Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/851FE196F8C611EFA9A11645C4F9AE02.roa
File: 851FE196F8C611EFA9A11645C4F9AE02.roa (raw, json)
Hash identifier: 3CIG9rm2JIc7eKEsQY4QS1C2U+cmEjBTW8jebGW5k+4=
Subject key identifier: 75:56:93:CC:FD:D5:E1:D6:9B:8E:D0:BC:1F:A3:F8:F1:86:C9:49:A4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A8FE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/851FE196F8C611EFA9A11645C4F9AE02.roa
Signing time: Tue 04 Mar 2025 07:01:39 +0000
ROA not before: Tue 04 Mar 2025 07:01:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.239.152.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.87.128.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.124.10.0/23 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.180.0/23 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.170.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.50.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.159.137.0/24 maxlen: 24
103.167.157.0/24 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
103.171.60.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.58.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.245.170.0/23 maxlen: 24
103.252.192.0/23 maxlen: 24
103.254.96.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43262 (0xa8fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 4 07:01:39 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c6a553-207b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:87:f3:a0:4e:84:88:a7:b5:2f:5f:94:e5:44:
63:b0:ca:e5:19:e7:b8:d7:8f:78:49:8f:f2:ee:12:
78:65:4d:42:ac:ea:f1:a6:8e:55:8d:14:1b:c4:80:
7a:86:50:cf:52:a6:2c:49:5d:83:2e:9a:04:0a:b9:
ce:15:29:12:37:ad:4a:e8:98:e1:34:3b:ef:2a:e2:
0c:60:d5:fb:7e:b6:7d:f1:50:77:a8:d3:08:21:1d:
4b:40:ca:5f:dd:ef:50:cf:b1:56:18:c2:eb:15:74:
ee:2d:8e:d6:31:fc:cc:17:6f:4a:73:cf:11:9f:f3:
7b:82:34:fe:79:51:60:7a:7b:71:5f:4e:51:9a:ef:
b3:46:f6:42:53:04:95:7e:3b:c3:d2:8b:b8:c0:eb:
36:e1:1b:15:19:61:a8:94:07:3b:f1:86:22:31:b3:
52:bc:66:ea:3c:60:b9:8b:c5:07:52:88:f2:84:42:
f8:56:75:98:a2:5b:99:9c:87:16:30:56:d3:5f:7c:
e7:cb:7d:33:44:c9:37:65:17:32:ea:f0:5d:e3:90:
e2:91:a4:33:48:3e:ce:44:37:2b:33:14:b6:07:ae:
a7:46:1e:36:55:fc:55:5e:cf:e3:4d:80:2c:73:9e:
1e:c5:e4:0b:cc:47:a7:79:2a:56:50:7c:78:18:b7:
48:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:56:93:CC:FD:D5:E1:D6:9B:8E:D0:BC:1F:A3:F8:F1:86:C9:49:A4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/851FE196F8C611EFA9A11645C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.239.152.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.87.128.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.124.10.0/23
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.143.180.0/23
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.170.0/23
103.155.194.0/23
103.157.50.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.159.137.0/24
103.167.157.0/24
103.169.58.0/23
103.171.8.0/23
103.171.54.0/23
103.171.60.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.175.58.0/23
103.175.106.0/23
103.180.216.0/23
103.190.12.0/23
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.236.112.0/22
103.245.170.0/23
103.252.192.0/23
103.254.96.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
64:dc:31:bc:6d:85:19:80:42:bf:b7:b5:47:78:ef:17:3c:b2:
37:bc:e0:ca:3a:42:7b:e1:80:2c:95:05:0d:69:26:44:b8:6d:
5a:39:6a:19:30:16:d8:72:62:11:59:ff:42:a3:26:0b:db:79:
7d:cd:78:c9:4c:52:12:84:b4:66:82:c0:22:55:79:0f:75:66:
0c:c5:9a:ec:ca:5e:ee:ee:82:3f:02:2d:ef:1c:3b:fb:a9:b2:
dd:94:9f:28:a7:64:08:20:ac:87:fb:c5:e8:72:96:a8:df:ce:
bf:0f:fa:1e:f6:92:91:5d:70:eb:18:e8:69:a9:eb:8e:e1:86:
95:59:9e:20:69:56:17:22:29:5d:16:a4:54:80:da:66:01:68:
db:62:cf:cf:22:5e:1c:57:8a:5a:dd:ea:54:10:8d:86:33:04:
56:14:20:01:2a:36:cf:8e:20:a5:dc:6d:80:63:77:b1:9d:92:
64:e9:8e:e6:19:da:13:56:19:b1:f8:4b:fe:c5:85:1b:5e:e5:
96:ce:eb:23:45:e1:3b:af:5c:f9:26:98:08:b9:7f:b4:11:0c:
68:e3:e5:8c:08:4f:8f:e6:9b:e3:ce:c2:46:e8:04:7c:e3:d0:
d3:c8:97:9b:0b:aa:e9:70:94:19:94:81:69:da:63:21:9f:52:
f7:cb:55:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:21 2025 by rpki-client