Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A2C35940FD9D11EFA07EE86EC4F9AE02.roa
File: A2C35940FD9D11EFA07EE86EC4F9AE02.roa (raw, json)
Hash identifier: McrQ8leiYbZw6mJTkr+ndgwZZi9db1pkYbcwMcndQtE=
Subject key identifier: C1:20:F8:BB:18:57:6A:DB:39:4E:37:AD:62:95:8B:FA:73:68:E1:B2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A9E2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A2C35940FD9D11EFA07EE86EC4F9AE02.roa
Signing time: Mon 10 Mar 2025 10:51:35 +0000
ROA not before: Mon 10 Mar 2025 10:51:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.239.152.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.41.76.0/23 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.98.79.0/24 maxlen: 24
103.99.48.0/23 maxlen: 24
103.105.72.0/24 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.142.114.0/23 maxlen: 24
103.143.180.0/23 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.170.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.50.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.158.216.0/23 maxlen: 24
103.159.137.0/24 maxlen: 24
103.162.80.0/23 maxlen: 24
103.166.220.0/23 maxlen: 24
103.167.157.0/24 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
103.171.60.0/23 maxlen: 24
103.171.208.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.172.46.0/23 maxlen: 24
103.172.56.0/23 maxlen: 24
103.172.88.0/23 maxlen: 24
103.172.90.0/23 maxlen: 24
103.172.158.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.26.0/23 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.12.0/23 maxlen: 24
103.175.58.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.191.86.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.209.26.0/24 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.245.170.0/23 maxlen: 24
103.254.96.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
2407:1340::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43490 (0xa9e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 10 10:51:35 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67cec437-cb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:2b:14:fc:ce:cc:0a:0f:98:43:8b:58:17:
85:aa:2d:73:6d:f2:04:ea:76:08:8f:83:2d:9d:3a:
41:46:c8:ec:04:68:25:66:7c:0b:ba:f3:2c:f4:3a:
5c:44:6c:f4:63:ef:f3:f4:06:d7:28:fc:8b:fb:0d:
80:d1:be:52:f3:0d:5a:64:1f:20:5e:a1:a8:a9:9f:
e8:0d:e3:96:13:3e:b2:f1:d4:25:12:57:99:f8:3d:
a7:cc:95:fc:2d:94:d2:c1:e4:3f:f5:19:ce:a9:6b:
76:e4:6f:91:8d:68:98:6b:b7:7b:55:f9:b7:c1:a9:
99:f6:c3:37:ce:97:d1:2e:e7:29:fe:80:e1:6b:3b:
ce:56:6c:82:e0:98:51:c2:39:a0:b0:d2:2b:55:13:
00:12:f5:9b:5f:c1:83:4d:3f:d9:92:80:a8:57:7f:
35:31:45:1b:c3:03:28:65:a2:a3:62:fc:d9:6f:ee:
33:78:f5:ab:78:23:6c:9a:7c:27:97:7b:37:25:28:
02:45:bd:05:e5:c7:61:d3:47:dd:b3:09:61:d6:6f:
67:c3:6b:a9:34:cb:49:a6:63:bb:a9:c2:fe:58:b3:
9b:4e:71:62:62:81:ca:c9:ac:ee:fb:dd:c9:ec:81:
1b:1d:07:22:2b:07:be:01:02:83:40:51:34:65:1d:
d4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:20:F8:BB:18:57:6A:DB:39:4E:37:AD:62:95:8B:FA:73:68:E1:B2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A2C35940FD9D11EFA07EE86EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.239.152.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.41.76.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.98.79.0/24
103.99.48.0/23
103.105.72.0/24
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.142.114.0/23
103.143.180.0/23
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.170.0/23
103.155.194.0/23
103.157.50.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.158.216.0/23
103.159.137.0/24
103.162.80.0/23
103.166.220.0/23
103.167.157.0/24
103.169.58.0/23
103.171.8.0/23
103.171.54.0/23
103.171.60.0/23
103.171.208.0/23
103.171.236.0/23
103.172.46.0/23
103.172.56.0/23
103.172.88.0/22
103.172.158.0/23
103.173.14.0/23
103.173.41.0/24
103.174.26.0/23
103.174.42.0/23
103.175.12.0/23
103.175.58.0/23
103.175.106.0/23
103.176.142.0/24
103.180.216.0/23
103.190.12.0/23
103.191.86.0/23
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.209.26.0/24
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.236.112.0/22
103.245.170.0/23
103.254.96.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
2407:1340::/32
Signature Algorithm: sha256WithRSAEncryption
0d:cb:cd:5f:69:e0:86:8b:1a:94:e5:46:bc:1d:2f:fd:1b:89:
98:cb:2f:9e:cc:af:b9:22:3a:76:45:98:23:d7:61:29:3a:b8:
a3:a2:58:6e:a0:9d:b0:52:25:19:1f:08:74:3d:ba:e2:29:c2:
de:49:e2:75:d6:5d:ee:ba:d7:a0:fa:7c:e5:68:91:b4:93:59:
c3:93:08:39:3f:7f:70:38:10:70:f9:43:fd:cc:da:08:e1:25:
00:a3:7c:8a:91:e3:4a:fd:fc:0f:f0:8f:fe:22:7f:db:5a:9a:
ce:e6:d9:0a:5e:c3:8f:b0:69:e9:87:13:a9:fe:47:ee:b8:de:
64:09:95:c6:56:0c:3b:b0:ac:c5:38:f0:db:f7:f1:1f:da:19:
11:56:87:46:ba:81:92:9a:0a:74:60:d9:7a:38:e9:81:b0:c3:
0d:c4:3e:4b:4d:ea:61:a6:b9:6d:be:50:e0:29:aa:38:ca:87:
c8:62:a1:7b:f5:1e:b8:34:9c:66:ad:2e:bd:52:c1:5f:38:c2:
30:f2:8f:f1:5d:0c:27:8c:97:48:44:ed:4d:b8:ad:71:42:00:
c2:a8:20:f8:61:6a:c9:02:bd:f3:ca:49:5c:95:e6:ba:ab:3d:
0f:65:58:b3:56:8a:d3:58:90:d9:b5:51:73:db:3a:be:41:0f:
b5:46:18:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:39 2025 by rpki-client