Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67841212FF4A11EFA929C92BC4F9AE02.roa
File: 67841212FF4A11EFA929C92BC4F9AE02.roa (raw, json)
Hash identifier: KkXZ6T2AKwK+tX7esz2TARsln/zz6ZKvZUSWqvnGQkk=
Subject key identifier: 0A:A2:95:4F:67:D6:CF:4A:FC:B1:DC:0E:DE:AB:44:89:76:C3:CF:8D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AADD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67841212FF4A11EFA929C92BC4F9AE02.roa
Signing time: Wed 12 Mar 2025 14:00:50 +0000
ROA not before: Wed 12 Mar 2025 14:00:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.239.152.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
45.251.32.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.98.79.0/24 maxlen: 24
103.99.48.0/23 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.127.188.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.135.60.0/22 maxlen: 24
103.137.48.0/22 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.180.0/23 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.170.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.50.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.158.216.0/23 maxlen: 24
103.159.137.0/24 maxlen: 24
103.162.80.0/23 maxlen: 24
103.165.26.0/23 maxlen: 24
103.166.220.0/23 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
103.171.60.0/23 maxlen: 24
103.171.208.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.172.56.0/23 maxlen: 24
103.172.90.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.26.0/23 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.12.0/23 maxlen: 24
103.175.58.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.191.86.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.234.64.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.245.170.0/23 maxlen: 24
103.254.96.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
202.9.55.0/24 maxlen: 24
203.191.56.0/22 maxlen: 24
2001:df0:1480::/48 maxlen: 48
2001:df7:8980::/48 maxlen: 48
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
2401:2a20::/32 maxlen: 40
2406:68c0::/32 maxlen: 40
2407:1340::/32 maxlen: 32
2407:4540::/32 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43741 (0xaadd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 12 14:00:50 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67d19392-0bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:41:4a:72:e6:b4:b4:0a:11:28:0f:19:b6:44:
97:60:31:2d:0c:62:29:e6:8a:5c:1b:42:07:99:28:
e1:3e:ce:4f:bd:ac:63:cb:bc:f7:42:88:9b:73:4a:
74:a7:3f:90:9b:44:27:35:98:b1:7a:78:02:ad:a7:
4d:cb:1f:4b:c6:df:4b:a9:c0:6a:de:f2:16:26:41:
38:a6:91:8e:71:45:aa:91:63:08:d6:3c:28:d9:60:
33:da:09:6f:c3:1f:e1:fc:e7:12:3e:dc:7c:b2:52:
76:9d:36:53:5e:e3:9c:35:c6:05:15:57:78:23:91:
a3:8e:3c:bd:90:c1:c8:2e:4c:f2:58:77:a8:b4:27:
24:3b:70:c6:bc:80:43:88:72:6b:90:52:7a:be:47:
fe:86:50:ab:87:13:98:e0:87:0b:68:fb:8a:0c:13:
da:bd:8a:8a:8f:fc:38:fa:82:c3:13:b0:19:63:60:
e8:3b:2d:64:70:41:00:0d:7f:9b:bc:53:72:61:77:
19:ab:5a:fe:28:f7:09:e0:22:75:0a:fa:cb:76:4a:
e0:bd:25:79:2a:4b:04:49:7a:b9:9f:93:3a:dd:2c:
8e:6b:b7:43:2b:90:78:04:18:3e:4d:20:b3:8c:bd:
30:db:7b:cc:3f:46:fe:5d:12:42:82:8f:06:ad:6b:
38:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A2:95:4F:67:D6:CF:4A:FC:B1:DC:0E:DE:AB:44:89:76:C3:CF:8D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67841212FF4A11EFA929C92BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.239.152.0/22
45.114.156.0/22
45.251.32.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.98.79.0/24
103.99.48.0/23
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.127.188.0/22
103.132.203.0/24
103.133.116.0/24
103.135.60.0/22
103.137.48.0/22
103.139.88.0/23
103.142.64.0/23
103.143.180.0/23
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.170.0/23
103.155.194.0/23
103.157.50.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.158.216.0/23
103.159.137.0/24
103.162.80.0/23
103.165.26.0/23
103.166.220.0/23
103.169.58.0/23
103.171.8.0/23
103.171.54.0/23
103.171.60.0/23
103.171.208.0/23
103.171.236.0/23
103.172.56.0/23
103.172.90.0/23
103.173.14.0/23
103.173.41.0/24
103.174.26.0/23
103.174.42.0/23
103.175.12.0/23
103.175.58.0/23
103.175.106.0/23
103.176.142.0/24
103.180.216.0/23
103.190.12.0/23
103.191.86.0/23
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.234.64.0/22
103.236.112.0/22
103.245.170.0/23
103.254.96.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
202.9.55.0/24
203.191.56.0/22
IPv6:
2001:df0:1480::/48
2001:df7:8980::/48
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
2401:2a20::/32
2406:68c0::/32
2407:1340::/32
2407:4540::/32
Signature Algorithm: sha256WithRSAEncryption
85:c3:ba:20:ef:56:8c:45:f3:e0:e5:97:2c:c8:9a:0f:61:c3:
e3:e2:24:ea:a6:d7:6b:d8:dd:7d:de:e5:53:70:8d:73:7e:31:
85:6f:fe:c7:65:29:bc:20:16:1e:7d:1e:11:0e:73:fd:c9:aa:
32:e3:c1:55:50:96:1e:54:5b:3d:4a:d4:91:6d:08:d3:0c:77:
fb:c4:8d:6f:87:10:15:1b:a6:d0:46:7b:a0:43:3f:0e:b4:5d:
66:0a:d2:52:c8:97:15:9e:c8:a1:78:e1:42:66:4f:8a:0b:4b:
b8:9e:a1:79:94:04:60:c7:36:24:4e:93:99:93:0d:4d:ae:a2:
84:fc:4f:60:d0:df:06:03:92:47:0b:f5:be:07:19:e0:a5:32:
b6:72:e1:29:4d:21:bf:4c:fd:c3:2e:64:33:27:fc:8f:c8:f3:
67:d1:3f:d4:85:96:3d:3d:8a:a7:55:45:8b:e9:79:d3:8c:59:
13:58:67:f4:b9:7a:f7:7f:85:53:c0:f7:b4:b3:34:0e:23:e6:
a6:4b:50:f8:82:0c:0b:e4:61:c6:54:7b:6a:8d:a0:91:b4:bb:
f3:3a:4f:32:77:42:d7:2a:91:94:68:15:b1:4e:8a:8e:d5:c1:
aa:6e:52:a4:a9:4e:2b:ca:e5:9f:26:be:68:8b:c1:d9:6b:38:
97:b9:f8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:24 2025 by rpki-client