Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65836010E54D11EFA53C4718C4F9AE02.roa
File: 65836010E54D11EFA53C4718C4F9AE02.roa (raw, json)
Hash identifier: 5A7H+OoUgBTNKfU4ycXSrVVAMbE6QLpvPrchrVqFcpY=
Subject key identifier: CF:3A:E2:49:4F:B6:4E:13:E0:49:18:6B:AA:69:F4:90:21:DF:10:6B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A563
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65836010E54D11EFA53C4718C4F9AE02.roa
Signing time: Fri 07 Feb 2025 12:16:45 +0000
ROA not before: Fri 07 Feb 2025 12:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.109.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.144.188.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.158.180.0/24 maxlen: 24
103.159.137.0/24 maxlen: 24
103.164.0.0/23 maxlen: 24
103.167.157.0/24 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.242.236.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42339 (0xa563)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 7 12:16:45 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67a5f9ad-d0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:06:d7:f9:43:17:c9:54:25:98:6f:4b:4c:
27:71:49:ca:ad:55:03:d0:1f:f9:4e:49:45:3f:e8:
20:1f:19:6d:9f:1b:b2:84:03:71:e5:cd:3b:77:73:
86:e7:84:77:5c:70:0f:29:c5:1a:ef:d2:cb:ac:1c:
42:f0:41:ef:f4:34:0a:3f:97:5d:e8:44:a5:80:3c:
e2:0e:3f:a2:1d:11:0c:25:4e:02:82:84:c5:54:f3:
47:56:b8:48:a1:1c:dd:16:50:87:a0:22:3b:64:fa:
bc:48:e5:93:d4:fc:6b:a5:46:4a:e6:1e:23:10:51:
71:37:24:30:ba:d9:7e:5b:52:75:6c:da:1c:92:73:
45:ed:41:74:aa:bb:97:ea:f3:60:e8:00:70:05:e1:
5e:91:1a:06:90:47:0c:ab:79:e0:c1:bb:f4:e8:29:
ab:87:b9:68:82:a0:2f:a5:89:1e:7e:5d:05:ff:87:
82:e4:b5:88:11:04:f1:d9:90:f8:d1:31:c5:59:49:
7e:cf:d6:31:51:60:20:ab:59:c5:ec:1c:a6:c8:73:
d6:61:34:be:18:13:03:88:a1:72:8a:72:33:18:21:
8e:08:8c:68:7f:a5:6b:89:7b:0f:c1:86:46:8c:cc:
86:36:3e:af:b3:54:7e:b4:90:1c:41:80:24:b1:c8:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:3A:E2:49:4F:B6:4E:13:E0:49:18:6B:AA:69:F4:90:21:DF:10:6B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65836010E54D11EFA53C4718C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.143.109.0/24
103.144.112.0/23
103.144.188.0/23
103.153.208.0/23
103.155.194.0/23
103.158.180.0/24
103.159.137.0/24
103.164.0.0/23
103.167.157.0/24
103.171.8.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.180.216.0/23
103.192.72.0/22
103.199.92.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.236.112.0/22
103.242.236.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
220.158.140.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
2f:46:26:36:0e:c1:b9:7b:8f:f1:eb:c1:b8:6d:b6:f3:68:8c:
36:35:bb:db:84:35:d5:64:e7:7d:59:55:ab:2e:65:af:34:be:
9b:ba:41:46:0d:1f:f3:c9:c6:d4:bf:ae:b7:12:9e:7c:f2:19:
ae:2a:52:08:58:f2:b1:33:a9:8f:14:ab:88:f2:e8:c5:07:e7:
22:93:c1:5c:bf:44:4c:5a:56:83:10:0f:62:2c:02:f9:66:0e:
63:12:ff:01:78:c1:cb:cd:fa:6f:3c:09:b3:c8:e0:86:fe:45:
28:12:60:c8:cb:d4:1d:e0:10:01:71:5f:bf:fe:fc:eb:a2:01:
c8:28:a4:a7:58:84:e3:3b:7e:da:df:c9:54:58:6c:34:cd:5f:
52:b5:77:56:93:88:42:c3:ee:42:d6:f6:7b:66:b2:42:20:a4:
9d:b5:17:2c:6b:69:90:9d:d3:52:95:5b:a0:b4:19:0a:4d:2c:
3b:47:ae:00:af:39:6a:40:72:9a:b7:a7:19:5e:33:ee:20:4a:
9b:81:de:4b:b4:9b:ca:8a:9d:b9:14:b1:de:03:dd:43:76:cf:
8a:4f:1d:95:3a:17:53:a8:5e:61:6d:15:b9:fc:5f:d4:2d:f4:
4b:4a:15:ba:07:b7:41:c8:29:96:18:c1:06:22:30:67:53:34:
dd:39:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:40 2025 by rpki-client