Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ABC3F294929E11EFBFA05C0BC4F9AE02.roa
File: ABC3F294929E11EFBFA05C0BC4F9AE02.roa (raw, json)
Hash identifier: iyyjVtOYpYUELPBCEj9ftKfqKhLrwACqGVhLScAgR24=
Subject key identifier: 4C:29:30:54:60:2A:CA:8B:82:81:F0:83:C5:5E:38:23:30:1A:E8:0E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9C27
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ABC3F294929E11EFBFA05C0BC4F9AE02.roa
Signing time: Fri 25 Oct 2024 06:59:26 +0000
ROA not before: Fri 25 Oct 2024 06:59:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24186
IP address blocks: 27.111.72.0/22 maxlen: 24
27.112.120.0/22 maxlen: 24
27.116.40.0/22 maxlen: 24
27.122.60.0/22 maxlen: 24
36.255.12.0/22 maxlen: 24
36.255.16.0/22 maxlen: 24
36.255.20.0/22 maxlen: 24
45.115.88.0/22 maxlen: 24
45.121.0.0/22 maxlen: 24
103.15.252.0/22 maxlen: 24
103.28.244.0/22 maxlen: 24
103.30.64.0/22 maxlen: 24
103.30.116.0/22 maxlen: 24
103.30.176.0/22 maxlen: 24
103.55.72.0/22 maxlen: 24
103.61.72.0/22 maxlen: 24
103.66.72.0/22 maxlen: 24
103.74.108.0/22 maxlen: 24
103.76.208.0/22 maxlen: 22
103.76.208.0/24 maxlen: 24
103.76.209.0/24 maxlen: 24
103.76.210.0/24 maxlen: 24
103.76.211.0/24 maxlen: 24
103.82.80.0/22 maxlen: 24
103.82.144.0/23 maxlen: 24
103.82.146.0/23 maxlen: 24
103.176.74.0/24 maxlen: 24
103.197.112.0/22 maxlen: 24
103.199.180.0/22 maxlen: 24
103.199.188.0/22 maxlen: 24
103.199.200.0/22 maxlen: 24
103.199.204.0/22 maxlen: 24
103.199.208.0/22 maxlen: 24
103.199.212.0/22 maxlen: 24
103.200.84.0/22 maxlen: 24
103.201.134.0/23 maxlen: 24
103.203.72.0/22 maxlen: 24
103.208.228.0/22 maxlen: 24
103.208.232.0/22 maxlen: 24
103.210.88.0/22 maxlen: 24
103.210.92.0/22 maxlen: 24
103.210.100.0/22 maxlen: 24
103.229.0.0/24 maxlen: 24
103.246.40.0/22 maxlen: 24
103.246.192.0/22 maxlen: 24
103.247.4.0/22 maxlen: 24
103.247.52.0/22 maxlen: 24
112.133.192.0/18 maxlen: 24
120.138.12.0/22 maxlen: 24
122.252.224.0/19 maxlen: 24
137.59.92.0/22 maxlen: 24
139.5.0.0/22 maxlen: 24
139.5.4.0/22 maxlen: 24
139.5.8.0/22 maxlen: 24
180.94.32.0/22 maxlen: 24
202.21.40.0/22 maxlen: 24
202.21.44.0/22 maxlen: 24
202.43.120.0/22 maxlen: 24
202.140.128.0/22 maxlen: 24
202.148.56.0/22 maxlen: 24
202.168.84.0/22 maxlen: 24
202.170.200.0/22 maxlen: 24
202.170.204.0/22 maxlen: 24
202.176.0.0/22 maxlen: 24
203.153.32.0/20 maxlen: 20
203.153.32.0/24 maxlen: 24
203.153.33.0/24 maxlen: 24
203.153.34.0/24 maxlen: 24
203.153.35.0/24 maxlen: 24
203.153.36.0/24 maxlen: 24
203.153.37.0/24 maxlen: 24
203.153.38.0/24 maxlen: 24
203.153.39.0/24 maxlen: 24
203.153.40.0/24 maxlen: 24
203.153.41.0/24 maxlen: 24
203.153.42.0/24 maxlen: 24
203.153.43.0/24 maxlen: 24
203.153.44.0/24 maxlen: 24
203.153.45.0/24 maxlen: 24
203.153.46.0/24 maxlen: 24
203.153.47.0/24 maxlen: 24
220.158.156.0/22 maxlen: 24
2401:b200::/32 maxlen: 48
2406:f00:7::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39975 (0x9c27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Oct 25 06:59:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=671b41cd-203b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:ef:25:e6:6f:32:3d:16:78:2a:40:cb:28:
62:48:0f:81:fe:d3:e7:7a:5e:74:eb:38:81:6e:de:
95:6a:98:7f:a5:e9:9a:72:85:79:be:fb:00:2e:ce:
50:43:91:b4:05:3a:2c:81:fb:4e:d9:51:4f:f2:86:
c5:ed:55:57:eb:09:c9:9f:f0:d8:7e:f0:2e:9a:9a:
a4:09:8c:c0:49:e5:0e:97:19:cc:58:a3:87:29:ce:
4e:3b:90:c4:94:59:f4:9e:d3:08:00:cc:5b:06:42:
db:e3:09:e4:7e:06:17:cf:57:ea:f0:cc:47:83:d3:
eb:48:f3:58:0b:3b:14:73:38:64:95:97:e1:81:67:
77:88:0d:48:5d:3a:ff:ca:28:cd:35:98:32:38:8b:
38:e2:0f:00:c8:53:55:4f:eb:45:a4:96:c4:c6:b6:
be:68:98:ac:49:4f:bc:1c:14:d1:fc:98:3a:20:3f:
ce:ff:e8:48:d6:ae:d0:ce:c3:ec:c5:2c:27:e3:f6:
96:6b:2c:66:ce:bd:9a:28:68:9c:c9:1b:da:93:35:
ae:c7:8b:b5:cc:21:86:53:31:06:c5:41:a1:fe:fb:
95:a0:cf:33:4a:3e:0e:2c:1b:e8:d6:58:b4:46:6e:
93:0f:27:47:bc:be:e1:8c:c4:4e:1c:dd:ae:67:e4:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:29:30:54:60:2A:CA:8B:82:81:F0:83:C5:5E:38:23:30:1A:E8:0E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ABC3F294929E11EFBFA05C0BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.72.0/22
27.112.120.0/22
27.116.40.0/22
27.122.60.0/22
36.255.12.0-36.255.23.255
45.115.88.0/22
45.121.0.0/22
103.15.252.0/22
103.28.244.0/22
103.30.64.0/22
103.30.116.0/22
103.30.176.0/22
103.55.72.0/22
103.61.72.0/22
103.66.72.0/22
103.74.108.0/22
103.76.208.0/22
103.82.80.0/22
103.82.144.0/22
103.176.74.0/24
103.197.112.0/22
103.199.180.0/22
103.199.188.0/22
103.199.200.0-103.199.215.255
103.200.84.0/22
103.201.134.0/23
103.203.72.0/22
103.208.228.0-103.208.235.255
103.210.88.0/21
103.210.100.0/22
103.229.0.0/24
103.246.40.0/22
103.246.192.0/22
103.247.4.0/22
103.247.52.0/22
112.133.192.0/18
120.138.12.0/22
122.252.224.0/19
137.59.92.0/22
139.5.0.0-139.5.11.255
180.94.32.0/22
202.21.40.0/21
202.43.120.0/22
202.140.128.0/22
202.148.56.0/22
202.168.84.0/22
202.170.200.0/21
202.176.0.0/22
203.153.32.0/20
220.158.156.0/22
IPv6:
2401:b200::/32
2406:f00:7::/48
Signature Algorithm: sha256WithRSAEncryption
92:b7:ec:03:c1:0a:e3:21:8f:ef:66:ab:d8:41:f4:9c:46:7c:
e1:b9:f1:35:9e:fc:1b:bc:14:8b:60:40:0e:38:7b:2d:18:f7:
5c:17:51:05:b2:48:1d:84:73:57:11:a9:0f:cc:b5:b6:ad:44:
52:4b:31:38:19:40:88:a5:ba:ad:73:0c:0d:53:c2:49:37:b9:
d2:9c:39:cd:b2:e1:9b:c0:2d:9f:c0:31:07:c1:ca:b5:06:d8:
6a:42:f1:99:d3:33:48:07:51:f8:5d:66:00:3f:0c:ec:6e:e6:
f4:cc:67:08:36:ce:42:bf:4d:87:1a:0f:80:ff:9b:c3:3d:5b:
1a:2d:93:bb:52:54:04:d1:ad:f1:a0:8e:3a:f3:61:f0:1b:99:
9e:9e:3a:6d:29:45:15:df:39:5a:3b:8c:fc:2d:15:33:9b:01:
a4:49:f1:b0:c2:d7:a7:26:6a:96:3e:cc:93:c8:c6:a8:93:42:
86:3e:ae:17:77:91:3f:d9:2c:cd:54:43:cb:2b:af:b1:2b:88:
38:be:06:8e:75:b8:7e:1f:ea:5e:42:59:cd:24:85:72:63:d1:
53:c3:86:99:06:0e:92:e9:b1:35:f4:49:43:64:bb:04:d1:1b:
5d:65:70:67:97:38:fe:f3:07:0f:c7:32:4f:e4:b0:58:d4:58:
f0:dc:e1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:53 2025 by rpki-client