Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C29F629AF9A611EF9B931E70C4F9AE02.roa
File: C29F629AF9A611EF9B931E70C4F9AE02.roa (raw, json)
Hash identifier: K4XK6+ipByWQi2py9GVMacRoTb3UCFUh4T3y468zceA=
Subject key identifier: 20:9C:07:33:1C:B5:F8:D4:BE:D1:9A:CA:6C:B0:1A:3B:B5:83:39:77
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A948
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C29F629AF9A611EF9B931E70C4F9AE02.roa
Signing time: Thu 06 Mar 2025 06:32:49 +0000
ROA not before: Thu 06 Mar 2025 06:32:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.239.152.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.39.126.0/23 maxlen: 24
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.180.0/23 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.170.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.50.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.159.137.0/24 maxlen: 24
103.162.80.0/23 maxlen: 24
103.167.157.0/24 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
103.171.60.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.58.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.245.170.0/23 maxlen: 24
103.254.96.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:c2a0::/32 maxlen: 32
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
2407:1340::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 06 Mar 2025 12:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43336 (0xa948)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 6 06:32:49 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c94190-77f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7b:74:33:1f:86:d7:a6:14:62:1e:53:27:c8:
63:4b:8f:81:9f:fb:17:dd:26:df:22:d8:05:0e:88:
ae:49:c0:ea:37:50:e8:94:ff:e5:55:4b:9b:63:ab:
e8:b7:f6:86:42:5b:11:38:cf:a0:47:d5:97:9b:32:
7d:0e:17:6e:e4:c8:88:ea:54:55:a0:aa:1b:c9:b5:
51:b8:4a:18:d7:c7:7e:7a:38:89:40:dc:39:4a:72:
2c:20:ce:36:21:43:f5:79:48:d7:ba:5b:ff:e5:b2:
07:ea:65:05:6c:42:47:e8:44:26:05:c8:5e:2a:d1:
e7:b1:e9:81:d1:e3:95:72:90:da:54:ef:59:90:90:
80:70:0a:be:86:13:d0:6a:f2:b6:29:5b:02:72:70:
1e:7c:f7:4f:ac:27:bf:b2:a7:dc:bc:a3:0f:99:ff:
67:12:69:09:54:07:3f:65:96:bf:87:bb:5a:f5:de:
eb:81:95:6c:09:16:2f:7a:c1:09:ef:9c:df:59:cd:
8d:02:39:87:f2:dd:d7:e8:be:b6:ce:c7:36:29:94:
ee:a1:27:93:28:83:cc:5c:e4:73:97:cb:c5:51:fd:
d9:c2:2f:1f:79:84:86:9a:ff:a3:66:69:1d:b5:c8:
99:a6:c1:ec:43:ec:00:52:06:db:be:9b:26:ce:58:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9C:07:33:1C:B5:F8:D4:BE:D1:9A:CA:6C:B0:1A:3B:B5:83:39:77
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C29F629AF9A611EF9B931E70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.239.152.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.39.126.0/23
103.41.40.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.143.180.0/23
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.170.0/23
103.155.194.0/23
103.157.50.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.159.137.0/24
103.162.80.0/23
103.167.157.0/24
103.169.58.0/23
103.171.8.0/23
103.171.54.0/23
103.171.60.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.175.58.0/23
103.175.106.0/23
103.176.142.0/24
103.180.216.0/23
103.190.12.0/23
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.236.112.0/22
103.245.170.0/23
103.254.96.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:c2a0::/32
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
2407:1340::/32
Signature Algorithm: sha256WithRSAEncryption
63:4d:fa:12:f2:a3:d2:a7:0f:78:31:75:a4:fc:48:e4:51:1d:
cd:6c:cb:26:e4:76:64:fb:09:ee:c0:0d:47:47:a2:f2:ec:90:
85:1e:25:85:58:dc:a3:6e:ed:0b:ba:a9:d0:96:c9:41:36:dc:
42:b1:fd:66:a6:3a:88:1d:20:c8:96:65:8d:08:19:f3:01:34:
18:d8:48:05:ec:54:43:5a:1d:3f:33:3a:9e:d3:21:65:2d:57:
3a:58:7c:c1:5b:7f:71:01:16:42:37:1d:11:91:75:5f:28:ad:
41:42:35:39:17:84:3a:7b:2f:e6:42:d7:21:0f:26:f9:4a:3b:
f1:35:31:58:34:68:38:68:ad:82:1d:fa:82:79:67:25:88:f0:
34:7b:96:c6:80:6b:4f:31:55:0d:17:4d:30:2a:65:b4:0c:aa:
87:90:23:63:93:e2:3b:3c:48:11:56:43:7f:eb:ad:86:a2:c8:
c5:6c:7a:6f:77:6b:12:17:33:fd:ee:ba:ab:95:15:72:ac:56:
f2:e2:ee:c5:14:d0:ae:57:c0:ce:52:f9:9d:ae:e8:22:3c:bf:
4f:6d:a1:d7:66:39:93:87:09:df:ec:8d:10:23:29:06:b0:ef:
65:5d:a3:4f:0c:4a:77:3d:51:ca:d4:03:11:16:af:82:d1:32:
83:e3:66:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:27 2025 by rpki-client