Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2EF3A80EF6F11EF95BD3D6AC4F9AE02.roa
File: D2EF3A80EF6F11EF95BD3D6AC4F9AE02.roa (raw, json)
Hash identifier: D9TbAvCTipj+KvChpECCrRJYLPU7SurFxgx+j6g7Ybg=
Subject key identifier: 4C:D5:F2:D2:A8:B0:D1:9D:ED:F6:86:35:67:BC:E0:01:8A:A7:59:D1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A712
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2EF3A80EF6F11EF95BD3D6AC4F9AE02.roa
Signing time: Thu 20 Feb 2025 10:45:53 +0000
ROA not before: Thu 20 Feb 2025 10:45:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.10.188.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.36.104.0/22 maxlen: 24
103.41.40.0/22 maxlen: 24
103.42.160.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.54.100.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.109.0/24 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.159.137.0/24 maxlen: 24
103.167.157.0/24 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
124.108.16.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42770 (0xa712)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 20 10:45:53 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67b707e1-2b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:57:fa:17:08:59:7e:91:c5:29:aa:cd:34:
fe:0a:74:04:47:d7:95:b5:e0:47:9b:1f:d5:55:68:
a9:3b:cf:2c:15:c5:a6:b3:e6:f5:23:75:13:b5:4f:
7f:bf:a3:91:46:76:2f:92:d5:c6:e8:87:bb:c9:33:
27:20:55:32:d0:8f:4a:a5:08:46:a2:ea:c6:8e:00:
8e:3a:53:2f:b0:b4:b1:3d:7a:0c:93:a0:bf:31:2a:
3f:89:52:bf:66:30:4d:8f:21:f7:6d:09:a0:15:f0:
ca:e0:72:d7:35:d3:bc:fa:46:62:1a:1d:90:77:c0:
7b:57:97:4e:d9:6a:68:79:31:62:6e:f8:b3:c5:f3:
0b:88:a5:85:c7:ed:87:a7:fd:ba:bf:3d:a3:41:43:
cd:ed:30:cc:78:1a:3a:db:dd:81:4d:97:8b:a1:4e:
7d:8d:b0:f5:ab:2f:40:87:1d:1c:ff:d7:5f:7a:5c:
de:1d:14:c6:ff:4f:70:a2:bb:4d:37:38:4b:07:a1:
ef:ac:85:55:22:3f:02:5d:50:64:d6:74:66:f6:7d:
37:c8:db:1c:38:02:74:20:de:82:d7:46:07:af:ed:
a9:6c:6f:99:7d:2a:1d:4f:e7:b9:42:ad:4c:be:9b:
b5:d5:c7:de:ae:f6:61:d2:c2:ae:1b:ed:d4:b3:c9:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D5:F2:D2:A8:B0:D1:9D:ED:F6:86:35:67:BC:E0:01:8A:A7:59:D1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2EF3A80EF6F11EF95BD3D6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
45.114.156.0/22
103.10.188.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.36.104.0/22
103.41.40.0/22
103.42.160.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/21
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.143.109.0/24
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.194.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.159.137.0/24
103.167.157.0/24
103.169.58.0/23
103.171.8.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.175.106.0/23
103.180.216.0/23
103.192.72.0/22
103.199.92.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.236.112.0/22
103.254.200.0/22
124.108.16.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
4c:1c:26:8b:fb:cb:ef:3f:17:d7:9a:95:90:c7:2c:ec:33:7b:
9d:7d:40:84:15:4c:89:a7:96:ec:b4:d8:44:7b:ee:c7:11:59:
22:84:e4:10:f3:1f:9f:ec:8b:90:6f:64:62:96:92:ca:d7:fa:
ff:b2:ca:13:61:4e:e9:2f:c6:eb:e4:fb:6d:86:49:6b:48:f8:
0d:42:92:cd:58:94:31:65:27:01:12:8e:f2:49:8c:9b:ee:a2:
2f:2a:51:f7:c9:03:29:9f:97:17:99:ca:d4:38:e2:f9:f1:10:
07:34:5f:30:a1:5f:ee:e6:b7:e3:82:b1:41:23:16:84:49:68:
43:94:de:67:53:3e:1a:ff:c5:ce:b5:58:60:91:c6:b6:e4:81:
75:ab:60:11:16:db:68:e2:25:6e:33:ce:4a:8f:72:b5:7f:51:
e4:f1:12:9d:d6:cc:e7:cb:bc:81:7e:e6:bc:40:66:7e:44:43:
7c:28:b9:0c:8b:1a:79:46:aa:e1:5c:da:c3:d2:f3:8d:20:d0:
82:e4:7e:a5:f6:90:c7:d0:1d:49:b0:b0:7a:3e:67:15:65:bf:
52:09:85:17:f0:2d:b6:d2:cc:6b:0f:67:21:ac:5d:ad:17:dc:
59:6e:15:84:3c:4c:3c:8c:f9:f1:89:e4:ae:c7:23:3a:95:ef:
9b:e2:1e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:27 2025 by rpki-client