Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A36C5B08903311EFA2756955C4F9AE02.roa
File: A36C5B08903311EFA2756955C4F9AE02.roa (raw, json)
Hash identifier: 68/OTGO+y0iPAO4CBCrNeyuSUOkNXSvTmsxYQs04bWk=
Subject key identifier: 80:FF:6E:B2:DE:52:85:32:29:38:8D:9B:9C:1E:FC:E1:28:A6:11:13
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9D47
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A36C5B08903311EFA2756955C4F9AE02.roa
Signing time: Wed 13 Nov 2024 11:23:47 +0000
ROA not before: Wed 13 Nov 2024 11:23:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133676
IP address blocks: 36.50.82.0/24 maxlen: 24
43.225.74.0/24 maxlen: 24
43.230.196.0/22 maxlen: 24
43.240.4.0/24 maxlen: 24
43.240.6.0/24 maxlen: 24
43.240.7.0/24 maxlen: 24
43.250.252.0/22 maxlen: 24
45.64.8.0/24 maxlen: 24
45.64.9.0/24 maxlen: 24
45.64.10.0/24 maxlen: 24
45.64.11.0/24 maxlen: 24
45.248.24.0/24 maxlen: 24
45.248.26.0/23 maxlen: 24
103.42.88.0/22 maxlen: 24
103.47.12.0/23 maxlen: 24
103.47.15.0/24 maxlen: 24
103.47.72.0/23 maxlen: 24
103.47.74.0/23 maxlen: 24
103.47.172.0/23 maxlen: 24
103.47.174.0/23 maxlen: 24
103.49.232.0/23 maxlen: 24
103.54.24.0/23 maxlen: 24
103.54.26.0/24 maxlen: 24
103.62.147.0/24 maxlen: 24
103.80.34.0/23 maxlen: 24
103.82.72.0/22 maxlen: 24
103.85.118.0/23 maxlen: 24
103.87.204.0/22 maxlen: 24
103.93.172.0/22 maxlen: 24
103.93.212.0/23 maxlen: 24
103.98.53.0/24 maxlen: 24
103.101.116.0/24 maxlen: 24
103.101.117.0/24 maxlen: 24
103.101.118.0/23 maxlen: 24
103.103.163.0/24 maxlen: 24
103.109.180.0/23 maxlen: 24
103.109.182.0/23 maxlen: 24
103.114.188.0/23 maxlen: 24
103.118.180.0/22 maxlen: 24
103.173.218.0/24 maxlen: 24
103.177.202.0/23 maxlen: 24
103.178.58.0/23 maxlen: 24
103.181.90.0/23 maxlen: 24
103.182.44.0/23 maxlen: 24
103.184.184.0/23 maxlen: 24
103.186.44.0/23 maxlen: 24
103.189.146.0/24 maxlen: 24
103.189.147.0/24 maxlen: 24
103.191.182.0/23 maxlen: 24
103.191.234.0/23 maxlen: 24
103.204.168.0/22 maxlen: 24
103.211.56.0/23 maxlen: 24
103.211.58.0/24 maxlen: 24
103.211.190.0/23 maxlen: 24
103.212.136.0/23 maxlen: 24
103.212.138.0/23 maxlen: 24
103.213.6.0/23 maxlen: 24
103.225.205.0/24 maxlen: 24
103.225.206.0/23 maxlen: 24
103.226.200.0/22 maxlen: 24
103.248.120.0/24 maxlen: 24
103.248.121.0/24 maxlen: 24
139.5.16.0/23 maxlen: 24
139.5.18.0/23 maxlen: 24
2405:5540::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 18 Nov 2024 11:12:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40263 (0x9d47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 13 11:23:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67348c43-9a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:37:3f:b5:4d:df:1e:d1:73:b3:d7:92:8d:
48:07:af:1c:28:b6:ac:4f:d5:47:2f:bb:75:e6:e6:
cc:05:74:07:f4:c3:94:4e:d0:bc:7e:a7:cf:df:59:
6d:34:5e:08:b9:f5:67:6b:9a:aa:94:72:60:c4:e3:
33:37:62:98:c7:e3:10:b8:d0:f3:49:e0:69:65:c2:
66:70:10:74:9e:6f:d5:e5:09:1d:fe:be:26:43:39:
56:a3:fc:e1:ac:cc:e8:dc:73:54:2e:cd:2f:eb:8c:
d6:b7:3a:7e:53:be:6b:60:63:c3:bc:75:a5:57:77:
2b:42:de:91:2a:c8:77:66:46:22:5a:46:51:ef:70:
bd:49:71:59:2e:69:c5:ff:25:21:51:34:b2:e6:f2:
5e:9a:1f:55:87:9c:7f:33:be:6d:f1:5b:71:83:c7:
04:e5:a5:63:ee:29:13:2e:32:4a:92:4e:a0:7d:8a:
10:35:13:66:16:97:18:a4:07:8d:7c:fb:b2:69:8e:
50:4c:6a:64:9d:56:3a:5f:b1:3b:09:b8:96:71:e6:
9b:7c:d7:88:82:3a:10:ea:3c:ea:2a:c6:a2:b7:87:
85:55:c7:d7:3c:2f:c9:42:ad:fd:d1:e9:a7:ab:60:
28:4d:8a:da:a6:f1:87:b2:cc:36:78:59:bc:53:12:
7c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FF:6E:B2:DE:52:85:32:29:38:8D:9B:9C:1E:FC:E1:28:A6:11:13
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A36C5B08903311EFA2756955C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.82.0/24
43.225.74.0/24
43.230.196.0/22
43.240.4.0/24
43.240.6.0/23
43.250.252.0/22
45.64.8.0/22
45.248.24.0/24
45.248.26.0/23
103.42.88.0/22
103.47.12.0/23
103.47.15.0/24
103.47.72.0/22
103.47.172.0/22
103.49.232.0/23
103.54.24.0-103.54.26.255
103.62.147.0/24
103.80.34.0/23
103.82.72.0/22
103.85.118.0/23
103.87.204.0/22
103.93.172.0/22
103.93.212.0/23
103.98.53.0/24
103.101.116.0/22
103.103.163.0/24
103.109.180.0/22
103.114.188.0/23
103.118.180.0/22
103.173.218.0/24
103.177.202.0/23
103.178.58.0/23
103.181.90.0/23
103.182.44.0/23
103.184.184.0/23
103.186.44.0/23
103.189.146.0/23
103.191.182.0/23
103.191.234.0/23
103.204.168.0/22
103.211.56.0-103.211.58.255
103.211.190.0/23
103.212.136.0/22
103.213.6.0/23
103.225.205.0-103.225.207.255
103.226.200.0/22
103.248.120.0/23
139.5.16.0/22
IPv6:
2405:5540::/32
Signature Algorithm: sha256WithRSAEncryption
38:33:54:36:72:69:e9:68:54:98:98:eb:a7:2b:f2:c4:d9:1a:
7b:39:bd:10:ff:7d:d4:ff:15:e0:8d:15:04:24:4c:49:d2:f9:
37:c4:f5:c8:0d:15:5f:09:7a:af:28:c1:e8:e0:2c:96:56:0f:
67:26:3a:cf:af:86:0a:f8:d0:44:ea:25:21:a4:6a:d1:86:14:
45:b1:06:fa:1c:b7:24:15:13:fe:d7:31:4f:88:37:25:b6:f3:
4c:d9:6d:60:70:15:9a:f4:96:0f:e0:cf:e3:4d:f1:80:e4:62:
5f:af:e5:12:bd:60:d3:3d:83:9d:a9:f7:62:82:7c:8a:4c:af:
37:9c:08:03:47:a6:63:ce:04:64:fd:e4:65:d7:ed:24:0b:88:
2d:ab:9b:9a:46:73:34:80:1e:d0:73:5a:a0:34:eb:7e:34:9d:
b8:6d:6f:72:4b:a1:e8:79:fd:05:a9:7c:e4:2f:bd:13:07:01:
da:74:71:77:b0:5e:bd:4f:5b:88:d0:6a:d7:e2:af:b5:b6:2b:
bb:ff:ba:96:11:36:32:61:25:5f:22:4a:54:e1:73:76:97:86:
7c:45:7a:f8:40:70:c7:70:5e:7e:4e:4a:75:14:34:6e:55:73:
f8:99:ac:53:e9:de:5d:4f:3a:c5:f0:ad:6e:06:d8:16:83:67:
fc:c0:9a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:47 2025 by rpki-client