Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5BE651EEDF911EFABE29939C4F9AE02.roa
File: D5BE651EEDF911EFABE29939C4F9AE02.roa (raw, json)
Hash identifier: mHm4p8UsSm1IsGseA94KpHbcRdfm3SvrPmSRn0CsTRY=
Subject key identifier: E5:81:03:0F:A7:3F:CE:9F:25:C7:8F:AC:7A:75:9A:CD:A4:28:2E:0A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A6BD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5BE651EEDF911EFABE29939C4F9AE02.roa
Signing time: Wed 19 Feb 2025 07:55:42 +0000
ROA not before: Wed 19 Feb 2025 07:55:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.247.156.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
49.50.64.0/18 maxlen: 18
49.50.123.0/24 maxlen: 24
103.5.132.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.109.0/24 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.159.137.0/24 maxlen: 24
103.167.157.0/24 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
111.118.176.0/20 maxlen: 20
111.118.184.0/21 maxlen: 21
124.40.244.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
2404:1f00::/32 maxlen: 40
2404:8500::/32 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42685 (0xa6bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 19 07:55:42 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67b58e7d-f585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e5:3f:ab:9d:f0:27:21:3c:bd:93:e8:08:61:
ac:19:2e:42:aa:62:ca:d3:6f:ee:2a:5d:d2:ea:fb:
04:6a:16:88:d7:b3:21:1e:64:3c:fa:bc:57:46:35:
ad:ab:18:c0:d7:4c:4f:3c:92:f7:40:fb:45:cd:4f:
5c:27:35:95:34:87:5a:d2:2f:52:b4:8d:1d:96:96:
ac:2c:88:a7:27:50:49:a8:e4:c5:02:b4:27:6a:cf:
b7:5e:6a:bf:94:0b:68:fb:75:50:5c:96:18:46:af:
08:b2:91:0d:18:b4:78:eb:fa:80:dc:e7:8e:f2:eb:
22:09:13:52:e2:1f:0c:5c:20:8c:55:84:16:a4:3e:
0d:91:33:44:84:57:96:d3:22:6d:1a:6c:3b:63:50:
7d:03:ad:f3:12:b3:bb:8e:6d:9b:8e:79:98:a2:b9:
52:b2:06:6a:10:53:73:67:98:5f:37:7a:92:ef:4a:
00:46:a5:59:5d:f1:30:f7:7b:e2:ba:8b:b1:f6:68:
51:18:2b:ca:ba:ee:8f:dc:97:bd:89:b6:19:df:1b:
f4:15:71:98:41:13:54:65:61:8e:2c:43:e2:63:41:
26:46:4e:56:f3:61:7c:3d:aa:9a:b7:f9:c7:02:13:
81:08:9c:14:c3:3e:a6:ae:1e:81:8a:00:59:61:65:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:81:03:0F:A7:3F:CE:9F:25:C7:8F:AC:7A:75:9A:CD:A4:28:2E:0A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D5BE651EEDF911EFABE29939C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.247.156.0/22
45.114.156.0/22
49.50.64.0/18
103.5.132.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.143.109.0/24
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.194.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.159.137.0/24
103.167.157.0/24
103.169.58.0/23
103.171.8.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.175.106.0/23
103.180.216.0/23
103.192.72.0/22
103.199.92.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.236.112.0/22
103.254.200.0/22
111.118.176.0/20
124.40.244.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
2404:1f00::/32
2404:8500::/32
Signature Algorithm: sha256WithRSAEncryption
70:29:e0:d3:0f:66:f3:5a:88:9f:14:3f:4b:6a:26:c3:53:6f:
b2:46:c7:95:07:14:7b:6c:a8:aa:1e:23:89:b9:84:d5:e5:fb:
eb:a5:84:79:7d:c6:ce:1f:69:45:30:d7:c1:bd:a5:a9:4c:99:
9d:1f:51:20:6e:ea:1b:8c:87:f1:ac:ea:d3:c4:73:27:57:2f:
fc:a6:34:73:6b:87:0c:6d:58:33:69:d6:41:40:f9:25:57:55:
43:b9:de:7f:76:9e:7d:8a:40:10:19:10:da:03:bc:bf:4a:d5:
c4:e1:63:f9:de:5f:f4:96:c2:b9:a0:96:e0:a6:b8:f0:73:52:
a8:b7:56:00:b3:9a:9c:36:6d:b5:19:2d:a0:2e:54:f7:72:bd:
1d:b0:08:fe:1d:49:d8:d7:16:9f:3b:3a:f1:70:74:f7:46:16:
76:84:1d:33:ba:b4:c1:94:a4:b9:27:4b:54:6e:6a:92:89:d6:
b3:e3:06:00:47:54:50:f3:95:04:10:92:14:c2:5e:82:68:4e:
b7:2b:b8:0f:a7:60:07:f8:dc:cf:db:35:3d:04:25:ed:f7:29:
51:96:69:a8:9a:6d:b2:a6:6c:8c:b7:a3:7f:8f:84:3d:d9:d0:
3b:1c:9d:3e:b3:1f:aa:45:8b:ea:b6:0e:19:4c:68:00:e5:aa:
98:84:f4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:29 2025 by rpki-client