Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/820006EAF8AD11EE8BFB2850C4F9AE02.roa
File: 820006EAF8AD11EE8BFB2850C4F9AE02.roa (raw, json)
Hash identifier: ULlhDWF1uB2rWtN88M8MT0/yxGtVzM+7Gbqspm85Yb0=
Subject key identifier: 43:D8:B8:C9:DE:43:E5:84:E8:A8:38:3B:B0:28:03:83:39:4D:7B:3D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9547
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/820006EAF8AD11EE8BFB2850C4F9AE02.roa
Signing time: Fri 26 Jul 2024 06:07:24 +0000
ROA not before: Fri 26 Jul 2024 06:07:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17665
IP address blocks: 36.255.88.0/22 maxlen: 24
43.230.40.0/22 maxlen: 24
45.118.104.0/22 maxlen: 24
59.152.120.0/22 maxlen: 24
103.10.224.0/22 maxlen: 24
103.27.48.0/22 maxlen: 24
103.38.68.0/23 maxlen: 24
103.38.128.0/22 maxlen: 24
103.58.152.0/22 maxlen: 24
103.59.204.0/22 maxlen: 24
103.86.68.0/23 maxlen: 24
103.88.57.0/24 maxlen: 24
103.88.58.0/24 maxlen: 24
103.88.59.0/24 maxlen: 24
103.92.112.0/24 maxlen: 24
103.92.113.0/24 maxlen: 24
103.92.114.0/24 maxlen: 24
103.92.115.0/24 maxlen: 24
103.98.36.0/24 maxlen: 24
103.98.37.0/24 maxlen: 24
103.99.196.0/23 maxlen: 24
103.99.198.0/23 maxlen: 24
103.115.129.0/24 maxlen: 24
103.115.130.0/24 maxlen: 24
103.135.64.0/24 maxlen: 24
103.135.65.0/24 maxlen: 24
103.136.172.0/22 maxlen: 24
103.144.188.0/23 maxlen: 24
103.147.1.0/24 maxlen: 24
103.158.170.0/23 maxlen: 24
103.159.98.0/24 maxlen: 24
103.159.212.0/24 maxlen: 24
103.161.40.0/23 maxlen: 24
103.162.74.0/23 maxlen: 24
103.163.125.0/24 maxlen: 24
103.164.46.0/23 maxlen: 24
103.165.28.0/23 maxlen: 24
103.168.177.0/24 maxlen: 24
103.168.232.0/23 maxlen: 24
103.169.156.0/23 maxlen: 24
103.171.9.0/24 maxlen: 24
103.171.208.0/24 maxlen: 24
103.174.159.0/24 maxlen: 24
103.175.30.0/24 maxlen: 24
103.175.31.0/24 maxlen: 24
103.176.176.0/24 maxlen: 24
103.176.194.0/23 maxlen: 24
103.177.174.0/23 maxlen: 24
103.178.168.0/23 maxlen: 24
103.179.122.0/24 maxlen: 24
103.182.130.0/23 maxlen: 24
103.183.54.0/23 maxlen: 24
103.186.121.0/24 maxlen: 24
103.186.176.0/24 maxlen: 24
103.199.192.0/22 maxlen: 24
103.203.36.0/22 maxlen: 24
103.206.8.0/24 maxlen: 24
103.206.9.0/24 maxlen: 24
103.206.10.0/24 maxlen: 24
103.206.11.0/24 maxlen: 24
103.209.68.0/22 maxlen: 22
103.209.68.0/24 maxlen: 24
103.209.69.0/24 maxlen: 24
103.209.70.0/24 maxlen: 24
103.209.71.0/24 maxlen: 24
103.244.224.0/24 maxlen: 24
103.245.103.0/24 maxlen: 24
103.251.52.0/22 maxlen: 24
111.223.24.0/22 maxlen: 24
162.12.246.0/23 maxlen: 24
202.148.60.0/22 maxlen: 24
203.189.248.0/22 maxlen: 24
203.192.192.0/20 maxlen: 24
203.192.208.0/22 maxlen: 24
203.192.212.0/24 maxlen: 24
203.192.213.0/24 maxlen: 24
203.192.214.0/24 maxlen: 24
203.192.215.0/24 maxlen: 24
203.192.216.0/24 maxlen: 24
203.192.217.0/24 maxlen: 24
203.192.218.0/24 maxlen: 24
203.192.219.0/24 maxlen: 24
203.192.220.0/22 maxlen: 24
203.192.224.0/23 maxlen: 24
203.192.226.0/24 maxlen: 24
203.192.227.0/24 maxlen: 24
203.192.228.0/22 maxlen: 24
203.192.232.0/22 maxlen: 24
203.192.236.0/24 maxlen: 24
203.192.237.0/24 maxlen: 24
203.192.238.0/23 maxlen: 24
203.192.240.0/20 maxlen: 20
203.192.240.0/24 maxlen: 24
203.192.241.0/24 maxlen: 24
203.192.242.0/24 maxlen: 24
203.192.243.0/24 maxlen: 24
203.192.244.0/24 maxlen: 24
203.192.245.0/24 maxlen: 24
203.192.246.0/24 maxlen: 24
203.192.247.0/24 maxlen: 24
203.192.248.0/24 maxlen: 24
203.192.249.0/24 maxlen: 24
203.192.250.0/24 maxlen: 24
203.192.251.0/24 maxlen: 24
203.192.252.0/24 maxlen: 24
203.192.253.0/24 maxlen: 24
203.192.254.0/24 maxlen: 24
203.192.255.0/24 maxlen: 24
203.194.96.0/24 maxlen: 24
203.194.97.0/24 maxlen: 24
203.194.98.0/24 maxlen: 24
203.194.99.0/24 maxlen: 24
203.194.100.0/24 maxlen: 24
203.194.101.0/24 maxlen: 24
203.194.102.0/24 maxlen: 24
203.194.103.0/24 maxlen: 24
203.194.104.0/24 maxlen: 24
203.194.105.0/24 maxlen: 24
203.194.106.0/24 maxlen: 24
203.194.107.0/24 maxlen: 24
203.194.108.0/24 maxlen: 24
203.194.109.0/24 maxlen: 24
203.194.110.0/24 maxlen: 24
203.194.111.0/24 maxlen: 24
2001:df1:9980::/48 maxlen: 48
2001:df1:9980:1::/64 maxlen: 64
2001:df1:9980:2::/64 maxlen: 64
2001:df1:9980:3::/64 maxlen: 64
2001:df1:9980:4::/64 maxlen: 64
2001:df1:9980:5::/64 maxlen: 64
2404:ba00::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 Aug 2024 05:18:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38215 (0x9547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 26 06:07:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66a33d1c-89cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:7c:e8:21:44:e5:6d:66:f2:96:77:16:59:
89:a1:20:8c:4a:56:6c:1d:7a:a0:c2:f0:f8:09:65:
b8:92:96:98:95:01:c4:6b:7d:7c:15:25:bd:69:f7:
da:b1:78:e4:68:60:67:b1:4c:d0:09:66:51:c9:39:
cd:f2:26:bc:62:54:8c:88:39:7a:67:15:58:78:d5:
2b:94:80:ce:1c:ad:20:29:b2:c9:35:14:c5:a5:55:
21:88:a1:2c:04:5b:84:b4:e7:8d:eb:fe:42:61:49:
7e:a4:73:7b:c3:01:36:e5:31:68:6f:e5:8f:5f:59:
c0:b7:16:76:a6:3d:72:fe:2d:ea:9c:bd:0b:a5:85:
0a:30:99:ec:f0:b3:0f:2b:25:e4:59:43:da:6d:35:
9b:bd:e2:a9:47:43:c2:d6:ea:40:f8:e7:3c:36:81:
2c:0c:f0:c1:fc:8e:68:e2:dc:cc:a2:e4:dc:04:10:
36:fa:b0:a5:72:af:c4:4e:ab:ae:81:74:bd:1b:74:
58:c0:90:67:2c:02:29:61:1a:45:bb:b9:95:3a:4f:
f5:e9:d6:b4:45:ef:77:f7:aa:40:e1:95:2b:1f:28:
66:bb:31:5a:8c:0b:63:88:62:a6:b4:1c:c0:88:cb:
c3:6a:e5:c1:59:e9:d5:3a:ee:a8:c0:f3:e6:b7:91:
65:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D8:B8:C9:DE:43:E5:84:E8:A8:38:3B:B0:28:03:83:39:4D:7B:3D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/820006EAF8AD11EE8BFB2850C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.88.0/22
43.230.40.0/22
45.118.104.0/22
59.152.120.0/22
103.10.224.0/22
103.27.48.0/22
103.38.68.0/23
103.38.128.0/22
103.58.152.0/22
103.59.204.0/22
103.86.68.0/23
103.88.57.0-103.88.59.255
103.92.112.0/22
103.98.36.0/23
103.99.196.0/22
103.115.129.0-103.115.130.255
103.135.64.0/23
103.136.172.0/22
103.144.188.0/23
103.147.1.0/24
103.158.170.0/23
103.159.98.0/24
103.159.212.0/24
103.161.40.0/23
103.162.74.0/23
103.163.125.0/24
103.164.46.0/23
103.165.28.0/23
103.168.177.0/24
103.168.232.0/23
103.169.156.0/23
103.171.9.0/24
103.171.208.0/24
103.174.159.0/24
103.175.30.0/23
103.176.176.0/24
103.176.194.0/23
103.177.174.0/23
103.178.168.0/23
103.179.122.0/24
103.182.130.0/23
103.183.54.0/23
103.186.121.0/24
103.186.176.0/24
103.199.192.0/22
103.203.36.0/22
103.206.8.0/22
103.209.68.0/22
103.244.224.0/24
103.245.103.0/24
103.251.52.0/22
111.223.24.0/22
162.12.246.0/23
202.148.60.0/22
203.189.248.0/22
203.192.192.0/18
203.194.96.0/20
IPv6:
2001:df1:9980::/48
2404:ba00::/32
Signature Algorithm: sha256WithRSAEncryption
99:c4:3c:65:b9:b4:86:25:a2:3c:82:0f:3c:ee:bf:ea:b1:e2:
ff:16:26:a0:5d:b7:a6:ed:c3:a7:53:7e:fb:11:79:c6:28:3c:
f5:a8:a2:7a:2d:ca:a0:58:64:a4:2a:5a:83:92:bb:5b:0a:72:
e7:f6:f1:f1:e4:68:11:11:0b:13:a9:83:88:8d:ee:83:f6:56:
bf:b8:a0:2a:5d:fd:c9:5f:24:8a:53:ac:dd:34:7f:bf:f8:dc:
4c:84:58:4e:a1:99:86:02:b7:2f:de:8a:0f:37:df:82:98:d5:
4d:28:2b:40:9b:6f:aa:2e:db:8d:f8:3c:b4:eb:72:d7:03:74:
5f:65:68:a3:11:d2:b6:e9:c0:ef:c9:c0:2f:37:fc:3a:72:a8:
57:03:8a:2c:79:11:1d:30:26:38:c5:1b:d9:3a:dc:36:36:83:
c3:45:23:a7:2e:c6:13:fd:f7:a9:12:1f:ca:5f:95:ef:fb:ec:
b6:c6:46:05:7a:05:8c:7f:65:e3:b1:95:68:c6:07:10:69:3c:
15:bc:8d:f8:f9:6b:8e:58:60:95:f2:a7:74:eb:57:17:be:e8:
0a:33:89:30:49:61:9c:60:68:d8:2d:f2:42:8f:40:4d:99:83:
71:87:e2:8d:4d:bc:2a:8a:75:59:53:1d:a4:d5:ec:bd:b3:eb:
28:86:22:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:41 2025 by rpki-client