Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCFBDD72096411F089994473C4F9AE02.roa
File: CCFBDD72096411F089994473C4F9AE02.roa (raw, json)
Hash identifier: FQRw3CRfSYE76SpYR7kmlY6ruOVnLfP8qeIUoGBPg3k=
Subject key identifier: 66:25:88:D2:A6:67:8B:E1:14:DD:E7:A9:96:1E:13:5C:2E:B1:2E:02
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AC5F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCFBDD72096411F089994473C4F9AE02.roa
Signing time: Tue 25 Mar 2025 10:34:59 +0000
ROA not before: Tue 25 Mar 2025 10:34:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.239.152.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
45.251.32.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.44.104.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.51.152.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.44.0/23 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.98.79.0/24 maxlen: 24
103.99.48.0/23 maxlen: 24
103.108.76.0/22 maxlen: 24
103.109.108.0/22 maxlen: 24
103.110.72.0/23 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.135.60.0/22 maxlen: 24
103.136.64.0/22 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.180.0/23 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.170.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.50.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.158.216.0/23 maxlen: 24
103.159.137.0/24 maxlen: 24
103.159.178.0/23 maxlen: 24
103.162.80.0/23 maxlen: 24
103.165.10.0/23 maxlen: 24
103.165.20.0/23 maxlen: 24
103.165.26.0/23 maxlen: 24
103.166.220.0/23 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
103.171.60.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.26.0/23 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.12.0/23 maxlen: 24
103.175.58.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.191.86.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.234.64.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.245.170.0/23 maxlen: 24
103.254.96.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
115.166.132.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
202.9.55.0/24 maxlen: 24
203.191.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Mar 2025 05:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44127 (0xac5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 25 10:34:59 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67e286d3-f0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:b1:c0:a8:a7:ce:68:7e:f9:a5:a4:ac:b4:
e8:b0:aa:65:b9:b8:98:16:62:04:5e:e4:25:13:45:
ac:e1:be:3b:6c:b2:cb:56:1c:3c:10:0f:ed:4d:44:
75:70:af:83:4e:57:94:fc:2c:84:ee:60:78:4d:1b:
69:1f:10:d4:df:ff:b0:aa:6b:f1:fb:9d:24:df:73:
37:4d:7e:2e:73:90:2f:83:bd:9f:6e:79:d2:55:75:
d6:58:a2:a3:84:f4:29:10:17:4c:24:37:47:08:77:
9e:16:7d:40:8d:f4:c4:18:bf:08:10:67:48:74:53:
dd:30:a9:49:76:6c:6f:ad:cf:cb:c3:b9:8a:3a:98:
e0:d6:c2:03:ea:f4:f1:94:8a:0c:e6:c0:9b:8d:a7:
06:8d:91:b6:46:3c:39:18:62:bc:db:c9:43:8d:e2:
da:b2:1e:02:b1:ee:9c:f8:3b:da:c8:7a:a7:a9:a4:
21:29:d9:a7:25:95:6f:62:bb:3c:4c:2c:38:f2:09:
76:f9:8a:0e:e9:be:e3:a4:28:23:06:75:fa:68:12:
b7:a2:ad:ce:c9:af:66:0e:1b:9b:43:76:c1:67:96:
ee:40:ca:a3:80:de:fb:36:df:aa:73:78:79:10:92:
bd:b5:58:d0:82:a7:2a:83:ac:28:fd:a3:c0:0c:a4:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:25:88:D2:A6:67:8B:E1:14:DD:E7:A9:96:1E:13:5C:2E:B1:2E:02
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCFBDD72096411F089994473C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.239.152.0/22
45.114.156.0/22
45.251.32.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.44.104.0/22
103.47.152.0/24
103.51.92.0/22
103.51.152.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.44.0/23
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.98.79.0/24
103.99.48.0/23
103.108.76.0/22
103.109.108.0/22
103.110.72.0/23
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.135.60.0/22
103.136.64.0/22
103.139.88.0/23
103.142.64.0/23
103.143.180.0/23
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.170.0/23
103.155.194.0/23
103.157.50.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.158.216.0/23
103.159.137.0/24
103.159.178.0/23
103.162.80.0/23
103.165.10.0/23
103.165.20.0/23
103.165.26.0/23
103.166.220.0/23
103.169.58.0/23
103.171.8.0/23
103.171.54.0/23
103.171.60.0/23
103.171.236.0/23
103.173.41.0/24
103.174.26.0/23
103.174.42.0/23
103.175.12.0/23
103.175.58.0/23
103.175.106.0/23
103.176.142.0/24
103.180.216.0/23
103.190.12.0/23
103.191.86.0/23
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.234.64.0/22
103.236.112.0/22
103.245.170.0/23
103.254.96.0/22
103.254.200.0/22
115.166.132.0/22
137.59.204.0/22
139.5.96.0/22
202.9.55.0/24
203.191.56.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:0a:27:7e:12:c8:bc:b3:cf:1e:33:34:6f:1d:25:9c:9a:1c:
af:9c:6b:4a:c8:ba:50:b1:2f:d6:f3:a7:e4:91:10:ee:07:b0:
82:0d:de:c3:3e:ea:f3:c9:25:fd:37:d4:8a:0c:86:67:2d:dd:
02:c3:a7:f9:2a:ee:9a:07:aa:20:53:86:fa:96:b3:f5:22:ad:
e9:32:c4:ab:88:6b:58:53:62:b1:9c:2b:77:14:f2:bd:90:b1:
57:ca:74:f7:84:d7:c6:28:d4:5f:a8:3b:ad:8a:ec:49:38:fc:
18:99:82:35:e3:39:8b:e6:08:39:10:56:89:a7:2a:36:2d:f6:
db:d6:9e:a6:a3:fe:ac:c4:bb:37:8c:ea:38:86:48:94:c6:ec:
a9:06:1c:a9:0d:6b:2f:2f:73:e7:7d:21:ae:ae:bf:8e:6f:5d:
e3:72:6f:ac:58:49:dd:bd:a0:c0:c5:12:4b:92:98:a8:b5:2d:
2d:b6:3c:3b:d1:7f:48:11:ca:34:18:c9:69:39:ee:5a:3e:64:
7e:c3:01:49:91:47:66:fa:8d:b7:a0:9f:20:1c:d1:00:98:75:
d1:ee:32:7d:f6:4a:b9:11:b0:8f:4a:81:15:77:f3:cc:b5:09:
0e:ee:63:6f:11:df:90:c7:61:30:d7:ce:03:8d:db:8a:e9:b1:
88:b8:77:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:52:09 2025 by rpki-client