Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/95E84450FE4D11EFBCFEE51AC4F9AE02.roa
File: 95E84450FE4D11EFBCFEE51AC4F9AE02.roa (raw, json)
Hash identifier: MRrfhHYYrcHK7xYMn3zBZiKFDw0coMSyn40Re65rcI8=
Subject key identifier: CD:4C:B7:48:E6:12:EF:00:01:9F:C3:AF:83:3F:06:19:B6:5D:E8:9D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AA10
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/95E84450FE4D11EFBCFEE51AC4F9AE02.roa
Signing time: Tue 11 Mar 2025 07:51:05 +0000
ROA not before: Tue 11 Mar 2025 07:51:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.239.152.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.98.79.0/24 maxlen: 24
103.99.48.0/23 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.180.0/23 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.170.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.50.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.158.216.0/23 maxlen: 24
103.159.137.0/24 maxlen: 24
103.162.80.0/23 maxlen: 24
103.166.220.0/23 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
103.171.60.0/23 maxlen: 24
103.171.208.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.172.46.0/23 maxlen: 24
103.172.56.0/23 maxlen: 24
103.172.90.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.26.0/23 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.12.0/23 maxlen: 24
103.175.58.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.191.86.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.245.170.0/23 maxlen: 24
103.254.96.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
2407:1340::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43536 (0xaa10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 11 07:51:05 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67cfeb69-0bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:a4:b9:5c:58:dc:82:2b:b4:e1:37:0d:23:
7f:cb:99:d3:8e:58:cd:9c:8f:69:3c:cc:5d:5c:a9:
bf:ab:09:11:6f:60:a2:0b:75:79:c2:aa:16:2d:ac:
48:b3:b1:57:8b:c8:ef:fe:da:45:8a:17:0c:72:95:
13:fa:7b:db:3a:d5:62:1b:bd:5f:2e:a3:c5:6b:0c:
be:8a:9c:21:7d:6a:d2:4b:87:a8:f0:54:82:11:18:
ca:b0:7b:5b:ef:f8:fe:78:35:64:71:cc:1c:6a:68:
60:ec:48:6c:38:82:5e:2c:1f:65:fa:5b:88:45:f2:
b8:01:b4:81:81:dd:c2:8c:8d:ba:d3:c6:d9:70:47:
30:b7:fb:96:f2:4d:05:4b:38:d0:b5:b2:7a:db:0f:
6f:62:8b:02:db:d3:0a:88:be:25:2d:b6:50:e9:b3:
c8:2d:95:17:e4:67:8a:e4:27:11:54:40:50:94:fb:
5e:62:b0:f3:b3:b0:2d:d8:89:5e:8f:06:47:93:27:
0d:06:79:91:9f:07:72:d8:2c:35:9f:e7:15:71:84:
23:0a:bf:7a:cb:c1:f9:48:a7:c5:9a:f0:c3:06:3d:
58:c7:f0:c4:bd:04:bd:dd:72:73:e9:55:11:af:45:
9a:f8:2f:14:5d:4d:cc:5c:a6:6e:15:73:cc:8c:a1:
a2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:4C:B7:48:E6:12:EF:00:01:9F:C3:AF:83:3F:06:19:B6:5D:E8:9D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/95E84450FE4D11EFBCFEE51AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.239.152.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.98.79.0/24
103.99.48.0/23
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.143.180.0/23
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.170.0/23
103.155.194.0/23
103.157.50.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.158.216.0/23
103.159.137.0/24
103.162.80.0/23
103.166.220.0/23
103.169.58.0/23
103.171.8.0/23
103.171.54.0/23
103.171.60.0/23
103.171.208.0/23
103.171.236.0/23
103.172.46.0/23
103.172.56.0/23
103.172.90.0/23
103.173.14.0/23
103.173.41.0/24
103.174.26.0/23
103.174.42.0/23
103.175.12.0/23
103.175.58.0/23
103.175.106.0/23
103.176.142.0/24
103.180.216.0/23
103.190.12.0/23
103.191.86.0/23
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.236.112.0/22
103.245.170.0/23
103.254.96.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
2407:1340::/32
Signature Algorithm: sha256WithRSAEncryption
6d:51:f0:72:ec:b2:b4:2b:57:4b:ae:b5:9b:e5:f1:ec:fe:ad:
0f:c4:27:30:da:da:69:83:3a:16:99:4a:1d:8d:84:82:e3:07:
75:c6:cb:3a:d4:a9:41:23:a3:5e:f3:02:8a:78:6a:8d:fc:ba:
8f:01:69:cb:83:a6:82:02:23:e6:d3:f7:7f:77:06:43:be:72:
31:94:32:cd:38:35:8c:34:0b:de:70:df:77:8e:a7:3d:77:86:
7a:6f:bf:4e:c5:46:89:42:98:9b:91:c5:c2:64:b5:60:d0:88:
4a:df:ef:97:55:51:4e:f0:00:02:bf:0e:76:97:82:eb:48:7b:
0d:be:6c:20:95:b5:9f:94:82:bb:e5:29:8d:b6:6f:2b:17:36:
5f:70:27:0d:66:03:58:7a:76:66:d2:f7:96:ed:06:d7:70:8c:
21:ba:20:a2:33:24:ba:07:28:8d:0b:7c:61:cd:b4:c5:e1:b5:
6b:e3:d2:86:9d:a3:60:7a:f5:a7:1f:a3:a0:7b:89:f8:66:89:
fe:6a:e1:4e:85:20:7a:f2:46:d9:42:94:b9:57:e4:e3:c5:71:
55:72:6b:8c:17:3e:ba:5c:25:49:26:de:c6:bf:2d:a7:8b:3b:
cf:b1:91:d5:5c:e7:62:64:a3:10:a9:dd:03:3f:56:56:cb:1a:
17:f6:56:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:52 2025 by rpki-client