Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E48F45EE02FE11F09F83DD49C4F9AE02.roa
File: E48F45EE02FE11F09F83DD49C4F9AE02.roa (raw, json)
Hash identifier: vcs4DswZRAvof8mBoZadJe2w62DGs6TVOsx2WAKtdqk=
Subject key identifier: 5D:B6:88:6C:DF:1C:E1:9D:8D:B1:57:A2:1F:81:03:B5:58:0D:CE:CC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AB3D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E48F45EE02FE11F09F83DD49C4F9AE02.roa
Signing time: Mon 17 Mar 2025 07:32:55 +0000
ROA not before: Mon 17 Mar 2025 07:32:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.239.152.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
45.251.32.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.44.104.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.70.40.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.98.79.0/24 maxlen: 24
103.99.48.0/23 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.127.188.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.135.60.0/22 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.180.0/23 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.170.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.50.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.158.216.0/23 maxlen: 24
103.159.137.0/24 maxlen: 24
103.162.80.0/23 maxlen: 24
103.165.26.0/23 maxlen: 24
103.166.220.0/23 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
103.171.60.0/23 maxlen: 24
103.171.208.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.172.90.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.26.0/23 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.12.0/23 maxlen: 24
103.175.58.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.191.86.0/23 maxlen: 24
103.192.64.0/22 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.234.64.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.245.170.0/23 maxlen: 24
103.254.96.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
115.166.132.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
202.9.55.0/24 maxlen: 24
203.191.56.0/22 maxlen: 24
2001:df7:8980::/48 maxlen: 48
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
2403:c680::/32 maxlen: 40
2406:68c0::/32 maxlen: 40
2407:1340::/32 maxlen: 32
2407:4540::/32 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43837 (0xab3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 17 07:32:55 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67d7d026-04ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:59:04:ba:69:29:31:3a:21:48:29:9d:ec:
57:30:4d:a6:95:75:7d:de:a4:ca:15:5e:b4:53:78:
c4:ce:3b:77:99:36:fd:6a:00:65:be:96:52:f1:9a:
e6:45:04:12:89:a9:0f:e9:ae:25:f9:c0:04:54:69:
90:14:57:bd:b7:54:73:ec:e6:8f:71:cd:61:84:8e:
ee:e3:3f:84:85:1b:42:5c:7e:34:e4:9f:ac:a1:9a:
d3:13:87:ff:85:c5:16:64:d4:f0:ec:9d:c6:60:b9:
26:5f:d6:44:e2:e8:11:43:10:3a:35:75:0c:28:4d:
63:2b:27:d1:2a:41:25:85:95:18:00:64:f9:99:3b:
d7:9c:d2:f4:35:6b:15:a0:49:0e:4e:ff:f9:fc:7d:
31:69:0c:d0:12:1c:98:6d:a1:00:52:bc:48:63:c1:
f0:ac:87:9c:c6:33:4b:a3:81:8b:d4:72:2b:c2:2b:
4e:79:5f:16:57:d2:86:4f:af:4f:f7:4e:70:87:30:
17:ce:75:58:bc:de:a4:8c:d4:9d:2f:f9:32:5e:88:
c7:f7:bb:83:02:48:10:0e:c5:60:2c:ef:01:f9:d5:
46:ac:25:ed:63:8e:0e:4b:4c:a9:35:0d:32:c1:13:
0b:2f:96:86:2d:9a:b0:39:66:e7:2a:12:79:bb:28:
03:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B6:88:6C:DF:1C:E1:9D:8D:B1:57:A2:1F:81:03:B5:58:0D:CE:CC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E48F45EE02FE11F09F83DD49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.239.152.0/22
45.114.156.0/22
45.251.32.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.44.104.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.70.40.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.98.79.0/24
103.99.48.0/23
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.127.188.0/22
103.132.203.0/24
103.133.116.0/24
103.135.60.0/22
103.139.88.0/23
103.142.64.0/23
103.143.180.0/23
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.170.0/23
103.155.194.0/23
103.157.50.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.158.216.0/23
103.159.137.0/24
103.162.80.0/23
103.165.26.0/23
103.166.220.0/23
103.169.58.0/23
103.171.8.0/23
103.171.54.0/23
103.171.60.0/23
103.171.208.0/23
103.171.236.0/23
103.172.90.0/23
103.173.41.0/24
103.174.26.0/23
103.174.42.0/23
103.175.12.0/23
103.175.58.0/23
103.175.106.0/23
103.176.142.0/24
103.180.216.0/23
103.190.12.0/23
103.191.86.0/23
103.192.64.0/22
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.234.64.0/22
103.236.112.0/22
103.245.170.0/23
103.254.96.0/22
103.254.200.0/22
115.166.132.0/22
137.59.204.0/22
139.5.96.0/22
202.9.55.0/24
203.191.56.0/22
IPv6:
2001:df7:8980::/48
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
2403:c680::/32
2406:68c0::/32
2407:1340::/32
2407:4540::/32
Signature Algorithm: sha256WithRSAEncryption
38:d8:85:6c:64:8a:21:84:af:fe:a8:d6:36:33:5c:ad:b5:ac:
d7:9c:3c:3f:7a:6c:45:f9:19:1c:53:2c:5c:5b:50:66:b9:64:
08:6f:de:03:04:c6:99:ad:c2:ad:4a:58:89:d4:85:60:5b:c5:
8e:65:63:7b:30:a7:dd:3d:59:18:95:73:76:cb:cc:99:ff:01:
ea:2e:98:02:bc:df:4c:de:48:13:1b:5c:27:22:e5:2e:9f:aa:
80:97:86:ed:fa:ea:3d:af:72:95:e3:4f:35:78:d8:5c:a7:3b:
60:3d:2b:9d:2f:93:38:6b:e6:c6:0e:b7:76:06:a6:5f:cc:b5:
b2:99:f8:4a:be:78:85:78:8f:0d:ef:60:9b:7e:a8:ed:e4:32:
7e:d0:4d:b2:bf:f0:f3:2e:fb:40:ec:72:d9:b3:a5:46:39:bc:
e5:9b:5c:1b:7c:7e:57:2c:2b:9f:60:f5:e7:cb:2d:d1:d8:cd:
d2:20:8a:cd:3e:a8:f6:d8:69:e4:7e:c5:3a:1c:59:1d:56:6e:
77:51:c8:a6:d6:bc:37:80:aa:8b:f7:b0:93:64:17:82:cd:c4:
81:96:45:e0:a7:55:04:12:36:6d:12:17:38:46:21:4e:ef:84:
c9:4f:bb:f3:fb:7d:fe:d5:28:c5:84:e9:97:ba:3a:69:5d:46:
71:cc:d7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:52:07 2025 by rpki-client