Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66104A24C8CA11EFB4DE0B0BC4F9AE02.roa
File: 66104A24C8CA11EFB4DE0B0BC4F9AE02.roa (raw, json)
Hash identifier: UWXk4XsQwG9+j8Uc2xsFwMeLq7z/w5OeUy48uOY7EXc=
Subject key identifier: BC:D4:D5:2F:D0:C0:90:DF:95:29:6D:17:B1:98:4F:AE:D9:03:CB:E7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A140
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66104A24C8CA11EFB4DE0B0BC4F9AE02.roa
Signing time: Thu 02 Jan 2025 05:28:29 +0000
ROA not before: Thu 02 Jan 2025 05:28:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45433
IP address blocks: 45.64.177.0/24 maxlen: 24
45.64.179.0/24 maxlen: 24
45.118.204.0/24 maxlen: 24
45.118.205.0/24 maxlen: 24
45.118.207.0/24 maxlen: 24
45.127.220.0/24 maxlen: 24
45.127.221.0/24 maxlen: 24
45.127.222.0/24 maxlen: 24
45.250.170.0/24 maxlen: 24
103.23.236.0/24 maxlen: 24
103.23.237.0/24 maxlen: 24
103.23.238.0/24 maxlen: 24
103.23.239.0/24 maxlen: 24
103.36.49.0/24 maxlen: 24
103.36.50.0/24 maxlen: 24
103.36.51.0/24 maxlen: 24
103.39.9.0/24 maxlen: 24
103.39.11.0/24 maxlen: 24
103.58.248.0/24 maxlen: 24
103.58.250.0/24 maxlen: 24
103.70.58.0/24 maxlen: 24
103.131.26.0/24 maxlen: 24
103.157.124.0/24 maxlen: 24
103.157.125.0/24 maxlen: 24
103.157.168.0/24 maxlen: 24
103.157.169.0/24 maxlen: 24
103.175.8.0/24 maxlen: 24
103.175.9.0/24 maxlen: 24
103.179.0.0/24 maxlen: 24
103.179.1.0/24 maxlen: 24
103.194.120.0/24 maxlen: 24
103.196.208.0/24 maxlen: 24
103.196.209.0/24 maxlen: 24
103.196.211.0/24 maxlen: 24
103.207.168.0/24 maxlen: 24
103.207.169.0/24 maxlen: 24
103.207.170.0/24 maxlen: 24
103.207.171.0/24 maxlen: 24
103.209.179.0/24 maxlen: 24
103.255.8.0/24 maxlen: 24
103.255.10.0/24 maxlen: 24
103.255.11.0/24 maxlen: 24
115.178.96.0/24 maxlen: 24
115.178.97.0/24 maxlen: 24
115.178.98.0/24 maxlen: 24
115.178.99.0/24 maxlen: 24
115.178.100.0/24 maxlen: 24
115.178.102.0/24 maxlen: 24
115.178.103.0/24 maxlen: 24
122.102.24.0/24 maxlen: 24
122.102.25.0/24 maxlen: 24
122.102.27.0/24 maxlen: 24
122.102.28.0/24 maxlen: 24
122.102.29.0/24 maxlen: 24
122.102.30.0/24 maxlen: 24
163.53.80.0/22 maxlen: 22
163.53.80.0/24 maxlen: 24
163.53.81.0/24 maxlen: 24
163.53.82.0/24 maxlen: 24
163.53.83.0/24 maxlen: 24
175.111.128.0/24 maxlen: 24
175.111.129.0/24 maxlen: 24
175.111.130.0/24 maxlen: 24
175.111.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 10:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41280 (0xa140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 2 05:28:29 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=677623fd-62b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:b7:b3:69:a8:da:25:19:cb:13:a4:b5:21:
55:27:79:d4:97:8c:37:17:68:ab:41:05:4b:ae:92:
3c:77:97:06:16:d0:f6:f1:6d:2e:cd:89:2d:c7:c9:
4f:b7:f0:5d:9c:cf:ec:17:2d:2e:d9:2c:54:17:22:
f8:6a:95:09:04:91:72:24:dd:4d:a7:66:c9:27:20:
d1:eb:6c:f5:18:93:dc:0a:11:56:4c:1a:29:2f:13:
7c:41:85:45:5e:3b:9b:da:76:77:f7:cb:65:7d:61:
f8:2a:9e:dd:75:73:fe:a7:b3:a6:6f:fa:3e:bc:88:
45:85:b7:86:a8:85:3b:da:74:3e:38:9c:fb:0b:6e:
82:c2:1c:7b:b8:41:cb:24:00:a0:ac:18:60:e7:3f:
e5:51:ae:16:b8:d3:4c:23:12:62:d1:15:0f:c8:e4:
9b:8f:69:16:7c:8d:ca:35:bb:52:a0:b6:79:58:76:
65:fc:99:a9:f2:56:b7:ce:c9:a3:0d:ba:36:e1:a9:
c0:fe:8c:1b:ff:97:6b:78:6d:ea:56:41:ae:5a:dd:
12:7b:d1:b1:94:20:3a:e7:08:83:24:85:12:83:ee:
68:99:f7:fa:65:77:bd:55:6d:b0:bf:de:fe:a7:31:
04:e8:b0:e4:bf:a3:4c:27:0f:45:b9:c5:20:f2:ea:
8c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D4:D5:2F:D0:C0:90:DF:95:29:6D:17:B1:98:4F:AE:D9:03:CB:E7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/66104A24C8CA11EFB4DE0B0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.177.0/24
45.64.179.0/24
45.118.204.0/23
45.118.207.0/24
45.127.220.0-45.127.222.255
45.250.170.0/24
103.23.236.0/22
103.36.49.0-103.36.51.255
103.39.9.0/24
103.39.11.0/24
103.58.248.0/24
103.58.250.0/24
103.70.58.0/24
103.131.26.0/24
103.157.124.0/23
103.157.168.0/23
103.175.8.0/23
103.179.0.0/23
103.194.120.0/24
103.196.208.0/23
103.196.211.0/24
103.207.168.0/22
103.209.179.0/24
103.255.8.0/24
103.255.10.0/23
115.178.96.0-115.178.100.255
115.178.102.0/23
122.102.24.0/23
122.102.27.0-122.102.30.255
163.53.80.0/22
175.111.128.0/22
Signature Algorithm: sha256WithRSAEncryption
14:cf:1c:c4:63:0c:98:d7:01:73:24:a3:18:5e:b2:2e:51:29:
9c:0f:fa:c8:06:60:d9:b1:7d:bb:3d:b3:b0:55:ce:14:16:86:
71:90:18:d4:c4:6a:02:28:23:52:5d:b1:64:3b:01:f9:cc:18:
f4:61:21:3e:b5:7a:47:03:72:78:20:c8:0a:63:01:93:c4:6b:
41:df:c1:01:4f:54:77:37:cd:70:90:17:60:5c:22:12:74:14:
fb:5e:6b:c9:af:1f:d9:d5:a0:29:7c:60:4a:2d:f7:30:39:c4:
1e:16:af:3d:8a:bf:e0:79:5a:ba:e5:6e:fe:63:a7:f6:87:15:
14:85:30:02:5c:6a:62:85:f6:08:69:78:92:86:17:52:51:8d:
6b:a2:91:9a:07:0c:24:28:dc:c2:fc:ec:7e:3a:7a:3d:79:c9:
52:8b:32:b4:4d:0b:38:e3:52:d7:65:2c:e2:88:97:08:66:ab:
de:c9:9b:2e:b3:62:70:bb:73:22:f9:8c:fa:a1:8e:4a:f4:82:
57:82:bd:0a:25:05:d5:90:e5:ee:75:4e:b0:8f:ad:59:18:85:
56:ea:4a:03:f6:13:f1:47:bd:50:58:a1:9d:05:31:71:32:99:
37:48:d3:83:65:63:02:27:ec:5a:2f:fb:63:c8:9d:e3:21:4a:
32:0f:97:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:05 2025 by rpki-client