Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C963F18CDA4711EF9EC21176C4F9AE02.roa
File: C963F18CDA4711EF9EC21176C4F9AE02.roa (raw, json)
Hash identifier: SSI8e0T5Pw2XklSP99/71o4vLnbidKBwqBW6Z8qMzjo=
Subject key identifier: 8E:06:33:71:25:BF:DB:D4:C6:EC:AF:F2:F8:C5:51:B1:EA:9C:5A:A4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A38C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C963F18CDA4711EF9EC21176C4F9AE02.roa
Signing time: Fri 24 Jan 2025 11:38:53 +0000
ROA not before: Fri 24 Jan 2025 11:38:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133647
IP address blocks: 43.229.162.0/24 maxlen: 24
43.230.156.0/22 maxlen: 24
45.115.252.0/22 maxlen: 24
45.116.68.0/22 maxlen: 24
103.38.70.0/24 maxlen: 24
103.43.4.0/22 maxlen: 24
103.50.4.0/22 maxlen: 24
103.55.6.0/23 maxlen: 24
103.61.102.0/23 maxlen: 24
103.69.216.0/22 maxlen: 24
103.70.144.0/22 maxlen: 24
103.70.176.0/23 maxlen: 24
103.79.112.0/22 maxlen: 24
103.87.48.0/24 maxlen: 24
103.87.49.0/24 maxlen: 24
103.91.68.0/22 maxlen: 24
103.93.176.0/22 maxlen: 24
103.109.72.0/23 maxlen: 24
103.122.84.0/24 maxlen: 24
103.122.85.0/24 maxlen: 24
103.129.194.0/24 maxlen: 24
103.129.195.0/24 maxlen: 24
103.144.37.0/24 maxlen: 24
103.156.168.0/23 maxlen: 24
103.157.160.0/23 maxlen: 24
103.159.154.0/23 maxlen: 24
103.161.230.0/23 maxlen: 24
103.161.232.0/24 maxlen: 24
103.161.233.0/24 maxlen: 24
103.174.105.0/24 maxlen: 24
103.175.76.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.176.71.0/24 maxlen: 24
103.214.97.0/24 maxlen: 24
103.220.28.0/24 maxlen: 24
103.220.29.0/24 maxlen: 24
103.220.30.0/24 maxlen: 24
103.220.31.0/24 maxlen: 24
103.237.172.0/24 maxlen: 24
103.237.173.0/24 maxlen: 24
103.237.174.0/24 maxlen: 24
103.237.175.0/24 maxlen: 24
110.172.163.0/24 maxlen: 24
175.111.180.0/24 maxlen: 24
175.111.182.0/24 maxlen: 24
175.111.183.0/24 maxlen: 24
2001:df0:dc80::/48 maxlen: 48
2001:df1:b280::/48 maxlen: 48
2001:df1:f440::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 06 Feb 2025 06:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41868 (0xa38c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 24 11:38:53 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67937bcd-d563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:09:a9:bc:0d:aa:25:d6:af:6e:ad:0b:8b:06:
81:a3:aa:6a:85:1c:93:cd:82:2c:5e:9c:28:33:2e:
04:56:0b:6f:51:2c:9f:16:b8:ce:fc:97:b2:5c:8d:
61:31:38:d5:e9:67:92:2e:be:cd:86:a6:5c:46:39:
d2:a4:fd:0f:df:b1:01:c8:26:24:e2:08:c2:e7:35:
64:d6:5f:6f:ec:33:4c:70:65:89:c5:ac:37:c4:d4:
1f:17:2e:21:3d:81:fe:ef:99:fa:ba:c2:b6:77:dd:
42:ef:bc:46:da:af:6c:f3:76:96:80:08:4b:24:84:
d6:e4:c3:b9:e8:10:f7:83:e1:68:d8:47:19:a0:96:
55:72:59:5d:78:fb:11:83:ae:24:04:9e:3f:c3:5d:
a1:76:72:6d:3a:b8:f1:71:e3:66:2a:a6:0f:f7:8e:
b6:d9:a3:97:db:54:d2:1e:ee:be:65:a0:5d:ee:23:
71:2c:98:a1:ca:e0:be:47:39:49:b1:fd:39:7e:f2:
bd:e6:05:c4:c7:b5:aa:cb:e3:cd:52:1d:fc:28:5c:
9b:c6:bc:76:9d:ce:cc:45:f7:56:71:f2:bf:bc:cd:
33:59:ea:50:69:eb:14:c0:d2:07:66:a2:18:5f:08:
e0:87:52:c1:40:ed:96:b1:c1:21:20:21:c9:19:08:
1b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:06:33:71:25:BF:DB:D4:C6:EC:AF:F2:F8:C5:51:B1:EA:9C:5A:A4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C963F18CDA4711EF9EC21176C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.162.0/24
43.230.156.0/22
45.115.252.0/22
45.116.68.0/22
103.38.70.0/24
103.43.4.0/22
103.50.4.0/22
103.55.6.0/23
103.61.102.0/23
103.69.216.0/22
103.70.144.0/22
103.70.176.0/23
103.79.112.0/22
103.87.48.0/23
103.91.68.0/22
103.93.176.0/22
103.109.72.0/23
103.122.84.0/23
103.129.194.0/23
103.144.37.0/24
103.156.168.0/23
103.157.160.0/23
103.159.154.0/23
103.161.230.0-103.161.233.255
103.174.105.0/24
103.175.76.0/23
103.176.71.0/24
103.214.97.0/24
103.220.28.0/22
103.237.172.0/22
110.172.163.0/24
175.111.180.0/24
175.111.182.0/23
IPv6:
2001:df0:dc80::/48
2001:df1:b280::/48
2001:df1:f440::/48
Signature Algorithm: sha256WithRSAEncryption
24:dd:50:35:85:0a:a2:35:97:17:57:43:d6:d0:9e:15:32:b3:
9d:5e:02:1a:82:3b:a4:07:4b:58:de:7a:12:5d:d8:68:94:77:
ab:83:7e:4f:82:c6:62:b0:3e:7b:00:71:51:71:0f:35:77:06:
09:7b:e3:07:0b:e8:92:21:10:0e:e6:84:07:c7:f4:1b:00:85:
e2:23:d4:11:80:e0:6a:b8:d2:19:64:65:1c:ac:35:b4:c4:a1:
7a:49:33:9c:35:7c:aa:db:9a:43:4a:0e:7d:76:62:8b:9e:09:
92:f1:9d:90:4b:a8:d0:33:c4:28:18:7c:9f:63:43:b8:d0:d7:
4c:42:30:6e:4b:1a:16:fc:15:39:c8:d5:f6:45:e3:d7:9d:89:
da:d8:6b:eb:e3:b0:a6:af:64:39:ae:6f:b0:ab:1e:34:25:d9:
d9:37:7d:cf:b2:c9:dc:0d:68:de:e2:ef:84:ce:84:f2:3f:f5:
3c:43:42:8c:8c:03:0c:d9:ca:ce:75:11:2f:88:a4:3a:a6:58:
66:ae:50:4d:ca:77:f7:38:0a:2f:c6:32:62:00:a9:f3:9d:e6:
29:d6:fd:52:54:cf:98:ad:b8:24:42:50:6b:20:80:bd:94:49:
26:c8:94:0e:7b:cb:f7:91:a5:aa:b6:63:31:84:16:09:4d:9d:
7e:e5:04:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:30:00 2025 by rpki-client