Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6648CCFEE50E11EFA3557E6DC4F9AE02.roa
File: 6648CCFEE50E11EFA3557E6DC4F9AE02.roa (raw, json)
Hash identifier: YpTUqJqrhcN28YHgvaIlPyQ7e1jQzVJJ4ZuOTRnjT7s=
Subject key identifier: 18:53:C7:21:E3:FF:8F:D3:A2:56:32:57:BD:CA:E4:B0:93:3C:46:9D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A516
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6648CCFEE50E11EFA3557E6DC4F9AE02.roa
Signing time: Fri 07 Feb 2025 04:45:48 +0000
ROA not before: Fri 07 Feb 2025 04:45:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.248.58.0/23 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.109.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.162.0/23 maxlen: 24
103.158.180.0/24 maxlen: 24
103.159.137.0/24 maxlen: 24
103.164.0.0/23 maxlen: 24
103.167.157.0/24 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.78.0/24 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.38.0/23 maxlen: 24
103.174.42.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.182.66.0/23 maxlen: 24
103.190.231.0/24 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.236.112.0/22 maxlen: 24
103.241.140.0/22 maxlen: 24
103.242.236.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 07 Feb 2025 05:10:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42262 (0xa516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 7 04:45:48 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67a58ffc-ff27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:36:59:d5:8a:3a:d4:a9:84:bc:bc:47:08:
96:81:e8:bf:56:82:9c:aa:31:31:ca:71:6b:08:96:
bd:97:9e:75:5e:43:8c:2f:ee:6d:57:6d:ec:e4:dc:
fa:a2:df:ad:d4:2c:8e:a6:5c:d4:f4:59:72:8e:57:
7e:79:ae:9d:44:fd:d1:a6:89:97:15:60:cf:c9:2d:
5e:ac:b0:da:aa:4f:80:2d:a6:28:af:ad:20:77:da:
ba:5d:72:10:cc:64:f2:b8:02:37:00:c5:cd:eb:05:
ee:5e:36:9f:9e:c4:e6:41:64:61:4f:85:0b:a0:44:
4f:7d:ed:07:90:f8:3b:63:10:be:8b:54:d5:d3:bc:
1b:48:ce:8d:bd:d8:82:9c:75:c5:50:ce:b0:28:84:
b4:d8:1b:e4:85:3c:32:3a:0b:c1:de:e0:d6:c9:69:
c9:79:8e:41:91:81:a5:50:e3:cd:e2:84:45:9e:0f:
36:f1:8b:e3:23:23:1f:39:9a:6d:1b:fb:f8:58:e1:
ba:70:55:89:6c:1b:03:66:fd:5b:f9:a6:b0:bf:0b:
b3:0f:0c:eb:bf:7d:8f:ad:68:17:39:1d:c1:ae:95:
55:36:77:c8:52:b0:04:49:74:6e:e0:0d:15:e6:49:
77:d4:59:e4:37:f3:26:ed:67:1c:05:a0:25:da:34:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:53:C7:21:E3:FF:8F:D3:A2:56:32:57:BD:CA:E4:B0:93:3C:46:9D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6648CCFEE50E11EFA3557E6DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.231.116.0/22
43.239.112.0/22
43.248.58.0/23
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.143.109.0/24
103.144.112.0/23
103.153.208.0/23
103.155.194.0/23
103.157.162.0/23
103.158.180.0/24
103.159.137.0/24
103.164.0.0/23
103.167.157.0/24
103.171.8.0/23
103.171.78.0/24
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.38.0/23
103.174.42.0/23
103.180.216.0/23
103.182.66.0/23
103.190.231.0/24
103.192.72.0/22
103.199.92.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.236.112.0/22
103.241.140.0/22
103.242.236.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
220.158.140.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
54:a0:20:4b:ed:27:a2:5f:09:9e:75:71:5d:db:8c:98:ad:24:
3a:69:5a:41:e2:70:8a:fe:e4:27:aa:3a:02:09:46:43:d3:ec:
65:e5:a8:74:57:d6:cd:3a:c9:2d:cd:d9:ae:2e:e5:b7:0e:2a:
af:59:a2:5d:de:3d:03:6d:cb:db:57:74:a4:da:b9:17:2f:d4:
82:51:44:6b:90:99:1a:9a:74:5b:d5:f6:6c:d7:e8:52:cc:12:
55:7c:6b:f3:4a:20:ea:e0:cc:fd:22:af:c2:2c:87:00:1f:49:
2c:d8:8e:f4:8e:4e:a3:27:f8:ac:c6:9e:af:f0:a3:3d:09:9b:
2d:f3:f3:51:1d:1c:aa:6a:81:69:4e:75:59:68:0d:4c:d9:d7:
03:16:a8:e8:c7:b0:b7:89:ee:51:37:77:eb:a0:32:f3:65:c3:
b6:ee:07:79:ad:1b:9f:24:53:49:e0:a0:37:f9:5d:87:5a:63:
08:b9:f6:fc:6f:54:92:e1:7a:d7:6e:c7:9c:d3:e3:82:1a:bd:
0d:41:6e:45:18:c1:cb:c1:08:4e:f9:b3:87:40:cf:86:91:af:
18:dd:c4:f4:84:16:74:59:fb:ee:06:2a:c9:4d:a1:fb:73:9c:
f0:e8:e8:32:6e:7d:f9:01:8c:c7:1b:a9:16:44:6f:21:7e:47:
97:a1:96:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:02:02 2025 by rpki-client