Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B716C01EE54011EFBBB1B917C4F9AE02.roa
File: B716C01EE54011EFBBB1B917C4F9AE02.roa (raw, json)
Hash identifier: Lf5UtHNxj7q4kqj9qOwYLC6EBgOipDNC8/sEfqElPcc=
Subject key identifier: 5B:42:31:F8:B2:9C:DB:46:44:09:47:48:54:0E:53:60:13:CE:E9:A8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A55E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B716C01EE54011EFBBB1B917C4F9AE02.roa
Signing time: Fri 07 Feb 2025 10:45:58 +0000
ROA not before: Fri 07 Feb 2025 10:45:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.109.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.144.188.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.158.180.0/24 maxlen: 24
103.159.137.0/24 maxlen: 24
103.164.0.0/23 maxlen: 24
103.167.157.0/24 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.128.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.242.236.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.64.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 07 Feb 2025 12:16:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42334 (0xa55e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 7 10:45:58 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67a5e466-de64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:70:e4:76:11:2d:36:4e:aa:bd:65:76:35:
3c:a1:99:e6:10:94:6f:94:98:09:42:76:ea:30:db:
61:2d:b3:1a:b2:ca:c4:d5:fd:85:e1:75:24:e7:1c:
30:88:bd:cc:b5:cb:11:d5:17:5a:00:2c:e6:0a:68:
af:89:9f:93:c1:36:e2:2c:f7:e1:2f:1e:56:e2:4b:
ef:72:9a:4b:62:60:2d:dd:7a:ff:6d:35:8e:fb:d3:
b8:3b:78:4b:bc:18:eb:49:19:fa:55:5e:59:72:2d:
8f:75:7f:0d:b9:97:a8:e7:84:67:ac:cf:88:8f:14:
14:ad:66:03:14:31:66:39:b1:2c:7c:51:53:1e:23:
91:d4:7a:9f:5e:17:06:e4:11:93:85:fb:ac:bd:7f:
52:c1:04:ab:59:81:f1:13:03:e7:b4:67:29:c6:43:
63:48:5a:bd:24:94:77:70:2a:00:85:58:97:c3:75:
1c:d7:8a:52:14:0e:d6:c4:aa:e3:c3:97:ba:db:a6:
2c:97:6d:ed:1f:c3:81:8f:e0:fb:30:46:c5:eb:d9:
92:dc:c9:c5:3c:11:6a:9d:c9:8c:a9:85:23:68:f7:
8f:30:db:4c:f1:50:ca:bc:70:b6:33:d2:03:b3:75:
d2:fc:29:d2:ff:96:7a:85:fe:be:5b:53:d0:ac:0e:
b7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:42:31:F8:B2:9C:DB:46:44:09:47:48:54:0E:53:60:13:CE:E9:A8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B716C01EE54011EFBBB1B917C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.143.109.0/24
103.144.112.0/23
103.144.188.0/23
103.153.208.0/23
103.155.194.0/23
103.158.180.0/24
103.159.137.0/24
103.164.0.0/23
103.167.157.0/24
103.171.8.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.180.216.0/23
103.192.72.0/22
103.199.92.0/22
103.199.128.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.236.112.0/22
103.242.236.0/22
103.254.200.0/22
137.59.64.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
220.158.140.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
84:e3:61:af:02:a5:b0:3a:8a:ba:47:7e:aa:01:9c:c5:16:09:
e8:82:5c:ac:c4:d0:52:77:e7:2b:19:58:93:6e:38:b6:9a:c3:
db:20:25:7e:ad:2a:1d:7f:70:be:18:6e:11:2d:bb:2d:b1:9f:
51:b3:4a:fa:90:9c:ea:53:06:34:70:2b:50:eb:45:8d:a2:68:
f3:42:2a:67:d6:b5:7e:07:86:bd:5d:f9:d0:f5:d2:cb:52:a5:
10:41:2a:3d:0e:47:53:ff:37:2c:82:ed:65:46:ca:ef:3a:f0:
62:ab:40:63:06:88:23:ad:59:62:a0:d0:c2:99:ca:90:8b:d0:
75:c4:d6:d2:86:75:e3:3d:51:3d:43:59:c8:e0:78:6f:84:e4:
5f:4b:1a:47:d5:4b:d9:b8:83:13:82:b9:0c:9d:01:49:5f:59:
a0:8d:03:ab:e1:9e:56:c7:19:56:19:6f:1b:c0:2b:f1:f2:38:
2f:67:e1:26:b4:27:13:2c:0b:35:c9:41:1d:f8:72:c3:05:93:
df:53:69:4d:d9:e5:29:8e:d3:71:46:27:4c:09:c0:e5:1f:12:
14:11:6c:ec:a5:c0:e2:be:ba:23:52:48:2d:ee:91:d1:85:18:
8c:0d:38:83:9f:83:11:46:71:78:ea:e8:6b:26:22:f6:ad:2b:
1d:8c:79:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:14:47 2025 by rpki-client