Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6976A49CFF3911EF85463D4DC4F9AE02.roa
File: 6976A49CFF3911EF85463D4DC4F9AE02.roa (raw, json)
Hash identifier: B1XWFdQC3eZJZ+PFF1Yw5n0lGK5wymA1j65HXBuoBig=
Subject key identifier: 43:E4:E7:67:24:81:9A:9E:81:3C:83:A6:E6:98:C5:CC:B0:F5:89:E1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AAD2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6976A49CFF3911EF85463D4DC4F9AE02.roa
Signing time: Wed 12 Mar 2025 11:59:12 +0000
ROA not before: Wed 12 Mar 2025 11:59:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.239.152.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
45.251.32.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.98.79.0/24 maxlen: 24
103.99.48.0/23 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.124.172.0/22 maxlen: 24
103.127.188.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.135.60.0/22 maxlen: 24
103.137.48.0/22 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.180.0/23 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.170.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.50.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.158.216.0/23 maxlen: 24
103.159.137.0/24 maxlen: 24
103.162.80.0/23 maxlen: 24
103.165.26.0/23 maxlen: 24
103.166.220.0/23 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
103.171.60.0/23 maxlen: 24
103.171.208.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.172.56.0/23 maxlen: 24
103.172.90.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.26.0/23 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.12.0/23 maxlen: 24
103.175.58.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.191.86.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.234.64.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.245.170.0/23 maxlen: 24
103.254.96.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
202.9.55.0/24 maxlen: 24
203.191.56.0/22 maxlen: 24
2001:df0:1480::/48 maxlen: 48
2001:df7:8980::/48 maxlen: 48
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
2401:2a20::/32 maxlen: 40
2406:68c0::/32 maxlen: 40
2407:1340::/32 maxlen: 32
2407:4540::/32 maxlen: 40
Validation: Failed, certificate revoked on Wed 12 Mar 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43730 (0xaad2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 12 11:59:12 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67d17710-ca5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a8:a7:cf:cf:37:fa:79:3c:d7:83:7c:fa:db:
d8:e4:13:7f:c1:9a:bf:8d:e3:4a:5e:e2:89:31:ed:
c0:25:c1:65:d8:c4:7d:d6:62:1b:35:aa:e9:fc:97:
fa:ed:bb:90:c5:a8:a6:f1:0d:dc:43:80:ba:62:e3:
12:21:81:23:ff:ec:ca:a5:8f:b7:86:ef:c8:d2:e8:
46:84:53:58:95:39:9a:55:73:8d:2b:a9:68:80:00:
ff:43:9f:fa:d8:57:49:d2:3a:6c:bf:2f:d7:fe:ec:
14:ea:1d:3a:b9:28:b7:02:e9:dd:d6:e8:b4:b9:4b:
8f:38:37:3f:a1:8c:f3:23:c2:d4:be:64:16:75:3d:
69:34:a1:69:21:8a:fc:41:cf:17:07:2e:be:76:44:
fe:66:65:e0:9f:a2:4b:bf:91:77:2c:22:c5:4d:02:
02:c0:4f:b1:32:42:71:91:72:22:f4:44:2b:a0:36:
98:fe:e6:22:c8:de:9a:59:56:f9:80:59:61:83:28:
64:79:72:d0:ac:f5:d8:38:4c:cc:52:15:22:dc:f0:
d5:f3:9e:9e:ab:70:2c:8b:08:c5:85:49:73:bc:e1:
23:99:f4:97:00:66:c7:94:0e:5f:e7:c9:97:15:b5:
5d:0a:71:59:75:0c:a7:5b:04:f3:96:e9:b5:e4:6b:
62:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E4:E7:67:24:81:9A:9E:81:3C:83:A6:E6:98:C5:CC:B0:F5:89:E1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6976A49CFF3911EF85463D4DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.239.152.0/22
45.114.156.0/22
45.251.32.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.98.79.0/24
103.99.48.0/23
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.124.172.0/22
103.127.188.0/22
103.132.203.0/24
103.133.116.0/24
103.135.60.0/22
103.137.48.0/22
103.139.88.0/23
103.142.64.0/23
103.143.180.0/23
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.170.0/23
103.155.194.0/23
103.157.50.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.158.216.0/23
103.159.137.0/24
103.162.80.0/23
103.165.26.0/23
103.166.220.0/23
103.169.58.0/23
103.171.8.0/23
103.171.54.0/23
103.171.60.0/23
103.171.208.0/23
103.171.236.0/23
103.172.56.0/23
103.172.90.0/23
103.173.14.0/23
103.173.41.0/24
103.174.26.0/23
103.174.42.0/23
103.175.12.0/23
103.175.58.0/23
103.175.106.0/23
103.176.142.0/24
103.180.216.0/23
103.190.12.0/23
103.191.86.0/23
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.234.64.0/22
103.236.112.0/22
103.245.170.0/23
103.254.96.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
202.9.55.0/24
203.191.56.0/22
IPv6:
2001:df0:1480::/48
2001:df7:8980::/48
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
2401:2a20::/32
2406:68c0::/32
2407:1340::/32
2407:4540::/32
Signature Algorithm: sha256WithRSAEncryption
00:2e:61:14:36:53:f9:a6:e3:56:c0:80:42:88:2e:4b:90:53:
2d:98:51:99:c6:ef:7c:69:ca:89:10:37:43:41:7b:0a:b6:e9:
04:6f:50:97:ce:2d:97:76:67:8a:d7:94:ab:cb:14:ff:94:83:
21:e8:96:37:2d:85:4d:fd:b3:f0:4f:db:bc:09:d0:b9:70:6a:
7f:69:e3:6c:12:3f:7c:9a:49:d8:15:44:1b:95:1e:6a:68:76:
0c:32:03:62:bd:ac:41:63:9f:75:72:95:0b:4c:60:ba:3e:6b:
bb:c9:d5:03:14:88:3e:9c:1b:2c:3e:2b:4e:d3:42:48:8a:73:
65:15:69:df:fa:a1:8b:a8:83:ae:74:ad:4c:25:3d:9a:8f:51:
9b:f2:0f:27:18:13:b0:84:8e:e1:7e:3b:e0:31:6a:44:cc:f0:
f7:bb:f7:66:c9:19:51:56:93:35:00:cc:28:db:47:e2:1d:3e:
13:fd:38:18:0e:56:e8:76:7d:6f:5f:db:18:13:95:5e:85:2a:
0a:71:24:51:f5:0b:67:a6:e4:78:1c:44:c6:b2:19:50:6f:f5:
5e:d3:bc:3a:e7:5b:ac:63:90:f4:79:f5:e5:38:9e:cd:be:0c:
22:06:7d:09:ff:ae:a6:b3:ca:d3:4b:d0:59:21:d8:4d:66:88:
97:68:33:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:31 2025 by rpki-client