Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85571E2608AD11F09ABF2915C4F9AE02.roa
File: 85571E2608AD11F09ABF2915C4F9AE02.roa (raw, json)
Hash identifier: RyQbt9kK4XZ5CT32Zf2leK0UcsQyjHIE/1gNiMrEs0c=
Subject key identifier: 5C:A9:41:3F:6E:E4:52:71:33:F4:95:C9:64:D7:E3:8A:B0:56:F7:B6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AC40
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85571E2608AD11F09ABF2915C4F9AE02.roa
Signing time: Mon 24 Mar 2025 12:43:01 +0000
ROA not before: Mon 24 Mar 2025 12:43:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.239.152.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
45.251.32.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.44.104.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.51.152.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.44.0/23 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.98.79.0/24 maxlen: 24
103.99.48.0/23 maxlen: 24
103.108.76.0/22 maxlen: 24
103.109.108.0/22 maxlen: 24
103.110.72.0/23 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.135.60.0/22 maxlen: 24
103.136.64.0/22 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.180.0/23 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.170.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.50.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.158.216.0/23 maxlen: 24
103.159.137.0/24 maxlen: 24
103.159.178.0/23 maxlen: 24
103.161.64.0/23 maxlen: 24
103.162.80.0/23 maxlen: 24
103.165.10.0/23 maxlen: 24
103.165.20.0/23 maxlen: 24
103.165.26.0/23 maxlen: 24
103.166.220.0/23 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
103.171.60.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.26.0/23 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.12.0/23 maxlen: 24
103.175.58.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.191.86.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.234.64.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.245.170.0/23 maxlen: 24
103.254.96.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
115.166.132.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
202.9.55.0/24 maxlen: 24
203.191.56.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44096 (0xac40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 24 12:43:01 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67e15355-cf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:5f:d6:f8:a5:eb:f0:c4:19:b7:2b:68:85:
8e:27:8d:9a:9b:6a:2d:9a:a8:8d:5a:c0:4f:b7:55:
c3:b2:bc:f0:75:c7:6c:0d:d9:bc:da:af:41:8f:a2:
e5:78:7f:a5:97:95:63:6f:27:12:ce:74:f7:2c:ca:
c6:f4:0f:5e:15:b5:61:e9:9a:b1:2c:30:4c:a7:35:
f1:5e:c6:2e:cb:1d:7d:40:24:7a:45:73:72:9e:f7:
6a:f4:b3:cd:62:11:1e:32:35:08:26:7d:c4:5e:68:
3c:a4:ff:90:f0:21:b0:b6:ce:20:ca:d5:76:43:86:
03:cf:3f:73:51:42:f6:42:44:91:00:ee:9f:89:ec:
e6:32:7e:3b:3b:5e:11:26:f5:99:6f:40:77:c4:21:
fe:df:27:17:15:7c:75:88:af:1e:cd:6a:1d:96:87:
88:63:75:10:50:ce:fb:6c:ef:9b:b5:6a:f6:6b:6f:
3c:8f:14:83:3c:a2:4c:5f:56:24:75:8e:87:b6:b7:
e1:82:85:01:53:b6:f0:fb:6f:03:9a:3d:36:75:85:
7f:42:35:79:9b:76:b9:cd:a3:72:36:8a:43:ca:a4:
29:ee:5d:aa:c9:f4:41:c8:36:d9:c3:43:16:7f:b2:
83:68:82:32:40:25:71:a0:c4:cd:59:b1:e9:88:d8:
ba:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A9:41:3F:6E:E4:52:71:33:F4:95:C9:64:D7:E3:8A:B0:56:F7:B6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/85571E2608AD11F09ABF2915C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.239.152.0/22
45.114.156.0/22
45.251.32.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.44.104.0/22
103.47.152.0/24
103.51.92.0/22
103.51.152.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.44.0/23
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.98.79.0/24
103.99.48.0/23
103.108.76.0/22
103.109.108.0/22
103.110.72.0/23
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.135.60.0/22
103.136.64.0/22
103.139.88.0/23
103.142.64.0/23
103.143.180.0/23
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.170.0/23
103.155.194.0/23
103.157.50.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.158.216.0/23
103.159.137.0/24
103.159.178.0/23
103.161.64.0/23
103.162.80.0/23
103.165.10.0/23
103.165.20.0/23
103.165.26.0/23
103.166.220.0/23
103.169.58.0/23
103.171.8.0/23
103.171.54.0/23
103.171.60.0/23
103.171.236.0/23
103.173.41.0/24
103.174.26.0/23
103.174.42.0/23
103.175.12.0/23
103.175.58.0/23
103.175.106.0/23
103.176.142.0/24
103.180.216.0/23
103.190.12.0/23
103.191.86.0/23
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.234.64.0/22
103.236.112.0/22
103.245.170.0/23
103.254.96.0/22
103.254.200.0/22
115.166.132.0/22
137.59.204.0/22
139.5.96.0/22
202.9.55.0/24
203.191.56.0/22
Signature Algorithm: sha256WithRSAEncryption
66:63:9e:20:8b:19:60:72:85:07:3f:0c:a9:89:24:60:86:82:
18:50:00:3a:7a:7f:f6:90:a1:3f:96:9e:9e:c7:a0:74:47:46:
4a:39:57:ac:26:84:75:a5:a1:33:8f:a4:6a:db:24:71:eb:78:
5a:97:c4:51:13:65:8f:72:c7:44:a1:0c:cc:89:0d:a1:29:07:
8c:97:c5:8d:82:e0:1e:d6:85:55:75:26:f1:3b:f6:a2:48:59:
5f:f0:6f:33:8d:49:08:05:b4:31:36:32:04:c9:d6:80:16:c5:
27:26:5f:83:1c:80:b6:f1:a9:13:77:3e:9b:0f:a6:08:dc:96:
8d:5d:e4:36:c2:2f:c2:b3:a5:ae:89:d6:52:6c:ce:7e:cc:6d:
88:77:e9:15:03:36:29:92:dd:f2:ad:11:d0:f0:80:0e:69:5b:
3d:e1:9c:54:9d:8c:4b:a9:3e:70:82:9e:3f:02:9a:a2:dc:93:
4a:81:9e:c9:27:f9:4b:ca:26:10:bb:16:aa:95:f8:5e:cf:46:
71:d1:b1:47:7e:a0:5a:c3:9b:7a:bd:dc:2b:6a:f0:d7:b3:04:
1d:f4:c0:d5:bb:76:f0:f9:f1:20:c7:93:07:f7:4d:22:23:db:
60:4e:e5:79:90:00:c8:77:07:a1:d3:bd:ec:a5:c5:0a:3f:bd:
38:de:ce:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:43 2025 by rpki-client