Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DDBC537CC8E511EFBB34BD0AC4F9AE02.roa
File: DDBC537CC8E511EFBB34BD0AC4F9AE02.roa (raw, json)
Hash identifier: zno19KTUq6Yb1tb+ALoQDsKLvpWGypRRJ5tSEQZNCAc=
Subject key identifier: 53:00:82:E9:60:AE:98:95:D6:65:2E:7D:0C:5A:43:C4:A0:00:A9:C2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A15B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DDBC537CC8E511EFBB34BD0AC4F9AE02.roa
Signing time: Thu 02 Jan 2025 08:45:07 +0000
ROA not before: Thu 02 Jan 2025 08:45:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
45.121.108.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.28.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.124.38.0/23 maxlen: 24
103.129.192.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.195.196.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 Jan 2025 09:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41307 (0xa15b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 2 08:45:07 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67765212-e1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:99:3b:87:47:72:14:40:12:1a:67:f8:f8:f8:
7e:a9:d3:b9:f7:41:2d:ae:07:dc:f9:6c:d9:ca:5e:
3e:1c:1b:27:55:6c:e1:eb:45:b0:8f:85:1d:10:25:
84:98:48:84:21:52:9f:c8:7e:65:dd:38:0e:30:bc:
42:72:cc:bc:1c:07:31:3f:9a:20:df:a1:d0:45:d5:
52:39:f9:08:84:72:66:65:a5:ae:43:1e:b6:58:ba:
b3:e5:30:ac:9a:8a:ba:fe:b6:9d:a0:c4:07:ff:db:
75:b5:60:10:71:30:06:c5:5e:57:0b:0d:12:4a:51:
87:bf:c0:a3:16:a5:3a:62:12:0b:87:ac:e6:9b:f7:
cd:88:45:8a:38:13:08:28:9a:6f:47:3b:7b:01:10:
b9:f4:4c:69:c6:38:78:d8:8f:f9:86:43:a4:53:06:
cd:79:96:42:fd:3a:b0:63:3f:bd:94:30:c2:83:4b:
1c:86:bc:dd:bd:98:f0:c5:76:1d:0b:5b:7c:af:4e:
d3:51:cd:6b:be:b0:20:52:fa:76:ea:2a:25:03:d1:
48:0c:36:8f:45:3d:93:c0:2f:d3:9b:b6:da:96:09:
ab:53:7b:f9:4e:d2:47:10:55:28:95:60:21:ef:c1:
7b:a4:15:a6:24:56:e9:10:cb:91:cc:e5:73:70:be:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:00:82:E9:60:AE:98:95:D6:65:2E:7D:0C:5A:43:C4:A0:00:A9:C2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DDBC537CC8E511EFBB34BD0AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.231.116.0/22
45.114.156.0/22
45.121.108.0/22
103.14.196.0/22
103.16.140.0/22
103.27.168.0/24
103.27.170.0/23
103.41.28.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.124.38.0/23
103.129.192.0/23
103.142.64.0/23
103.155.194.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.180.216.0/23
103.192.72.0/22
103.195.196.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.226.224.0/22
103.228.172.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
43:8e:85:e3:28:41:03:57:d9:d1:c5:10:8e:36:82:25:fc:67:
a6:cc:a8:95:0e:f6:79:03:55:15:5b:f7:cf:17:d4:c2:9e:8d:
8d:0b:25:9b:53:21:c6:b5:e5:77:c7:78:a9:86:de:42:62:d6:
a1:0e:73:a6:15:5f:21:55:0f:af:41:67:08:39:3e:93:a1:8f:
15:1d:74:02:2d:4d:6b:69:15:bc:9e:94:35:f2:08:e2:33:07:
f0:59:15:d8:95:d1:98:44:68:de:79:70:0e:c8:6d:bf:58:9b:
9e:86:59:71:bc:12:21:c3:ca:6a:83:7d:fa:eb:b1:40:3f:6a:
a4:42:0b:1d:2d:29:e5:6b:40:21:e1:43:ae:32:de:4f:06:b3:
8f:c0:bf:17:bd:16:9d:8e:00:cd:fe:62:d0:ee:ff:d0:9d:ea:
31:39:b0:b5:e2:ec:39:20:7f:17:a6:00:94:e2:6d:fd:50:15:
43:59:ff:2b:f7:9a:23:bb:5d:6a:63:34:25:a6:8d:af:23:cd:
3d:ac:3f:de:41:16:f9:f8:ff:1c:39:2b:00:d5:ad:72:bf:86:
88:17:15:5a:6c:51:b2:44:5f:f1:a8:ed:ac:75:44:be:a9:4a:
0e:7d:a8:bf:3b:09:eb:02:2c:dc:5f:c4:ee:fd:01:b1:7e:f9:
e1:d5:a5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:58 2025 by rpki-client