Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C61987386C4411EFA8DA2776C4F9AE02.roa
File: C61987386C4411EFA8DA2776C4F9AE02.roa (raw, json)
Hash identifier: njiqWMZLllybR2J9Bu+rW/tLyRGjSVwP+y3BE3VgbOI=
Subject key identifier: 77:41:D2:69:7F:98:51:06:05:D3:C6:2F:66:D9:74:6A:2C:E9:5D:B0
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9834
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C61987386C4411EFA8DA2776C4F9AE02.roa
Signing time: Fri 06 Sep 2024 11:40:11 +0000
ROA not before: Fri 06 Sep 2024 11:40:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24186
IP address blocks: 27.111.72.0/22 maxlen: 24
27.112.120.0/22 maxlen: 24
27.116.40.0/22 maxlen: 24
27.122.60.0/22 maxlen: 24
36.255.12.0/22 maxlen: 24
36.255.16.0/22 maxlen: 24
36.255.20.0/22 maxlen: 24
45.115.88.0/22 maxlen: 24
45.121.0.0/22 maxlen: 24
45.124.224.0/22 maxlen: 24
45.124.228.0/22 maxlen: 24
45.124.232.0/22 maxlen: 24
45.124.236.0/22 maxlen: 24
103.15.252.0/22 maxlen: 24
103.28.244.0/22 maxlen: 24
103.30.64.0/22 maxlen: 24
103.30.116.0/22 maxlen: 24
103.30.176.0/22 maxlen: 24
103.55.72.0/22 maxlen: 24
103.61.72.0/22 maxlen: 24
103.66.72.0/22 maxlen: 24
103.74.108.0/22 maxlen: 24
103.76.208.0/22 maxlen: 22
103.76.208.0/24 maxlen: 24
103.76.209.0/24 maxlen: 24
103.76.210.0/24 maxlen: 24
103.76.211.0/24 maxlen: 24
103.82.80.0/22 maxlen: 24
103.82.144.0/23 maxlen: 24
103.82.146.0/23 maxlen: 24
103.163.177.0/24 maxlen: 24
103.176.74.0/24 maxlen: 24
103.197.112.0/22 maxlen: 24
103.199.180.0/22 maxlen: 24
103.199.188.0/22 maxlen: 24
103.199.200.0/22 maxlen: 24
103.199.204.0/22 maxlen: 24
103.199.208.0/22 maxlen: 24
103.199.212.0/22 maxlen: 24
103.200.84.0/22 maxlen: 24
103.201.134.0/23 maxlen: 24
103.203.72.0/22 maxlen: 24
103.208.228.0/22 maxlen: 24
103.208.232.0/22 maxlen: 24
103.210.88.0/22 maxlen: 24
103.210.92.0/22 maxlen: 24
103.210.100.0/22 maxlen: 24
103.229.0.0/24 maxlen: 24
103.246.40.0/22 maxlen: 24
103.246.192.0/22 maxlen: 24
103.247.4.0/22 maxlen: 24
103.247.52.0/22 maxlen: 24
112.133.192.0/18 maxlen: 24
120.138.12.0/22 maxlen: 24
122.252.224.0/19 maxlen: 24
137.59.92.0/22 maxlen: 24
139.5.0.0/22 maxlen: 24
139.5.4.0/22 maxlen: 24
139.5.8.0/22 maxlen: 24
180.94.32.0/22 maxlen: 24
202.21.40.0/22 maxlen: 24
202.21.44.0/22 maxlen: 24
202.43.120.0/22 maxlen: 24
202.140.128.0/22 maxlen: 24
202.148.56.0/22 maxlen: 24
202.168.84.0/22 maxlen: 24
202.170.200.0/22 maxlen: 24
202.170.204.0/22 maxlen: 24
202.176.0.0/22 maxlen: 24
203.153.32.0/20 maxlen: 20
203.153.32.0/24 maxlen: 24
203.153.33.0/24 maxlen: 24
203.153.34.0/24 maxlen: 24
203.153.35.0/24 maxlen: 24
203.153.36.0/24 maxlen: 24
203.153.37.0/24 maxlen: 24
203.153.38.0/24 maxlen: 24
203.153.39.0/24 maxlen: 24
203.153.40.0/24 maxlen: 24
203.153.41.0/24 maxlen: 24
203.153.42.0/24 maxlen: 24
203.153.43.0/24 maxlen: 24
203.153.44.0/24 maxlen: 24
203.153.45.0/24 maxlen: 24
203.153.46.0/24 maxlen: 24
203.153.47.0/24 maxlen: 24
220.158.156.0/22 maxlen: 24
2401:b200::/32 maxlen: 48
2406:f00:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 09 Sep 2024 10:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38964 (0x9834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Sep 6 11:40:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66daea1b-5079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:1e:f5:f5:9b:ae:b0:65:42:5c:3b:b8:40:
eb:e6:7e:26:63:fd:a7:0b:ba:8c:8b:9f:12:a4:bb:
26:e2:64:e0:f9:bb:11:85:e0:0b:b8:97:52:a8:f8:
0b:e3:d0:dd:67:73:3b:90:d8:8d:7e:6c:1e:99:77:
e7:44:23:e1:18:36:3a:b5:8d:16:15:ab:b4:8a:4d:
dc:37:aa:e9:f9:cb:95:db:05:7a:1b:05:87:bc:d3:
67:e9:c4:77:21:ac:8e:69:b0:ed:ff:2a:8e:b4:ff:
fa:7f:9d:15:ff:99:47:37:08:58:fb:ed:5c:4d:93:
8d:1f:1e:9a:f9:5a:7d:07:1b:c4:4b:86:06:e3:22:
8c:0e:83:7c:42:73:bd:1f:92:a8:5c:57:b2:3f:16:
53:03:5c:7e:70:ec:92:62:45:cf:94:37:94:43:71:
ba:52:75:ac:9b:b0:08:7f:dc:a2:96:77:bf:ed:e8:
76:be:0e:7b:be:a7:3f:45:7e:6d:3a:95:46:b4:2f:
01:38:0e:ac:5c:41:ba:59:9d:43:01:e3:b8:06:8c:
35:e8:c7:50:35:5a:48:55:9d:55:45:41:b8:45:04:
01:8b:5f:a8:57:1f:55:0a:a5:b3:70:d4:90:02:89:
82:aa:9a:ab:05:e7:25:49:a2:75:bc:74:57:4e:70:
56:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:41:D2:69:7F:98:51:06:05:D3:C6:2F:66:D9:74:6A:2C:E9:5D:B0
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C61987386C4411EFA8DA2776C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.111.72.0/22
27.112.120.0/22
27.116.40.0/22
27.122.60.0/22
36.255.12.0-36.255.23.255
45.115.88.0/22
45.121.0.0/22
45.124.224.0/20
103.15.252.0/22
103.28.244.0/22
103.30.64.0/22
103.30.116.0/22
103.30.176.0/22
103.55.72.0/22
103.61.72.0/22
103.66.72.0/22
103.74.108.0/22
103.76.208.0/22
103.82.80.0/22
103.82.144.0/22
103.163.177.0/24
103.176.74.0/24
103.197.112.0/22
103.199.180.0/22
103.199.188.0/22
103.199.200.0-103.199.215.255
103.200.84.0/22
103.201.134.0/23
103.203.72.0/22
103.208.228.0-103.208.235.255
103.210.88.0/21
103.210.100.0/22
103.229.0.0/24
103.246.40.0/22
103.246.192.0/22
103.247.4.0/22
103.247.52.0/22
112.133.192.0/18
120.138.12.0/22
122.252.224.0/19
137.59.92.0/22
139.5.0.0-139.5.11.255
180.94.32.0/22
202.21.40.0/21
202.43.120.0/22
202.140.128.0/22
202.148.56.0/22
202.168.84.0/22
202.170.200.0/21
202.176.0.0/22
203.153.32.0/20
220.158.156.0/22
IPv6:
2401:b200::/32
2406:f00:7::/48
Signature Algorithm: sha256WithRSAEncryption
a1:67:77:55:96:e3:d3:3e:3e:42:6d:b1:cb:45:4e:9b:2a:44:
6a:30:b5:96:a6:7d:50:37:eb:ab:72:39:e0:9a:5f:20:97:75:
63:d9:b5:d6:e4:fc:44:0e:d8:bd:d4:94:39:28:93:bf:1b:ee:
2a:d5:89:63:b0:33:55:f7:c8:bf:78:89:f4:68:ff:a7:e8:79:
84:77:c9:40:b9:1f:55:aa:f3:eb:16:0e:6e:5b:02:8d:99:c6:
ab:e3:fb:29:05:f8:48:36:74:d3:a4:3e:a4:e1:17:bd:9c:56:
d1:f1:d3:c0:ec:fd:fa:5a:84:e4:5f:88:6f:76:4d:eb:07:b1:
62:e8:e5:64:e4:24:f1:30:d9:3a:4b:6e:4a:ac:60:67:cb:c1:
e1:ca:2e:14:97:db:f1:6c:f2:14:7a:53:29:5f:64:68:41:35:
88:f7:83:e9:15:60:34:a2:20:15:89:bc:95:17:bc:d4:57:91:
9f:a0:b2:83:73:56:dd:74:24:60:2f:1f:47:8f:cb:4e:af:d2:
d5:35:8d:51:da:74:e2:ff:15:ba:06:0f:d7:19:0a:61:3b:a4:
f4:fa:39:1a:ab:21:34:5c:e6:2d:f1:4a:88:6d:94:70:6e:74:
a7:de:71:04:b9:1a:b1:62:95:d5:43:e4:85:76:0a:ec:a0:c2:
ea:bf:cc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:39 2025 by rpki-client