Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7145AFA75B511EFA4ED747CC4F9AE02.roa
File: A7145AFA75B511EFA4ED747CC4F9AE02.roa (raw, json)
Hash identifier: Umk0mYGzF2+6i3HTJwoe4i49B3i/I0zy+FRqFvUZ4nY=
Subject key identifier: 53:71:46:CC:90:48:20:54:08:4D:FE:EA:F2:9B:7E:C2:15:F6:4F:B8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9961
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7145AFA75B511EFA4ED747CC4F9AE02.roa
Signing time: Wed 18 Sep 2024 12:00:52 +0000
ROA not before: Wed 18 Sep 2024 12:00:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133661
IP address blocks: 101.0.32.0/22 maxlen: 24
101.0.37.0/24 maxlen: 24
103.73.148.0/24 maxlen: 24
103.73.149.0/24 maxlen: 24
103.73.150.0/24 maxlen: 24
103.110.251.0/24 maxlen: 24
103.114.64.0/24 maxlen: 24
103.114.65.0/24 maxlen: 24
103.142.198.0/24 maxlen: 24
103.163.14.0/24 maxlen: 24
103.165.72.0/23 maxlen: 24
103.165.76.0/23 maxlen: 24
103.166.214.0/23 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.212.0/23 maxlen: 24
103.168.0.0/23 maxlen: 24
103.168.22.0/24 maxlen: 24
103.168.32.0/23 maxlen: 24
103.169.242.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.171.108.0/24 maxlen: 24
103.171.110.0/23 maxlen: 24
103.171.174.0/23 maxlen: 24
103.173.98.0/23 maxlen: 24
103.174.92.0/23 maxlen: 24
103.177.226.0/23 maxlen: 24
103.178.64.0/23 maxlen: 24
103.178.160.0/23 maxlen: 24
103.178.166.0/23 maxlen: 24
103.178.202.0/23 maxlen: 24
103.179.10.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.179.96.0/23 maxlen: 24
103.179.100.0/23 maxlen: 24
103.179.102.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.179.120.0/23 maxlen: 24
103.179.224.0/23 maxlen: 24
103.179.226.0/23 maxlen: 24
103.180.110.0/23 maxlen: 24
103.180.168.0/23 maxlen: 24
103.180.172.0/23 maxlen: 24
103.180.174.0/23 maxlen: 24
103.180.176.0/23 maxlen: 24
103.180.212.0/23 maxlen: 24
103.180.214.0/23 maxlen: 24
103.180.236.0/23 maxlen: 24
103.180.238.0/23 maxlen: 24
103.181.4.0/23 maxlen: 24
103.181.56.0/23 maxlen: 24
103.181.64.0/23 maxlen: 24
103.181.84.0/23 maxlen: 24
103.181.86.0/23 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.114.0/23 maxlen: 24
103.181.150.0/23 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.154.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.181.198.0/23 maxlen: 24
103.181.212.0/24 maxlen: 24
103.183.30.0/23 maxlen: 24
103.183.32.0/23 maxlen: 24
103.183.34.0/23 maxlen: 24
103.183.216.0/23 maxlen: 24
103.187.84.0/23 maxlen: 24
103.187.92.0/23 maxlen: 24
103.187.96.0/23 maxlen: 24
103.187.102.0/23 maxlen: 24
103.187.130.0/23 maxlen: 24
103.187.158.0/23 maxlen: 24
103.187.170.0/23 maxlen: 24
103.189.82.0/23 maxlen: 24
203.76.178.0/24 maxlen: 24
203.76.180.0/24 maxlen: 24
203.76.181.0/24 maxlen: 24
203.76.188.0/24 maxlen: 24
203.76.190.0/24 maxlen: 24
203.76.191.0/24 maxlen: 24
2001:df0:e400::/48 maxlen: 48
2001:df2:e200::/48 maxlen: 48
2001:df2:e600::/48 maxlen: 48
2400:7b20::/32 maxlen: 32
2404:7c80::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 19 Sep 2024 07:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39265 (0x9961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Sep 18 12:00:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66eac0f4-e2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:34:59:08:25:c7:8f:09:5c:53:4f:09:7f:
d3:82:79:15:f3:1a:9f:c5:3a:99:15:ab:b9:76:bc:
01:30:7b:31:4d:00:64:e0:5c:ff:fa:04:41:ae:9e:
47:35:1a:ac:7f:df:09:9c:ed:86:be:c4:ec:5f:7e:
c4:cd:9f:d7:4f:3c:55:b9:0d:b4:17:63:d4:d4:5e:
e5:3d:6c:83:d3:46:11:c1:84:1d:8c:d4:f8:42:86:
a3:89:6e:1e:b3:cf:46:8b:b6:93:4f:a0:9a:c2:0d:
bd:86:82:3d:6c:90:7f:12:0c:a5:73:e6:91:12:60:
25:4f:63:ca:e0:0e:d3:f7:6e:6a:f3:3f:b6:cc:41:
6b:24:6c:bd:2e:c9:d9:bd:13:e7:61:22:bb:6b:56:
5d:a4:94:e1:39:34:1e:30:b9:9c:4a:83:51:66:75:
d2:f5:ae:bd:40:97:8b:ea:a6:8c:dc:ac:91:a2:11:
23:40:8a:2b:63:a3:09:c3:51:8a:d7:42:ed:3c:e2:
c5:74:41:26:ac:c8:30:ad:83:56:c2:8f:b4:be:dd:
6f:9e:cc:bd:ec:68:c6:e2:a3:1d:e9:2a:7f:d6:5d:
cb:11:21:af:68:30:03:5e:32:29:de:6f:06:38:2a:
43:03:63:88:80:52:f0:6c:a0:0f:4a:1d:e8:ae:14:
f8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:71:46:CC:90:48:20:54:08:4D:FE:EA:F2:9B:7E:C2:15:F6:4F:B8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A7145AFA75B511EFA4ED747CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.0.32.0/22
101.0.37.0/24
103.73.148.0-103.73.150.255
103.110.251.0/24
103.114.64.0/23
103.142.198.0/24
103.163.14.0/24
103.165.72.0/23
103.165.76.0/23
103.166.214.0/23
103.167.154.0/23
103.167.182.0/23
103.167.212.0/23
103.168.0.0/23
103.168.22.0/24
103.168.32.0/23
103.169.242.0/23
103.170.36.0/22
103.171.108.0/24
103.171.110.0/23
103.171.174.0/23
103.173.98.0/23
103.174.92.0/23
103.177.226.0/23
103.178.64.0/23
103.178.160.0/23
103.178.166.0/23
103.178.202.0/23
103.179.10.0/23
103.179.94.0-103.179.97.255
103.179.100.0/22
103.179.118.0-103.179.121.255
103.179.224.0/22
103.180.110.0/23
103.180.168.0/23
103.180.172.0-103.180.177.255
103.180.212.0/22
103.180.236.0/22
103.181.4.0/23
103.181.56.0/23
103.181.64.0/23
103.181.84.0/22
103.181.110.0/23
103.181.114.0/23
103.181.150.0-103.181.155.255
103.181.174.0/23
103.181.198.0/23
103.181.212.0/24
103.183.30.0-103.183.35.255
103.183.216.0/23
103.187.84.0/23
103.187.92.0/23
103.187.96.0/23
103.187.102.0/23
103.187.130.0/23
103.187.158.0/23
103.187.170.0/23
103.189.82.0/23
203.76.178.0/24
203.76.180.0/23
203.76.188.0/24
203.76.190.0/23
IPv6:
2001:df0:e400::/48
2001:df2:e200::/48
2001:df2:e600::/48
2400:7b20::/32
2404:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
76:80:b2:63:99:ec:98:d0:4a:7d:dd:50:48:59:48:bf:91:df:
c2:3d:a2:df:f6:44:41:c2:71:cd:63:42:e2:b2:5e:4f:86:52:
a7:e2:5b:43:91:e6:02:7a:4f:5b:3e:21:3e:a8:91:d7:a9:c8:
0e:e1:f5:08:d7:04:91:d7:bd:63:19:01:e1:65:db:fc:21:da:
0d:73:e8:55:79:46:26:ab:b1:2b:ef:99:3a:1e:81:f8:97:d3:
b8:9a:e0:3d:df:f8:63:ca:8f:92:f7:65:1c:62:4c:ab:83:0d:
df:a2:0f:a5:bc:94:3e:27:94:6e:a8:c6:b4:27:c5:82:de:05:
9e:e7:c6:c1:a2:f3:80:4d:a6:73:95:74:36:a2:15:01:a0:bb:
f9:10:98:0c:fe:8e:34:50:24:07:ac:db:14:a8:0f:6e:ec:77:
d8:b3:8b:6c:74:6f:81:31:81:19:a1:a9:83:d7:94:90:c6:37:
39:7b:a1:9f:8c:53:69:b2:3c:ed:b8:05:67:85:1b:9c:83:53:
ee:d6:85:3a:8f:d1:c2:8c:2d:6d:36:b7:74:90:c6:1f:54:97:
e9:4a:3c:b8:f7:1f:2d:ea:ac:73:e3:c5:ed:4b:23:de:6a:60:
7e:d5:57:bd:60:97:d8:82:4b:83:26:8d:d2:03:f4:5f:b1:9e:
cc:59:6e:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:02:04 2025 by rpki-client