Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A4DB7002DEC411EF8FB86617C4F9AE02.roa
File: A4DB7002DEC411EF8FB86617C4F9AE02.roa (raw, json)
Hash identifier: b9qxP7c38y7WcOg/5ByTIALAidgfAFwed9QV0LXTeZw=
Subject key identifier: FF:D5:07:E7:95:49:FB:B4:45:3A:B3:DE:98:71:B9:35:B1:79:D3:5F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A421
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A4DB7002DEC411EF8FB86617C4F9AE02.roa
Signing time: Thu 30 Jan 2025 10:27:12 +0000
ROA not before: Thu 30 Jan 2025 10:27:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
45.64.188.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.116.60.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.109.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.164.0.0/23 maxlen: 24
103.167.157.0/24 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.236.112.0/22 maxlen: 24
103.242.236.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.36.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42017 (0xa421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 30 10:27:12 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679b53ff-22ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:95:2d:67:e2:92:ed:83:6c:cb:48:47:88:
ce:9a:11:e8:44:c8:78:34:bc:f4:e1:42:49:4b:fc:
8e:5b:1e:a6:e8:b3:a5:57:83:47:69:d5:75:22:26:
56:1e:32:f6:55:96:fb:ba:f3:ec:2d:58:3b:25:b3:
7a:3f:f2:a6:2c:dd:86:ff:a1:a7:dc:59:df:1d:5b:
6c:62:6d:8b:12:08:84:6e:87:71:aa:f6:9b:9b:d9:
8f:fb:c3:79:cc:77:86:00:19:62:2b:61:43:88:ea:
58:e3:61:e5:de:71:79:d3:72:02:28:a3:fe:d4:b4:
17:ca:46:c6:e5:2d:58:44:85:06:55:ff:ae:3b:47:
1b:66:b1:af:f2:7c:3a:e6:50:d1:25:d6:68:5f:1d:
93:45:5f:48:ec:93:5a:3e:39:7b:bc:0f:0c:7b:e1:
8c:ef:75:60:07:27:a0:e8:b2:a1:55:f0:ea:e3:f3:
6c:f9:28:12:74:cc:e8:34:50:fe:b2:d7:73:6c:26:
39:e3:6d:5c:45:53:e3:83:ab:23:29:ed:41:5f:4c:
7e:82:55:aa:71:6b:89:70:ee:73:a8:5d:18:52:c5:
72:85:69:45:e5:40:ce:57:b9:31:3f:6f:8f:a0:34:
9f:c4:85:fa:a0:35:60:d8:57:55:cd:37:df:83:73:
23:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D5:07:E7:95:49:FB:B4:45:3A:B3:DE:98:71:B9:35:B1:79:D3:5F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A4DB7002DEC411EF8FB86617C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.231.116.0/22
43.239.112.0/22
45.64.188.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.116.60.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.142.64.0/23
103.143.109.0/24
103.144.112.0/23
103.153.208.0/23
103.155.194.0/23
103.164.0.0/23
103.167.157.0/24
103.171.8.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.180.216.0/23
103.192.72.0/22
103.199.92.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.236.112.0/22
103.242.236.0/22
103.254.200.0/22
137.59.204.0/22
139.5.36.0/22
139.5.96.0/22
203.191.56.0/22
220.158.140.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
2c:18:db:8d:f6:b9:42:f6:40:81:c8:40:d7:bb:0b:79:bf:13:
1a:b8:89:45:bf:ae:38:41:94:bc:73:28:1a:ec:78:98:33:07:
5b:9a:bc:65:8b:ae:a9:f1:d4:2d:80:bc:7d:c6:cf:93:1c:f6:
2c:00:06:90:e5:46:64:18:ab:2e:6d:6c:d5:f6:e0:de:04:34:
85:74:c4:3c:b9:c9:ff:94:6a:2d:1d:b5:bf:09:93:fc:be:08:
f8:b5:a9:76:ad:f8:88:25:7c:4b:66:9a:e7:38:90:b4:11:2f:
2f:ab:b0:d5:00:5e:53:54:cc:6e:69:84:f9:77:02:cd:06:f9:
ad:63:5d:f3:57:f8:ca:e2:fc:0a:53:56:51:0e:f4:20:43:b6:
24:fa:33:d4:93:f1:80:7d:87:cb:36:25:fa:88:bb:20:38:0a:
aa:50:5d:49:9d:35:d1:0d:88:73:d9:9b:65:a1:60:5c:df:57:
1c:5a:36:c1:37:b1:e4:1b:d1:61:f0:ed:5e:1b:b8:b5:20:0b:
87:32:45:b9:b6:5e:bc:15:e0:b9:a5:cb:c7:c4:b2:03:52:2e:
24:6b:f4:21:67:f1:10:8c:5b:ec:30:2d:6f:8c:28:a1:e3:c9:
f4:71:79:cb:be:5e:73:b8:32:ab:a7:90:86:b6:3f:be:f2:98:
99:eb:73:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:40 2025 by rpki-client