maxlen: 24
14.102.100.0/23 maxlen: 24
14.102.103.0/24 maxlen: 24
14.102.104.0/22 maxlen: 24
14.102.104.0/24 maxlen: 24
14.102.105.0/24 maxlen: 24
14.102.106.0/23 maxlen: 24
14.102.108.0/22 maxlen: 24
14.102.108.0/24 maxlen: 24
14.102.109.0/24 maxlen: 24
14.102.110.0/24 maxlen: 24
14.102.111.0/24 maxlen: 24
14.102.112.0/22 maxlen: 24
14.102.112.0/24 maxlen: 24
14.102.113.0/24 maxlen: 24
14.102.114.0/24 maxlen: 24
14.102.115.0/24 maxlen: 24
14.102.116.0/22 maxlen: 24
14.102.116.0/24 maxlen: 24
14.102.117.0/24 maxlen: 24
14.102.118.0/24 maxlen: 24
14.102.119.0/24 maxlen: 24
14.102.120.0/22 maxlen: 24
14.102.120.0/24 maxlen: 24
14.102.121.0/24 maxlen: 24
14.102.122.0/24 maxlen: 24
14.102.123.0/24 maxlen: 24
14.102.125.0/24 maxlen: 24
14.102.126.0/23 maxlen: 24
14.102.126.0/24 maxlen: 24
14.102.127.0/24 maxlen: 24
43.251.212.0/22 maxlen: 24
61.14.228.0/23 maxlen: 24
61.14.231.0/24 maxlen: 24
103.5.200.0/22 maxlen: 24
103.59.189.0/24 maxlen: 24
103.87.100.0/22 maxlen: 24
103.158.131.0/24 maxlen: 24
103.160.24.0/24 maxlen: 24
103.175.72.0/24 maxlen: 24
103.175.73.0/24 maxlen: 24
103.176.8.0/23 maxlen: 24
110.172.130.0/23 maxlen: 24
110.172.132.0/24 maxlen: 24
110.172.134.0/23 maxlen: 24
110.172.136.0/24 maxlen: 24
110.172.138.0/23 maxlen: 24
110.172.140.0/24 maxlen: 24
110.172.145.0/24 maxlen: 24
110.172.147.0/24 maxlen: 24
110.172.150.0/24 maxlen: 24
110.172.151.0/24 maxlen: 24
110.172.152.0/22 maxlen: 24
110.172.156.0/22 maxlen: 24
110.172.160.0/23 maxlen: 24
110.172.162.0/24 maxlen: 24
110.172.164.0/24 maxlen: 24
110.172.166.0/23 maxlen: 24
110.172.168.0/24 maxlen: 24
110.172.170.0/23 maxlen: 24
110.172.174.0/23 maxlen: 24
110.172.177.0/24 maxlen: 24
110.172.178.0/23 maxlen: 24
110.172.184.0/22 maxlen: 24
111.235.64.0/22 maxlen: 24
114.69.228.0/22 maxlen: 24
114.69.240.0/24 maxlen: 24
114.69.242.0/23 maxlen: 24
114.69.248.0/23 maxlen: 24
114.69.252.0/22 maxlen: 24
118.91.176.0/23 maxlen: 24
118.91.178.0/24 maxlen: 24
118.91.189.0/24 maxlen: 24
118.91.191.0/24 maxlen: 24
202.89.64.0/24 maxlen: 24
202.89.65.0/24 maxlen: 24
202.89.66.0/24 maxlen: 24
202.89.67.0/24 maxlen: 24
202.89.68.0/24 maxlen: 24
202.89.69.0/24 maxlen: 24
202.89.70.0/24 maxlen: 24
202.89.71.0/24 maxlen: 24
202.89.72.0/24 maxlen: 24
202.89.74.0/24 maxlen: 24
202.89.76.0/24 maxlen: 24
202.89.77.0/24 maxlen: 24
202.89.78.0/24 maxlen: 24
2402:5b00::/44 maxlen: 44
2402:5b00:20::/44 maxlen: 44
2402:5b00:40::/44 maxlen: 44
2402:5b00:b0::/44 maxlen: 44
2402:5b00:d0::/44 maxlen: 44
2402:5b00:e0::/44 maxlen: 44
2402:5b00:f0::/44 maxlen: 44
2402:5b00:110::/44 maxlen: 44
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43371 (0xa96b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 7 09:38:53 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67cabead-c9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:fe:28:33:c1:ad:6a:73:e7:e9:7e:23:e3:
7e:84:f6:3e:a2:3c:19:fa:c2:e4:10:90:c0:01:fd:
e5:bb:33:0e:79:a5:d5:07:6e:89:a9:b4:5c:16:e3:
71:15:ef:eb:f9:04:8b:b7:c4:31:86:83:27:90:5d:
00:67:08:d4:27:0b:9b:53:b0:9d:57:84:90:1c:54:
bd:c4:01:f5:73:4f:64:3b:e4:f8:51:fd:ca:3a:2b:
6e:13:1f:24:c2:ba:3f:a0:35:05:de:fc:99:30:ab:
71:b1:44:65:c5:2e:4a:a5:31:82:40:c1:6e:2f:2d:
e8:a2:aa:02:70:af:29:04:4a:e1:33:87:7a:b6:f2:
58:ed:8d:a6:dc:a4:34:c3:9e:50:81:b4:4c:a9:4c:
a1:73:5e:82:9b:8b:fb:3b:88:38:1b:c2:93:ab:24:
c2:59:ad:0e:5c:3d:8e:06:21:f4:c0:22:49:c9:a4:
38:6c:ed:d0:90:81:5a:48:ba:cd:7e:83:4e:51:0a:
19:a3:d6:05:2f:fc:f0:b5:25:7f:53:c5:82:d9:d2:
26:f6:bf:a1:66:7c:f2:ff:02:bd:8a:f1:5b:6b:9f:
3d:f9:7a:c7:b4:12:a4:30:d2:1a:e1:78:80:9e:41:
10:a7:79:c6:82:9d:5d:5f:10:63:61:18:44:93:71:
08:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:55:D3:BD:50:F5:A6:CE:EB:CA:DB:B2:EB:13:90:EA:0A:E6:74:A6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/522382ACFB3711EFB4B61F58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.102.0.0/22
14.102.22.0-14.102.27.255
14.102.32.0-14.102.38.255
14.102.40.0-14.102.45.255
14.102.48.0/24
14.102.50.0/24
14.102.56.0/23
14.102.59.0/24
14.102.64.0-14.102.78.255
14.102.80.0/22
14.102.88.0/24
14.102.91.0-14.102.93.255
14.102.95.0-14.102.97.255
14.102.100.0/23
14.102.103.0-14.102.123.255
14.102.125.0-14.102.127.255
43.251.212.0/22
61.14.228.0/23
61.14.231.0/24
103.5.200.0/22
103.59.189.0/24
103.87.100.0/22
103.158.131.0/24
103.160.24.0/24
103.175.72.0/23
103.176.8.0/23
110.172.130.0-110.172.132.255
110.172.134.0-110.172.136.255
110.172.138.0-110.172.140.255
110.172.145.0/24
110.172.147.0/24
110.172.150.0-110.172.162.255
110.172.164.0/24
110.172.166.0-110.172.168.255
110.172.170.0/23
110.172.174.0/23
110.172.177.0-110.172.179.255
110.172.184.0/22
111.235.64.0/22
114.69.228.0/22
114.69.240.0/24
114.69.242.0/23
114.69.248.0/23
114.69.252.0/22
118.91.176.0-118.91.178.255
118.91.189.0/24
118.91.191.0/24
202.89.64.0-202.89.72.255
202.89.74.0/24
202.89.76.0-202.89.78.255
IPv6:
2402:5b00::/44
2402:5b00:20::/44
2402:5b00:40::/44
2402:5b00:b0::/44
2402:5b00:d0::-2402:5b00:ff:ffff:ffff:ffff:ffff:ffff
2402:5b00:110::/44
Signature Algorithm: sha256WithRSAEncryption
80:5f:6f:cc:63:9c:62:0d:b1:bf:d0:ab:a3:dc:6b:0d:42:ae:
6b:d1:46:ad:49:61:4b:ed:ee:22:fe:1a:b2:fa:88:c8:9f:6c:
30:9a:fa:d5:3b:44:27:4c:2d:a8:ca:3a:09:0e:d0:8b:45:2c:
72:cc:a5:26:3b:c9:bd:e4:7c:10:da:38:99:01:67:02:80:31:
26:19:36:f4:20:e7:40:3d:71:4a:94:b6:4f:23:97:41:7a:4e:
ae:bf:ec:30:15:d7:09:55:6f:7d:2d:cf:61:d5:cc:d4:74:80:
c0:93:18:04:56:2e:b3:18:36:e3:64:ca:aa:a6:97:74:d3:ea:
32:b6:69:a7:af:75:c0:ec:0d:e6:36:df:8a:cb:e0:57:8a:26:
57:ce:ad:6c:8b:f3:73:d1:2e:f6:cc:f5:3d:6d:76:67:e8:ac:
29:89:a5:bf:b5:16:65:6f:61:f4:f2:5b:2a:a8:ad:39:fb:1c:
ca:ac:3b:53:30:72:6a:db:cb:f6:a9:f6:46:9a:61:63:f5:0f:
1f:58:05:5f:7f:fb:ca:f1:d8:fe:53:41:7c:5a:aa:22:00:4e:
2d:f3:25:e2:1d:fb:7f:7e:34:c0:58:ea:69:d5:c6:f0:9a:65:
a4:ed:37:ac:cc:93:54:19:d1:21:2e:80:03:fb:18:8c:ec:a4:
45:1d:b2:70
-----BEGIN CERTIFICATE-----
MIIHcjCCBlqgAwIBAgIDAKlrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDMwNzA5Mzg1M1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjdjYWJlYWQtYzlmOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKyo/igzwa1qc+fpfiPjfoT2PqI8GfrC5BCQwAH95bszDnml1Qduiam0XBbj
cRXv6/kEi7fEMYaDJ5BdAGcI1CcLm1OwnVeEkBxUvcQB9XNPZDvk+FH9yjorbhMf
JMK6P6A1Bd78mTCrcbFEZcUuSqUxgkDBbi8t6KKqAnCvKQRK4TOHerbyWO2Nptyk
NMOeUIG0TKlMoXNegpuL+zuIOBvCk6skwlmtDlw9jgYh9MAiScmkOGzt0JCBWki6
zX6DTlEKGaPWBS/88LUlf1PFgtnSJva/oWZ88v8CvYrxW2ufPfl6x7QSpDDSGuF4
gJ5BEKd5xoKdXV8QY2EYRJNxCGECAwEAAaOCBJUwggSRMB0GA1UdDgQWBBQnVdO9
UPWmzuvK27LrE5DqCuZ0pjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzUyMjM4MkFD
RkIzNzExRUZCNEI2MUY1OEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIICHQYIKwYBBQUHAQcB
Af8EggIMMIICCDCCAbwEAgABMIIBtAMEAg5mADAMAwQBDmYWAwQCDmYYMAwDBAUO
ZiADBAAOZiYwDAMEAw5mKAMEAQ5mLAMEAA5mMAMEAA5mMgMEAQ5mOAMEAA5mOzAM
AwQGDmZAAwQADmZOAwQCDmZQAwQADmZYMAwDBAAOZlsDBAEOZlwwDAMEAA5mXwME
AQ5mYAMEAQ5mZDAMAwQADmZnAwQCDmZ4MAwDBAAOZn0DBAcOZgADBAIr+9QDBAE9
DuQDBAA9DucDBAJnBcgDBABnO70DBAJnV2QDBABnnoMDBABnoBgDBAFnr0gDBAFn
sAgwDAMEAW6sggMEAG6shDAMAwQBbqyGAwQAbqyIMAwDBAFurIoDBABurIwDBABu
rJEDBABurJMwDAMEAW6slgMEAG6sogMEAG6spDAMAwQBbqymAwQAbqyoAwQBbqyq
AwQBbqyuMAwDBABurLEDBAJurLADBAJurLgDBAJv60ADBAJyReQDBAByRfADBAFy
RfIDBAFyRfgDBAJyRfwwDAMEBHZbsAMEAHZbsgMEAHZbvQMEAHZbvzAMAwQGyllA
AwQAyllIAwQAyllKMAwDBALKWUwDBADKWU4wRgQCAAIwQAMHBCQCWwAAAAMHBCQC
WwAAIAMHBCQCWwAAQAMHBCQCWwAAsDARAwcEJAJbAADQAwYAJAJbAAADBwQkAlsA
ARAwDQYJKoZIhvcNAQELBQADggEBAIBfb8xjnGINsb/Qq6Pcaw1CrmvRRq1JYUvt
7iL+GrL6iMifbDCa+tU7RCdMLajKOgkO0ItFLHLMpSY7yb3kfBDaOJkBZwKAMSYZ
NvQg50A9cUqUtk8jl0F6Tq6/7DAV1wlVb30tz2HVzNR0gMCTGARWLrMYNuNkyqqm
l3TT6jK2aaevdcDsDeY234rL4FeKJlfOrWyL83PRLvbM9T1tdmforCmJpb+1FmVv
YfTyWyqorTn7HMqsO1Mwcmrby/ap9kaaYWP1Dx9YBV9/+8rx2P5TQXxaqiIATi3z
JeId+39+NMBY6mnVxvCaZaTtN6zMk1QZ0SEugAP7GIzspEUdsnA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:57 2025 by rpki-client