Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0E0478489F111EF8D6C9A7BC4F9AE02.roa
File: A0E0478489F111EF8D6C9A7BC4F9AE02.roa (raw, json)
Hash identifier: c1H0bZJEh/SXw7dBPr94ECLJTJbRMqr/Hoi35FEM5Cs=
Subject key identifier: 63:22:A1:D9:DC:B9:B8:C0:24:9B:4A:53:75:35:21:E7:0F:E9:20:A5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9B94
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0E0478489F111EF8D6C9A7BC4F9AE02.roa
Signing time: Mon 14 Oct 2024 06:00:35 +0000
ROA not before: Mon 14 Oct 2024 06:00:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133001
IP address blocks: 43.225.160.0/22 maxlen: 24
43.251.216.0/22 maxlen: 24
45.117.220.0/22 maxlen: 24
45.119.44.0/24 maxlen: 24
45.119.45.0/24 maxlen: 24
45.119.46.0/24 maxlen: 24
45.119.47.0/24 maxlen: 24
103.38.36.0/22 maxlen: 24
103.42.166.0/23 maxlen: 24
103.51.132.0/24 maxlen: 24
103.51.133.0/24 maxlen: 24
103.51.134.0/24 maxlen: 24
103.51.135.0/24 maxlen: 24
103.54.76.0/24 maxlen: 24
103.54.77.0/24 maxlen: 24
103.110.102.0/24 maxlen: 24
103.114.0.0/22 maxlen: 23
103.114.2.0/23 maxlen: 24
103.116.147.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.140.26.0/24 maxlen: 24
103.140.27.0/24 maxlen: 24
103.156.98.0/23 maxlen: 24
103.165.68.0/24 maxlen: 24
103.165.69.0/24 maxlen: 24
103.176.74.0/23 maxlen: 24
103.176.210.0/24 maxlen: 24
103.176.211.0/24 maxlen: 24
103.196.76.0/22 maxlen: 24
103.200.74.0/23 maxlen: 23
103.201.148.0/22 maxlen: 24
103.239.168.0/24 maxlen: 24
103.239.169.0/24 maxlen: 24
103.239.170.0/24 maxlen: 24
103.239.171.0/24 maxlen: 24
111.125.225.0/24 maxlen: 24
183.87.251.0/24 maxlen: 24
183.87.252.0/22 maxlen: 24
202.94.160.0/22 maxlen: 24
2401:b240::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 06 Nov 2024 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39828 (0x9b94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Oct 14 06:00:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=670cb383-ecc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:93:96:62:76:4e:bd:6a:61:ae:bb:a8:f6:
ce:ab:0a:2e:e2:5a:cf:b8:04:b3:0b:ca:75:42:c1:
a3:92:9f:04:b1:07:97:39:88:5f:69:aa:5a:c7:c4:
70:bd:a3:5d:ad:75:52:6e:90:7f:80:e1:f5:9d:39:
7d:7f:55:4a:d6:67:0f:1e:e4:6b:08:a0:b8:82:a9:
a5:1d:95:54:68:66:36:fb:e2:3a:41:bb:85:1b:15:
f5:fc:35:57:bd:29:63:14:88:42:b0:54:f1:f6:ab:
eb:41:21:eb:07:4d:f1:2b:2a:ff:97:2d:c9:5d:ed:
87:23:3f:6a:a9:b6:0e:c5:08:04:fa:ea:d6:dc:2e:
f5:96:b8:63:06:b9:c3:2d:dd:d7:af:84:f9:aa:05:
ef:9a:1d:f2:d7:a6:ee:bc:1c:0c:5b:7a:ef:9e:a0:
e4:4b:23:60:b5:e6:c9:19:37:53:55:6d:7e:cf:70:
c3:ee:d7:86:fb:c9:a3:af:5f:c4:65:bb:77:1b:c5:
24:48:76:26:d5:cc:5b:5d:f9:cb:b9:7a:0a:b8:ff:
97:41:9e:89:85:b1:6c:96:31:87:ef:9c:5f:06:f6:
7e:cc:0a:a1:3d:91:7e:ce:47:ca:aa:9e:55:f5:d0:
ee:01:2e:66:8a:5b:87:3a:51:c9:d3:a6:37:58:4e:
6f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:22:A1:D9:DC:B9:B8:C0:24:9B:4A:53:75:35:21:E7:0F:E9:20:A5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0E0478489F111EF8D6C9A7BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.160.0/22
43.251.216.0/22
45.117.220.0/22
45.119.44.0/22
103.38.36.0/22
103.42.166.0/23
103.51.132.0/22
103.54.76.0/23
103.110.102.0/24
103.114.0.0/22
103.116.147.0/24
103.133.116.0/24
103.140.26.0/23
103.156.98.0/23
103.165.68.0/23
103.176.74.0/23
103.176.210.0/23
103.196.76.0/22
103.200.74.0/23
103.201.148.0/22
103.239.168.0/22
111.125.225.0/24
183.87.251.0-183.87.255.255
202.94.160.0/22
IPv6:
2401:b240::/32
Signature Algorithm: sha256WithRSAEncryption
4f:65:16:c6:6d:7e:f2:96:f8:c0:e7:46:77:5b:de:02:48:a7:
76:17:d0:fc:d6:01:fa:0b:c1:f2:76:6c:78:08:71:4f:d0:4f:
09:ad:89:27:05:87:60:04:97:61:c1:03:bc:24:94:35:7b:87:
0b:20:b5:ee:8c:42:79:29:31:d3:5b:0e:e8:0e:c5:99:d8:c5:
99:14:73:d0:1d:10:b2:af:f5:a1:9b:ec:7f:47:60:83:1b:01:
da:d4:d4:ea:b0:8d:b2:8b:10:83:37:36:a3:f3:0c:e5:3e:44:
ec:31:fe:da:53:c8:22:c2:2a:97:aa:7d:20:37:30:f1:63:a3:
fe:29:27:2f:52:27:b8:87:49:8f:40:e2:a7:06:25:78:16:3b:
5b:74:e9:a3:92:29:3a:0f:b3:aa:d6:b5:e1:84:54:dd:88:4c:
9f:3b:40:57:63:6a:0d:8b:7a:4a:ee:7d:59:67:1a:0b:9e:93:
f1:2c:3c:f8:e8:4a:ff:10:f4:47:b9:67:9a:e1:dd:28:81:4c:
4e:8f:44:e9:a0:91:b2:45:96:57:e2:fd:8f:c4:5a:c7:cb:1b:
70:14:e9:7e:47:ac:63:ed:7f:51:45:60:74:61:08:ce:13:24:
cd:0b:ac:d4:28:c7:ec:f0:9b:0f:90:d7:13:cc:34:8e:b8:9b:
8f:4f:26:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:27 2025 by rpki-client