Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A6464F03AC511EF996BF762C4F9AE02.roa
File: 5A6464F03AC511EF996BF762C4F9AE02.roa (raw, json)
Hash identifier: Mi4dod7HuFrD5Np1n9eoP+C7u/6o1UPSOebLa5rS1l4=
Subject key identifier: 02:E1:14:83:C2:2B:99:36:22:6D:A0:5D:1F:1B:A4:88:D0:E8:A0:51
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9440
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A6464F03AC511EF996BF762C4F9AE02.roa
Signing time: Tue 09 Jul 2024 06:08:24 +0000
ROA not before: Tue 09 Jul 2024 06:08:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133661
IP address blocks: 101.0.32.0/22 maxlen: 24
101.0.37.0/24 maxlen: 24
103.73.148.0/24 maxlen: 24
103.73.149.0/24 maxlen: 24
103.73.150.0/24 maxlen: 24
103.142.198.0/24 maxlen: 24
103.167.212.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.167.238.0/23 maxlen: 24
103.168.32.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.168.78.0/24 maxlen: 24
103.169.242.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.84.0/23 maxlen: 24
103.171.110.0/23 maxlen: 24
103.171.174.0/23 maxlen: 24
103.173.98.0/23 maxlen: 24
103.176.139.0/24 maxlen: 24
103.177.226.0/23 maxlen: 24
103.178.202.0/23 maxlen: 24
103.179.10.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.179.102.0/23 maxlen: 24
103.181.56.0/23 maxlen: 24
103.181.212.0/24 maxlen: 24
103.183.30.0/23 maxlen: 24
103.183.32.0/23 maxlen: 24
103.183.34.0/23 maxlen: 24
103.187.96.0/23 maxlen: 24
203.76.178.0/24 maxlen: 24
203.76.180.0/24 maxlen: 24
203.76.181.0/24 maxlen: 24
203.76.188.0/24 maxlen: 24
203.76.190.0/24 maxlen: 24
203.76.191.0/24 maxlen: 24
2001:df2:e200::/48 maxlen: 48
2001:df2:e600::/48 maxlen: 48
2400:7b20::/32 maxlen: 32
2404:7c80::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 11 Jul 2024 06:11:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37952 (0x9440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 9 06:08:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=668cd3d7-f5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:64:42:f5:90:13:7f:65:17:37:f0:ac:9e:b0:
e2:c7:f8:10:63:cf:e8:1f:a1:17:e9:ca:ef:a5:f4:
65:92:01:da:2f:1b:9d:ef:cf:22:ea:84:b3:cf:4b:
8f:4f:d9:03:39:12:89:ed:b3:3c:9b:9e:1e:a5:13:
f1:83:f8:7a:c3:bf:ca:dd:d4:4a:33:5e:dd:52:05:
42:54:85:df:8d:d2:2c:f4:8d:8f:4b:b5:4e:1e:94:
89:f3:45:67:6a:1a:fc:db:f3:94:d9:c7:97:19:23:
48:65:64:44:33:cd:71:53:3f:12:1f:44:d7:9d:f6:
f8:0e:0b:df:57:c8:df:99:be:10:76:b9:dd:d2:28:
e3:fc:c4:b9:02:19:6f:ed:80:63:b0:7e:3d:94:9f:
e4:91:c5:e7:74:18:29:94:e9:a6:25:76:59:40:2c:
77:a0:25:2d:45:d8:76:fb:df:43:52:a5:67:1b:d4:
19:1e:09:c3:96:61:1f:73:9b:a6:2d:fc:79:3b:f0:
88:88:7c:41:fa:99:8c:d9:72:25:87:77:af:01:03:
f6:97:6b:29:3c:ae:d0:8d:06:c5:6b:6d:bb:83:69:
e8:a9:46:b8:ed:45:bd:a6:7c:65:7b:f0:c8:c6:17:
46:0a:42:79:f8:9b:a5:b0:04:9b:c8:d8:47:b8:23:
f2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E1:14:83:C2:2B:99:36:22:6D:A0:5D:1F:1B:A4:88:D0:E8:A0:51
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A6464F03AC511EF996BF762C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.0.32.0/22
101.0.37.0/24
103.73.148.0-103.73.150.255
103.142.198.0/24
103.167.212.0/23
103.167.224.0/23
103.167.238.0/23
103.168.32.0/23
103.168.60.0/23
103.168.78.0/24
103.169.242.0/23
103.170.36.0/22
103.170.84.0/23
103.171.110.0/23
103.171.174.0/23
103.173.98.0/23
103.176.139.0/24
103.177.226.0/23
103.178.202.0/23
103.179.10.0/23
103.179.94.0/23
103.179.102.0/23
103.181.56.0/23
103.181.212.0/24
103.183.30.0-103.183.35.255
103.187.96.0/23
203.76.178.0/24
203.76.180.0/23
203.76.188.0/24
203.76.190.0/23
IPv6:
2001:df2:e200::/48
2001:df2:e600::/48
2400:7b20::/32
2404:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
55:98:e2:fe:9f:a0:95:65:70:94:57:b4:f2:6d:c2:6b:92:4f:
6e:2c:aa:92:52:45:75:7a:5b:df:5e:e1:91:8f:3f:fe:ba:31:
a7:8b:16:f9:de:c3:9b:ad:cb:98:28:dc:f9:4d:d8:e4:fc:d0:
5f:de:65:61:e6:ad:54:90:61:15:38:d1:c4:b9:17:62:66:b1:
32:c4:a3:06:86:74:5a:f7:cc:13:ce:a4:13:8b:40:31:13:70:
1a:51:85:3b:c5:15:09:fd:f4:94:cd:1d:f0:f3:45:b4:62:18:
f6:02:09:c4:96:1e:e5:dd:64:7b:4d:35:85:0a:ee:3c:7b:7a:
18:76:ec:de:cf:ea:03:aa:cc:b1:22:f9:99:8d:5c:08:79:fd:
20:8d:e5:7d:91:ca:ad:31:4c:53:9a:1a:6e:29:21:0c:3f:8e:
5a:bb:c9:72:eb:bc:d5:4b:16:7e:ae:bc:0f:3b:54:47:29:da:
cf:be:08:b3:6e:a2:23:fd:fd:91:dc:dc:76:1b:36:52:4c:a6:
b7:24:4e:7f:65:34:cd:4f:f7:9d:27:d9:47:30:17:dc:72:ab:
0f:f1:5a:92:6e:54:ef:f0:c6:d7:e9:58:a6:01:46:40:ee:99:
6e:4f:37:6d:9d:f6:ea:ce:78:c4:a1:85:8d:fb:d1:fe:65:4c:
5c:cc:9d:24
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIDAJRAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDcwOTA2MDgyNFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY4Y2QzZDctZjVkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN1kQvWQE39lFzfwrJ6w4sf4EGPP6B+hF+nK76X0ZZIB2i8bne/PIuqEs89L
j0/ZAzkSie2zPJueHqUT8YP4esO/yt3USjNe3VIFQlSF343SLPSNj0u1Th6UifNF
Z2oa/NvzlNnHlxkjSGVkRDPNcVM/Eh9E1532+A4L31fI35m+EHa53dIo4/zEuQIZ
b+2AY7B+PZSf5JHF53QYKZTppiV2WUAsd6AlLUXYdvvfQ1KlZxvUGR4Jw5ZhH3Ob
pi38eTvwiIh8QfqZjNlyJYd3rwED9pdrKTyu0I0GxWttu4Np6KlGuO1FvaZ8ZXvw
yMYXRgpCefibpbAEm8jYR7gj8u0CAwEAAaOCA4EwggN9MB0GA1UdDgQWBBQC4RSD
wiuZNiJtoF0fG6SI0OigUTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVBNjQ2NEYw
M0FDNTExRUY5OTZCRjc2MkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBCQYIKwYBBQUHAQcB
Af8EgfkwgfYwgcsEAgABMIHEAwQCZQAgAwQAZQAlMAwDBAJnSZQDBABnSZYDBABn
jsYDBAFnp9QDBAFnp+ADBAFnp+4DBAFnqCADBAFnqDwDBABnqE4DBAFnqfIDBAJn
qiQDBAFnqlQDBAFnq24DBAFnq64DBAFnrWIDBABnsIsDBAFnseIDBAFnssoDBAFn
swoDBAFns14DBAFns2YDBAFntTgDBABntdQwDAMEAWe3HgMEAme3IAMEAWe7YAME
AMtMsgMEActMtAMEAMtMvAMEActMvjAmBAIAAjAgAwcAIAEN8uIAAwcAIAEN8uYA
AwUAJAB7IAMFACQEfIAwDQYJKoZIhvcNAQELBQADggEBAFWY4v6foJVlcJRXtPJt
wmuST24sqpJSRXV6W99e4ZGPP/66MaeLFvnew5uty5go3PlN2OT80F/eZWHmrVSQ
YRU40cS5F2JmsTLEowaGdFr3zBPOpBOLQDETcBpRhTvFFQn99JTNHfDzRbRiGPYC
CcSWHuXdZHtNNYUK7jx7ehh27N7P6gOqzLEi+ZmNXAh5/SCN5X2Ryq0xTFOaGm4p
IQw/jlq7yXLrvNVLFn6uvA87VEcp2s++CLNuoiP9/ZHc3HYbNlJMprckTn9lNM1P
950n2UcwF9xyqw/xWpJuVO/wxtfpWKYBRkDumW5PN22d9urOeMShhY370f5lTFzM
nSQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:30 2025 by rpki-client