Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8C186002D1C11EEB4A60D3EC4F9AE02.roa
File: D8C186002D1C11EEB4A60D3EC4F9AE02.roa (raw, json)
Hash identifier: 24ORK0moQSlRMaP+4SkPXOwGhAKGUnyMbXyizEIY3Lg=
Subject key identifier: CD:CA:BC:B0:8C:B4:AB:3A:FE:4B:C4:4F:F1:41:A2:82:B3:03:03:24
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 911D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8C186002D1C11EEB4A60D3EC4F9AE02.roa
Signing time: Thu 30 May 2024 16:30:48 +0000
ROA not before: Thu 30 May 2024 16:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58898
IP address blocks: 45.116.112.0/22 maxlen: 24
103.25.44.0/22 maxlen: 24
103.69.8.0/22 maxlen: 24
103.91.84.0/23 maxlen: 24
103.93.104.0/22 maxlen: 24
103.116.232.0/23 maxlen: 24
103.127.170.0/24 maxlen: 24
103.137.148.0/24 maxlen: 24
103.143.214.0/24 maxlen: 24
103.148.134.0/23 maxlen: 24
103.151.114.0/24 maxlen: 24
103.153.22.0/24 maxlen: 24
103.157.228.0/23 maxlen: 23
103.157.228.0/24 maxlen: 24
103.157.229.0/24 maxlen: 24
103.159.136.0/24 maxlen: 24
103.159.180.0/24 maxlen: 24
103.160.171.0/24 maxlen: 24
103.170.160.0/24 maxlen: 24
103.175.108.0/23 maxlen: 24
103.176.124.0/23 maxlen: 24
103.225.124.0/22 maxlen: 24
163.53.204.0/22 maxlen: 24
2001:df2:a640::/48 maxlen: 48
2403:f680::/40 maxlen: 48
2403:f680:102::/48 maxlen: 48
2403:f680:103::/48 maxlen: 48
2403:f680:104::/48 maxlen: 48
2403:f680:105::/48 maxlen: 48
2403:f680:106::/48 maxlen: 48
2403:f680:107::/48 maxlen: 48
2403:f680:108::/48 maxlen: 48
2403:f680:112::/48 maxlen: 48
2403:f680:113::/48 maxlen: 48
2403:f680:114::/48 maxlen: 48
2403:f680:115::/48 maxlen: 48
2403:f680:116::/48 maxlen: 48
2403:f680:117::/48 maxlen: 48
2403:f680:118::/48 maxlen: 48
2403:f680:119::/48 maxlen: 48
2403:f680:120::/48 maxlen: 48
2403:f680:121::/48 maxlen: 48
2403:f680:122::/48 maxlen: 48
2403:f680:123::/48 maxlen: 48
2403:f680:124::/48 maxlen: 48
2403:f680:125::/48 maxlen: 48
2403:f680:126::/48 maxlen: 48
2403:f680:127::/48 maxlen: 48
2403:f680:128::/48 maxlen: 48
2403:f680:129::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 06:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37149 (0x911d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a9b8-53d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7c:63:61:d9:a8:c7:6d:cd:e0:7f:14:6c:03:
8d:04:99:3d:6f:c0:f4:50:b3:8a:ae:95:c8:b4:9f:
e9:77:9e:5e:df:4a:ed:2a:7e:e4:fc:16:cb:9b:2f:
e3:98:61:7f:bc:66:89:67:bf:87:52:3a:54:d8:ec:
a6:6f:f4:14:dd:c5:6c:e2:b8:da:80:58:b5:e9:59:
60:a0:61:1b:94:70:6a:a3:04:f0:3a:94:f3:35:0e:
a0:cb:c9:e3:50:03:58:da:bf:cc:9d:64:8d:9b:be:
b2:f3:42:99:0b:12:41:d7:03:39:55:6a:24:73:d8:
55:e8:35:a4:ab:77:36:55:f3:69:d7:0a:af:ce:b7:
50:70:a7:71:b6:03:14:1c:c4:22:4e:f1:86:74:d3:
1c:a0:2c:db:a9:18:d1:6d:17:00:7a:6e:2b:2b:b4:
34:87:f7:14:59:f6:be:5d:72:5b:66:8c:8b:a5:90:
74:b7:f5:55:b5:17:f9:6c:68:31:c1:bc:4a:f9:ee:
63:aa:9a:f3:db:2e:3b:01:42:e3:fb:e3:f0:3f:8e:
13:70:57:88:25:73:5e:5c:93:75:ff:ac:7f:cd:ba:
a7:0a:b0:f3:f0:b1:86:33:65:fe:3a:55:2a:5c:23:
eb:f9:06:5b:08:49:36:d0:bc:c6:09:f5:f4:51:0a:
44:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CA:BC:B0:8C:B4:AB:3A:FE:4B:C4:4F:F1:41:A2:82:B3:03:03:24
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D8C186002D1C11EEB4A60D3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.116.112.0/22
103.25.44.0/22
103.69.8.0/22
103.91.84.0/23
103.93.104.0/22
103.116.232.0/23
103.127.170.0/24
103.137.148.0/24
103.143.214.0/24
103.148.134.0/23
103.151.114.0/24
103.153.22.0/24
103.157.228.0/23
103.159.136.0/24
103.159.180.0/24
103.160.171.0/24
103.170.160.0/24
103.175.108.0/23
103.176.124.0/23
103.225.124.0/22
163.53.204.0/22
IPv6:
2001:df2:a640::/48
2403:f680::/40
2403:f680:102::-2403:f680:108:ffff:ffff:ffff:ffff:ffff
2403:f680:112::-2403:f680:119:ffff:ffff:ffff:ffff:ffff
2403:f680:120::-2403:f680:129:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
18:12:55:ea:d6:41:63:4c:a9:54:fd:d2:b8:9a:a0:fc:92:c6:
51:fd:6c:b3:a7:db:53:9d:af:9e:9d:7e:7d:c4:38:89:77:ea:
1e:78:a0:83:92:24:71:79:a5:7a:64:8b:07:ba:ba:fc:79:a2:
10:26:91:6d:67:18:3b:79:45:2e:a5:63:98:72:64:96:00:98:
24:90:3b:5f:ea:2b:fb:cb:82:90:e5:a0:c2:d2:0d:4b:52:1c:
8b:f6:87:ad:17:d1:95:41:35:a6:b0:6f:ba:7c:72:02:11:75:
10:75:a6:10:0e:5f:2b:11:49:bc:90:94:ae:4b:97:18:a0:f5:
71:25:99:75:43:73:5c:f4:21:29:47:6a:cc:3a:3e:16:9f:5a:
fd:cd:97:40:a6:71:df:18:a2:bc:9c:f6:d6:54:a5:01:45:15:
04:3a:5f:aa:06:27:1c:8b:8e:d6:93:13:81:c4:86:46:c6:00:
70:5e:ea:00:43:dd:a7:19:d6:79:63:38:db:6e:bc:4f:75:06:
7d:0b:3c:34:47:e7:e9:5f:99:20:e4:3d:51:2e:5c:f1:0d:06:
85:ab:e2:c1:09:73:a2:25:09:ce:3e:ba:1b:8f:f5:08:7e:a6:
32:28:28:61:14:e4:82:2a:38:06:56:bb:0b:f3:4d:58:f5:09:
bb:37:d8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:28:15 2025 by rpki-client