Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCA5A950C84311EFA5D77F73C4F9AE02.roa
File: CCA5A950C84311EFA5D77F73C4F9AE02.roa (raw, json)
Hash identifier: /qZuDiJ6vgK8UQhzRpI20RP34RF3Ep7jaEqJGzjWNhw=
Subject key identifier: 5D:E9:87:3C:03:C6:74:57:2C:3C:46:1C:E5:40:06:71:F6:DD:48:D7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A159
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCA5A950C84311EFA5D77F73C4F9AE02.roa
Signing time: Thu 02 Jan 2025 08:41:13 +0000
ROA not before: Thu 02 Jan 2025 08:41:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140171
IP address blocks: 103.29.63.0/24 maxlen: 24
103.38.182.0/23 maxlen: 24
103.53.30.0/24 maxlen: 24
103.53.31.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
103.72.218.0/24 maxlen: 24
103.72.219.0/24 maxlen: 24
103.77.14.0/24 maxlen: 24
103.80.152.0/24 maxlen: 24
103.80.153.0/24 maxlen: 24
103.80.154.0/23 maxlen: 24
103.134.132.0/24 maxlen: 24
103.144.192.0/24 maxlen: 24
103.156.200.0/23 maxlen: 24
103.159.162.0/24 maxlen: 24
103.160.186.0/24 maxlen: 24
103.160.187.0/24 maxlen: 24
103.161.32.0/24 maxlen: 24
103.161.33.0/24 maxlen: 24
103.161.59.0/24 maxlen: 24
103.163.42.0/23 maxlen: 24
103.163.158.0/24 maxlen: 24
103.168.23.0/24 maxlen: 24
103.169.154.0/24 maxlen: 24
103.169.155.0/24 maxlen: 24
103.169.167.0/24 maxlen: 24
103.175.0.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.187.166.0/23 maxlen: 24
103.190.100.0/23 maxlen: 24
103.191.202.0/23 maxlen: 24
103.209.62.0/24 maxlen: 24
103.209.63.0/24 maxlen: 24
103.209.174.0/23 maxlen: 24
202.61.108.0/24 maxlen: 24
2001:df0:cf80::/48 maxlen: 48
2001:df1:1fc0::/48 maxlen: 48
2001:df1:2040::/48 maxlen: 48
2001:df1:20c0::/48 maxlen: 48
2001:df1:2240::/48 maxlen: 48
2001:df1:22c0::/48 maxlen: 48
2001:df1:2740::/48 maxlen: 48
2001:df1:8740::/48 maxlen: 48
2001:df2:240::/47 maxlen: 49
2001:df4:3ac0::/48 maxlen: 48
2001:df4:5640::/48 maxlen: 48
2401:c5a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 16 Jan 2025 05:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41305 (0xa159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 2 08:41:13 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67765129-f59f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:61:fa:54:e0:b5:58:03:fb:e8:a6:4a:2a:
83:01:a3:7f:a2:6c:8d:77:c2:2c:f8:35:54:de:82:
7e:5d:be:51:5c:62:51:85:73:76:5a:34:fc:e5:9f:
0a:20:2e:cb:d3:f9:7a:69:79:0b:90:76:e5:e1:8f:
2c:7f:2c:70:41:f7:e4:e9:e5:81:16:d9:0b:58:f5:
53:14:1f:d1:26:6a:37:58:22:ba:2f:1f:96:da:4d:
af:6f:8f:8f:03:da:8a:35:ca:ce:23:0a:5e:e3:08:
d2:15:fa:a1:22:67:ea:4f:95:81:98:6d:f7:03:ea:
fc:f6:23:a9:12:f6:f1:e4:7a:60:99:52:26:2c:d0:
7a:63:b9:9b:26:b5:02:a3:f5:a3:15:87:58:e6:40:
3b:23:ef:36:62:49:9e:cc:39:10:80:df:51:41:e8:
53:f9:7b:7e:cc:e6:67:f7:9e:e0:c8:d6:05:57:d0:
7e:ca:6c:47:fd:37:39:f6:f6:17:93:f6:1f:06:9c:
f9:59:74:2d:ab:f6:20:cc:6f:9c:89:2a:bd:2c:20:
fd:a3:52:6b:bd:3a:cf:0a:1f:b0:b0:e8:e0:2f:20:
d9:d3:b8:4e:4c:a0:55:51:13:a3:2d:ba:34:2e:2e:
ed:84:fd:e8:69:75:3f:5f:90:aa:14:ae:f4:e1:17:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E9:87:3C:03:C6:74:57:2C:3C:46:1C:E5:40:06:71:F6:DD:48:D7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCA5A950C84311EFA5D77F73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.29.63.0/24
103.38.182.0/23
103.53.30.0/23
103.56.84.0/24
103.72.218.0/23
103.77.14.0/24
103.80.152.0/22
103.134.132.0/24
103.144.192.0/24
103.156.200.0/23
103.159.162.0/24
103.160.186.0/23
103.161.32.0/23
103.161.59.0/24
103.163.42.0/23
103.163.158.0/24
103.168.23.0/24
103.169.154.0/23
103.169.167.0/24
103.175.0.0/23
103.176.142.0/24
103.187.166.0/23
103.190.100.0/23
103.191.202.0/23
103.209.62.0/23
103.209.174.0/23
202.61.108.0/24
IPv6:
2001:df0:cf80::/48
2001:df1:1fc0::/48
2001:df1:2040::/48
2001:df1:20c0::/48
2001:df1:2240::/48
2001:df1:22c0::/48
2001:df1:2740::/48
2001:df1:8740::/48
2001:df2:240::/47
2001:df4:3ac0::/48
2001:df4:5640::/48
2401:c5a0::/32
Signature Algorithm: sha256WithRSAEncryption
76:95:0b:0f:8f:e4:0c:7c:a0:07:d3:76:48:5c:2c:e2:a0:b2:
15:f0:e0:6d:92:9d:56:b1:98:4c:24:a3:62:ab:ea:c7:4a:18:
df:f3:5c:b2:7f:6d:a8:bf:13:26:7a:b3:3e:d1:0e:33:d1:5d:
57:02:d2:e5:2d:6c:e5:2e:d5:ce:92:7d:de:e0:1e:ba:c6:aa:
4c:4e:13:ef:8d:0c:74:4d:12:95:b1:00:a6:89:5d:4d:5a:46:
85:58:f8:6a:87:36:78:a8:79:e2:5f:0c:b3:de:cd:93:2b:8e:
02:4f:08:91:1d:93:e8:da:fa:44:e4:a0:36:fb:6e:79:80:df:
b9:3b:26:e6:31:ef:b3:07:be:3e:85:11:37:66:7f:f0:50:ef:
b4:d7:bf:b3:09:00:83:b8:6d:16:c8:7a:90:60:84:33:eb:1f:
38:0e:c0:53:7b:6a:d9:bf:25:27:ff:14:ab:f7:d7:eb:5b:bc:
7d:eb:78:f1:ff:e7:3b:62:8a:57:14:7a:c5:71:d7:55:c2:70:
46:ec:88:88:d7:39:8b:96:cd:5b:e9:53:7f:a4:55:42:9b:90:
71:d1:48:d9:11:b4:af:df:9a:34:2d:2b:b0:d9:af:08:60:c7:
eb:aa:0a:dc:29:2c:8b:8b:29:e2:68:c3:c9:63:3f:a1:1e:f1:
8c:07:11:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:59 2025 by rpki-client