Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68879A7027DD11EFB7CFDB18C4F9AE02.roa
File: 68879A7027DD11EFB7CFDB18C4F9AE02.roa (raw, json)
Hash identifier: FKD6iu9DP70s9rKwCYIUia98LpoD8Eh2Eb0wRDH7898=
Subject key identifier: BC:D5:51:B1:CA:EF:5F:83:93:79:D0:12:11:CD:02:BE:A7:1D:FC:35
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9A6A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68879A7027DD11EFB7CFDB18C4F9AE02.roa
Signing time: Mon 30 Sep 2024 10:43:29 +0000
ROA not before: Mon 30 Sep 2024 10:43:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133001
IP address blocks: 43.225.160.0/22 maxlen: 24
43.251.216.0/22 maxlen: 24
45.117.220.0/22 maxlen: 24
45.119.44.0/24 maxlen: 24
45.119.45.0/24 maxlen: 24
45.119.46.0/24 maxlen: 24
45.119.47.0/24 maxlen: 24
103.38.36.0/22 maxlen: 24
103.42.166.0/23 maxlen: 24
103.51.132.0/24 maxlen: 24
103.51.133.0/24 maxlen: 24
103.51.134.0/24 maxlen: 24
103.51.135.0/24 maxlen: 24
103.54.76.0/24 maxlen: 24
103.54.77.0/24 maxlen: 24
103.110.102.0/24 maxlen: 24
103.114.0.0/22 maxlen: 23
103.114.2.0/23 maxlen: 24
103.116.147.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.140.26.0/24 maxlen: 24
103.140.27.0/24 maxlen: 24
103.156.98.0/23 maxlen: 24
103.165.68.0/24 maxlen: 24
103.165.69.0/24 maxlen: 24
103.176.74.0/23 maxlen: 24
103.176.210.0/24 maxlen: 24
103.176.211.0/24 maxlen: 24
103.196.76.0/22 maxlen: 24
103.200.74.0/23 maxlen: 23
103.201.148.0/22 maxlen: 24
103.239.168.0/24 maxlen: 24
103.239.169.0/24 maxlen: 24
103.239.170.0/24 maxlen: 24
103.239.171.0/24 maxlen: 24
111.125.225.0/24 maxlen: 24
157.119.202.0/24 maxlen: 24
183.87.251.0/24 maxlen: 24
183.87.252.0/22 maxlen: 24
202.94.160.0/22 maxlen: 24
2401:b240::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 14 Oct 2024 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39530 (0x9a6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Sep 30 10:43:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66fa80d0-dcf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c2:8e:70:55:39:1d:36:4a:b6:8a:88:ac:ef:
e9:77:9e:a3:26:16:f2:1a:f6:40:4a:96:8e:b0:16:
c6:e7:50:a5:57:b9:60:69:3c:d5:5a:17:d4:56:65:
54:32:d3:d0:20:d5:e1:63:41:ec:1a:4d:74:f3:d0:
60:8b:8a:7b:19:44:54:cf:e5:ab:d9:9b:cf:0f:a6:
9f:f4:e6:d5:57:42:ee:e2:7d:49:a2:49:f6:ca:1d:
ba:ca:66:76:0c:84:9f:f6:df:36:a4:c3:5a:b2:29:
f5:20:40:a8:c8:9e:68:8a:14:ac:33:6f:4c:d9:2e:
26:8f:97:d0:fd:9c:5b:bf:a9:b3:86:5b:66:a7:fe:
0a:8d:f3:0d:d8:46:a3:a4:ba:e8:6c:6c:42:64:b0:
ef:d5:65:05:6b:c4:00:28:32:69:97:64:67:b4:35:
c9:17:cb:ef:02:b1:ae:d4:53:9c:e2:ee:e6:4c:94:
50:40:51:c8:62:00:6e:f2:07:1e:86:57:7c:54:8a:
61:cb:c8:9e:ce:ac:74:37:f9:c0:0a:b6:5a:79:20:
be:e1:a0:59:82:06:5b:40:42:a0:6b:be:85:b8:5d:
f4:ec:22:f1:5f:01:fd:46:f2:d4:52:e7:1b:e9:59:
ea:1e:69:bc:eb:da:48:93:aa:64:63:09:b3:bf:2f:
7e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D5:51:B1:CA:EF:5F:83:93:79:D0:12:11:CD:02:BE:A7:1D:FC:35
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68879A7027DD11EFB7CFDB18C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.160.0/22
43.251.216.0/22
45.117.220.0/22
45.119.44.0/22
103.38.36.0/22
103.42.166.0/23
103.51.132.0/22
103.54.76.0/23
103.110.102.0/24
103.114.0.0/22
103.116.147.0/24
103.133.116.0/24
103.140.26.0/23
103.156.98.0/23
103.165.68.0/23
103.176.74.0/23
103.176.210.0/23
103.196.76.0/22
103.200.74.0/23
103.201.148.0/22
103.239.168.0/22
111.125.225.0/24
157.119.202.0/24
183.87.251.0-183.87.255.255
202.94.160.0/22
IPv6:
2401:b240::/32
Signature Algorithm: sha256WithRSAEncryption
5e:7d:51:af:86:48:f8:df:cb:f2:cc:e3:5d:6f:25:b0:58:e6:
8d:7b:0b:01:b5:bf:89:b0:03:e9:80:cb:fb:d1:f7:d6:af:6f:
76:83:5d:45:25:83:d8:a2:b1:54:33:6b:5c:f7:84:07:bd:87:
ac:e5:52:64:45:42:a0:ca:36:3b:cf:ac:d0:33:e4:37:91:7d:
0c:16:22:5b:f4:b0:89:88:79:26:26:1a:7d:cf:04:4c:92:26:
33:a3:b0:67:7b:e4:dc:51:c8:ce:32:eb:09:76:f2:2a:7a:d3:
08:a2:66:cc:3c:5d:5c:bd:37:cf:ba:c4:53:32:4d:48:f6:65:
2f:7e:83:0f:e0:4f:ed:62:72:51:83:9e:6b:64:62:c1:15:71:
34:10:e3:9b:9a:0f:41:03:13:e8:a4:40:77:bb:23:c7:38:56:
60:46:f5:a9:47:70:9b:d4:6e:d9:46:d8:e8:0b:7a:52:fb:a8:
d4:8e:51:04:e2:b5:90:95:0e:08:92:45:5e:17:c2:1c:4b:88:
f0:f0:34:91:a3:89:a2:25:70:1e:7f:64:09:dd:5d:48:81:33:
cb:6f:2f:55:bc:5a:20:92:8c:fc:b6:b3:a5:08:8a:6b:80:d5:
31:d5:f2:78:47:7b:ab:cd:be:ea:b4:a6:ba:29:47:07:24:09:
1f:8d:71:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 07:26:36 2025 by rpki-client