Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E772465CF27911EFA8D58046C4F9AE02.roa
File: E772465CF27911EFA8D58046C4F9AE02.roa (raw, json)
Hash identifier: 4dud80YYZMfPXm+3CP+iCjhZuWVpBwDnlEjLfBfcTPA=
Subject key identifier: B4:D6:0D:13:BB:AC:84:E6:9C:F4:D9:AD:34:07:D1:D2:D8:AD:9B:4E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A85D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E772465CF27911EFA8D58046C4F9AE02.roa
Signing time: Fri 28 Feb 2025 08:03:00 +0000
ROA not before: Fri 28 Feb 2025 08:03:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132556
IP address blocks: 43.224.156.0/22 maxlen: 22
43.224.156.0/24 maxlen: 24
43.224.157.0/24 maxlen: 24
43.224.158.0/24 maxlen: 24
43.224.159.0/24 maxlen: 24
45.123.0.0/22 maxlen: 24
45.125.116.0/22 maxlen: 24
103.6.156.0/22 maxlen: 22
103.6.156.0/24 maxlen: 24
103.6.157.0/24 maxlen: 24
103.6.158.0/24 maxlen: 24
103.6.159.0/24 maxlen: 24
103.16.12.0/23 maxlen: 24
103.16.14.0/24 maxlen: 24
103.16.44.0/23 maxlen: 24
103.16.46.0/24 maxlen: 24
103.38.240.0/22 maxlen: 24
103.43.200.0/22 maxlen: 24
103.94.100.0/24 maxlen: 24
103.94.101.0/24 maxlen: 24
103.109.108.0/22 maxlen: 24
103.157.118.0/23 maxlen: 24
103.191.26.0/23 maxlen: 24
103.212.95.0/24 maxlen: 24
103.231.216.0/22 maxlen: 24
103.242.236.0/22 maxlen: 24
103.245.188.0/23 maxlen: 23
103.245.188.0/24 maxlen: 24
103.245.189.0/24 maxlen: 24
137.59.76.0/22 maxlen: 24
157.119.208.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2001:df0:45d::/48 maxlen: 48
2404:7a40::/32 maxlen: 32
2404:7a40::/36 maxlen: 36
2404:7a40::/46 maxlen: 46
2404:7a40::/48 maxlen: 48
2404:7a40:1::/48 maxlen: 48
2404:7a40:2::/48 maxlen: 48
2404:7a40:3::/48 maxlen: 48
2404:7a40:4::/46 maxlen: 46
2404:7a40:4::/48 maxlen: 48
2404:7a40:5::/48 maxlen: 48
2404:7a40:6::/48 maxlen: 48
2404:7a40:7::/48 maxlen: 48
2404:7a40:8::/46 maxlen: 46
2404:7a40:8::/48 maxlen: 48
2404:7a40:9::/48 maxlen: 48
2404:7a40:a::/48 maxlen: 48
2404:7a40:b::/48 maxlen: 48
2404:7a40:c::/46 maxlen: 46
2404:7a40:c::/48 maxlen: 48
2404:7a40:d::/48 maxlen: 48
2404:7a40:e::/48 maxlen: 48
2404:7a40:f::/48 maxlen: 48
2404:7a40:10::/46 maxlen: 46
2404:7a40:10::/48 maxlen: 48
2404:7a40:11::/48 maxlen: 48
2404:7a40:12::/48 maxlen: 48
2404:7a40:13::/48 maxlen: 48
2404:7a40:14::/46 maxlen: 46
2404:7a40:14::/48 maxlen: 48
2404:7a40:15::/48 maxlen: 48
2404:7a40:18::/46 maxlen: 46
2404:7a40:1c::/46 maxlen: 46
2404:7a40:20::/46 maxlen: 46
2404:7a40:24::/46 maxlen: 46
2404:7a40:1000::/36 maxlen: 36
2404:7a40:1000::/48 maxlen: 48
2404:7a40:1001::/48 maxlen: 48
2404:7a40:1002::/48 maxlen: 48
2404:7a40:1003::/48 maxlen: 48
2404:7a40:1004::/48 maxlen: 48
2404:7a40:1005::/48 maxlen: 48
2404:7a40:2000::/36 maxlen: 36
2404:7a40:2000::/48 maxlen: 48
2404:7a40:2001::/48 maxlen: 48
2404:7a40:2002::/48 maxlen: 48
2404:7a40:2003::/48 maxlen: 48
2404:7a40:2004::/48 maxlen: 48
2404:7a40:2005::/48 maxlen: 48
2404:7a40:2006::/48 maxlen: 48
2404:7a40:2007::/48 maxlen: 48
2404:7a40:3000::/36 maxlen: 36
2404:7a40:4000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 20 Mar 2025 07:17:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43101 (0xa85d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 28 08:03:00 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c16db4-4881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:d5:10:f1:b8:3c:f8:47:6d:a8:19:a4:65:
0d:3b:c3:98:71:92:0c:7c:5f:96:57:92:8d:3f:d4:
8e:de:18:96:5f:39:a8:c0:3f:ee:cd:5a:33:62:90:
9f:46:ae:fe:59:d1:1d:5b:88:2c:1a:1d:cb:6a:53:
0c:7e:f7:db:ed:c3:1b:b5:a7:64:f5:80:7f:45:a8:
c2:92:32:5c:94:4c:b6:07:62:df:ab:3e:dd:35:8c:
fb:c7:90:78:5a:50:f6:11:da:7a:aa:b0:52:f9:ef:
b6:3a:54:6d:f1:ef:ea:7f:49:ef:6d:76:d8:5a:df:
54:d3:6d:f0:82:e9:66:6c:1d:34:2f:c1:ed:ef:e6:
92:31:a0:f0:f0:a5:9a:4e:85:2f:5a:d8:c7:88:54:
a7:7e:f9:54:6b:c7:13:2e:58:60:d1:f6:d8:f0:01:
06:b7:fb:03:07:e7:23:78:00:7e:5e:22:ad:71:b3:
fb:2b:0a:91:c5:ba:35:bb:8e:80:34:aa:db:e6:59:
f0:ec:15:91:55:d2:f3:b9:a1:a8:a0:65:71:4a:b8:
8e:a2:0f:bd:3d:4a:4e:44:87:2f:c7:6a:66:16:c3:
d4:dc:c9:a7:d5:c4:a6:48:83:3d:3a:54:34:f7:06:
1a:08:c5:e6:ef:20:a1:26:64:a3:c7:b2:94:c0:f2:
b8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D6:0D:13:BB:AC:84:E6:9C:F4:D9:AD:34:07:D1:D2:D8:AD:9B:4E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E772465CF27911EFA8D58046C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.224.156.0/22
45.123.0.0/22
45.125.116.0/22
103.6.156.0/22
103.16.12.0-103.16.14.255
103.16.44.0-103.16.46.255
103.38.240.0/22
103.43.200.0/22
103.94.100.0/23
103.109.108.0/22
103.157.118.0/23
103.191.26.0/23
103.212.95.0/24
103.231.216.0/22
103.242.236.0/22
103.245.188.0/23
137.59.76.0/22
157.119.208.0/22
220.158.140.0/22
IPv6:
2001:df0:45d::/48
2404:7a40::/32
Signature Algorithm: sha256WithRSAEncryption
4e:d6:34:81:d2:08:04:72:70:e4:ec:3b:e5:39:4c:ff:02:f6:
cb:12:04:5c:50:56:61:85:b1:2c:41:76:8e:66:cb:46:46:49:
66:85:77:04:4c:ec:e6:81:86:74:4f:a6:13:6f:31:d2:69:ed:
f0:f0:cc:37:62:c3:8c:8c:11:d4:83:c0:4c:db:97:ee:a8:38:
2e:aa:9e:db:eb:57:48:46:74:59:2c:22:d9:b3:fe:de:d0:65:
b0:77:ff:4f:82:78:b7:33:7b:ba:ea:cb:76:93:3e:50:c5:cf:
85:9f:e5:d2:bd:7f:50:07:ca:9a:a3:ab:15:e5:ab:1f:e8:0b:
2a:f4:04:89:99:e6:55:9a:e5:46:4f:82:49:f0:df:4b:ad:7c:
e0:b8:1d:13:20:57:60:a8:83:33:e4:b5:3b:13:45:66:03:b6:
42:61:ef:5a:d0:cc:d9:e9:d7:48:ee:26:75:7d:27:10:34:02:
fe:a4:44:1c:a5:c6:4c:9c:d4:a8:6c:cc:4c:6c:ba:66:67:83:
22:c1:44:ee:a1:c3:a6:e6:39:84:df:c4:52:a7:39:fb:e4:06:
bd:a1:82:f9:8a:26:86:02:d4:45:ce:ed:43:01:5f:eb:6c:a8:
81:a5:c9:f6:f6:7d:f0:a9:a6:30:5a:bc:e4:81:2e:96:8b:7a:
25:58:11:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:08 2025 by rpki-client