Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E28F26EEE52911EF84C4AC64C4F9AE02.roa
File: E28F26EEE52911EF84C4AC64C4F9AE02.roa (raw, json)
Hash identifier: meAfxRXl0iwGpmMTvIhEL/u0ZFINLC1G1YxbUXx8mEk=
Subject key identifier: 64:9A:9F:EA:71:1B:4E:69:D4:DF:BF:E9:5D:EF:83:35:1B:6F:39:33
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A54D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E28F26EEE52911EF84C4AC64C4F9AE02.roa
Signing time: Fri 07 Feb 2025 08:02:33 +0000
ROA not before: Fri 07 Feb 2025 08:02:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.248.58.0/23 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.109.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.144.188.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.158.180.0/24 maxlen: 24
103.159.137.0/24 maxlen: 24
103.164.0.0/23 maxlen: 24
103.167.157.0/24 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.128.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.242.236.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.64.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 07 Feb 2025 10:45:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42317 (0xa54d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 7 08:02:33 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67a5be19-2453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:40:86:f5:e5:c0:7e:fc:25:49:33:66:92:f7:
87:88:da:b3:d6:29:ec:d3:60:88:14:37:1b:8c:0b:
1e:3d:1c:c6:03:19:fa:38:c5:7e:d7:b3:3e:a5:39:
c2:81:89:18:94:fd:e9:2d:86:20:42:f1:9d:56:b9:
8b:dd:76:a3:3f:bd:00:3e:db:46:40:c7:bd:a1:f8:
6d:61:08:f1:01:1a:ad:55:32:2f:9d:16:ce:2d:bc:
77:01:b1:34:8a:bb:7b:08:80:9b:8a:78:90:da:86:
88:24:bf:66:e4:43:22:c5:23:d1:5f:8f:df:fa:97:
6a:f9:d7:ec:67:0e:2d:a1:db:07:a4:6e:21:ce:6d:
54:15:a5:3d:4c:50:1c:b7:d0:5a:2c:4a:2c:42:b7:
8e:3e:ac:f7:8e:80:62:70:62:fb:e8:2f:52:92:d2:
5f:6f:49:e3:f6:4a:c7:bb:22:d1:00:5b:e9:e4:2a:
61:bc:08:d5:5f:f5:49:c3:ed:3a:14:1a:b2:a2:89:
f6:c0:54:8b:ca:9a:60:17:a1:26:bd:b1:04:c6:57:
e6:25:4f:a7:3c:c7:f1:87:f9:10:1e:c2:40:1d:30:
bc:d2:b6:21:74:a9:39:31:4b:67:13:b2:31:f8:76:
0c:c5:89:54:14:48:af:64:18:d1:a8:2e:86:6e:69:
7d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9A:9F:EA:71:1B:4E:69:D4:DF:BF:E9:5D:EF:83:35:1B:6F:39:33
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E28F26EEE52911EF84C4AC64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.248.58.0/23
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.143.109.0/24
103.144.112.0/23
103.144.188.0/23
103.153.208.0/23
103.155.194.0/23
103.158.180.0/24
103.159.137.0/24
103.164.0.0/23
103.167.157.0/24
103.171.8.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.180.216.0/23
103.192.72.0/22
103.199.92.0/22
103.199.128.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.236.112.0/22
103.242.236.0/22
103.254.200.0/22
137.59.64.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
220.158.140.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
43:f3:66:92:59:1a:23:db:ea:17:11:1e:11:e7:cf:cc:ff:bd:
3e:d4:59:f8:5f:c7:ef:d4:8d:01:73:96:bb:c3:d3:bc:19:79:
2e:70:a6:c9:fd:da:d1:08:61:d5:90:c3:d8:6f:87:b8:06:5b:
af:fe:30:ea:b4:75:7c:56:8e:0b:9b:48:8e:46:8a:c1:b8:64:
89:19:0d:e5:6e:2f:37:62:63:43:26:5b:2f:94:24:1a:e6:1c:
71:e6:14:9a:a2:14:38:42:20:46:0d:ca:e8:32:3c:09:ae:89:
50:fa:a9:c1:13:ac:31:c8:30:f4:b9:c2:9d:d3:71:50:ab:e9:
c7:ae:dd:7a:5e:7c:00:56:3e:de:28:b1:42:58:4b:3d:19:f0:
4c:81:b0:97:db:e2:8a:61:1f:46:82:d3:b0:d5:ca:05:25:aa:
22:71:3d:21:d9:eb:46:5f:67:87:b3:9a:fb:10:1c:29:7b:ae:
1a:85:06:6a:3e:ff:60:fc:c1:45:17:0e:50:7c:50:35:b8:04:
0b:82:2d:13:20:91:54:0d:78:b0:7d:7e:9f:b2:ad:91:e9:0f:
3a:18:bd:e5:af:a5:90:7e:db:1d:25:de:1a:d4:4b:63:49:ce:
44:0b:d8:ef:d7:49:03:2d:e4:d8:cb:4f:c5:82:03:b7:92:b4:
18:10:8d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:53 2025 by rpki-client