Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F6E7B7D4B0A711EFBD0CCA7FC4F9AE02.roa
File: F6E7B7D4B0A711EFBD0CCA7FC4F9AE02.roa (raw, json)
Hash identifier: rRj83I6FQSdpBupLenVCOfZtPuTiAIRzDqPG2wfiNIM=
Subject key identifier: F2:3F:8B:00:43:A2:3A:3C:C5:DD:2B:2B:03:5C:A4:4D:40:7B:62:93
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9F65
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F6E7B7D4B0A711EFBD0CCA7FC4F9AE02.roa
Signing time: Tue 17 Dec 2024 07:02:14 +0000
ROA not before: Tue 17 Dec 2024 07:02:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58762
IP address blocks: 45.117.180.0/24 maxlen: 24
45.117.181.0/24 maxlen: 24
45.117.182.0/24 maxlen: 24
45.117.183.0/24 maxlen: 24
103.18.72.0/24 maxlen: 24
103.18.73.0/24 maxlen: 24
103.18.74.0/24 maxlen: 24
103.18.75.0/24 maxlen: 24
103.69.12.0/22 maxlen: 24
103.84.184.0/22 maxlen: 24
103.88.0.0/22 maxlen: 24
103.138.8.0/24 maxlen: 24
103.138.9.0/24 maxlen: 24
103.147.0.0/24 maxlen: 24
103.147.1.0/24 maxlen: 24
103.153.12.0/24 maxlen: 24
103.157.4.0/23 maxlen: 24
103.157.10.0/23 maxlen: 24
103.164.46.0/23 maxlen: 24
103.165.28.0/23 maxlen: 24
103.225.56.0/22 maxlen: 22
103.225.56.0/24 maxlen: 24
103.225.57.0/24 maxlen: 24
103.225.58.0/24 maxlen: 24
103.225.59.0/24 maxlen: 24
150.129.44.0/24 maxlen: 24
150.129.45.0/24 maxlen: 24
150.129.46.0/24 maxlen: 24
150.129.47.0/24 maxlen: 24
2001:df0:8000::/48 maxlen: 56
2407:c140::/32 maxlen: 38
2407:c140::/36 maxlen: 40
2407:c140:1000::/37 maxlen: 40
2407:c140:1800::/38 maxlen: 40
2407:c140:1c00::/39 maxlen: 40
2407:c140:1e00::/40 maxlen: 40
2407:c140:1f00::/40 maxlen: 40
2407:c140:2000::/35 maxlen: 40
2407:c140:4000::/34 maxlen: 40
2407:c140:8000::/33 maxlen: 40
Validation: Failed, certificate revoked on Mon 10 Feb 2025 06:10:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40805 (0x9f65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 17 07:02:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=676121f5-985a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8a:ed:9f:05:27:fb:f7:e0:63:78:31:43:5d:
b3:2a:59:c9:a9:cf:54:37:92:7d:56:82:34:1d:5a:
80:f3:8a:47:cf:93:29:d3:d0:02:9f:ec:07:71:3a:
ea:75:c6:09:4f:09:c9:15:dc:e4:ff:ad:aa:52:5e:
33:e7:f5:bf:29:15:1a:45:42:89:c6:49:bf:72:86:
23:66:a2:6f:c8:59:68:ed:22:33:fe:30:c5:68:69:
c8:b5:09:2d:b6:83:65:a2:cf:34:2b:ad:19:6c:19:
13:e4:03:0a:a1:14:6d:2e:89:50:8c:e8:b0:a3:ca:
98:69:07:4d:00:29:1c:15:3c:2e:87:3c:19:65:a5:
fc:c1:e4:f9:78:8d:36:70:bb:c3:24:cf:f6:50:12:
da:a4:64:04:78:c6:cf:45:ea:9e:09:c8:d9:4e:01:
36:77:4b:8d:dd:14:e5:b4:19:69:d3:ac:05:d5:a5:
fd:4f:64:3e:0c:a2:47:be:ed:71:9d:57:10:0a:0c:
47:d2:ca:2d:db:a2:e7:a6:95:84:99:b6:16:5c:0d:
cf:6b:e4:ea:2b:6d:b7:b4:cf:56:5b:51:11:57:29:
bf:47:bd:b9:07:25:19:e3:f2:3e:85:1f:45:6c:43:
75:15:06:75:30:00:0e:8e:ec:1c:58:fa:9c:83:24:
62:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3F:8B:00:43:A2:3A:3C:C5:DD:2B:2B:03:5C:A4:4D:40:7B:62:93
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F6E7B7D4B0A711EFBD0CCA7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.180.0/22
103.18.72.0/22
103.69.12.0/22
103.84.184.0/22
103.88.0.0/22
103.138.8.0/23
103.147.0.0/23
103.153.12.0/24
103.157.4.0/23
103.157.10.0/23
103.164.46.0/23
103.165.28.0/23
103.225.56.0/22
150.129.44.0/22
IPv6:
2001:df0:8000::/48
2407:c140::/32
Signature Algorithm: sha256WithRSAEncryption
5f:f9:83:0a:c4:43:a4:e9:d9:4a:12:9a:1b:77:36:9a:d3:78:
e6:21:c5:99:51:37:74:15:5c:5d:d2:c8:41:b0:fc:52:fb:ae:
01:91:82:55:46:a2:c4:54:c8:0f:e1:40:20:30:44:71:0a:e3:
46:21:c3:c0:e5:e0:10:2f:0b:1c:40:fa:a6:78:77:7b:7b:dc:
3b:8e:42:be:ab:9d:08:44:c9:eb:bb:b0:df:67:54:a6:fb:ab:
67:70:6d:d0:81:f2:2a:74:d8:91:5f:e8:a5:b6:40:fc:8f:4e:
a3:cd:e1:1e:32:50:6b:d1:df:8d:de:95:f2:5a:6a:57:fb:11:
86:f4:52:72:bd:00:1d:5a:c6:bc:ad:f5:6a:6c:ba:4b:62:e2:
35:95:c6:52:65:0d:0c:4b:ad:bb:36:9a:4e:42:bc:35:7f:60:
02:75:46:f9:03:03:a6:e5:cc:56:60:f1:d5:e1:12:77:fb:00:
d7:fd:d8:92:6b:5e:31:26:52:15:04:b1:3c:2e:32:be:fa:78:
de:ca:31:0a:8b:cc:02:a4:f4:0e:f1:be:fb:5f:86:a7:bb:c4:
c1:b4:d6:3d:3f:57:d4:72:e6:2f:3f:8f:33:fc:2f:1f:ee:eb:
03:ea:ff:a4:cf:48:d6:cf:b9:89:79:bd:d7:d5:52:ba:0d:e3:
e8:07:83:ff
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgIDAJ9lMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MTIxNzA3MDIxNFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjc2MTIxZjUtOTg1YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANmK7Z8FJ/v34GN4MUNdsypZyanPVDeSfVaCNB1agPOKR8+TKdPQAp/sB3E6
6nXGCU8JyRXc5P+tqlJeM+f1vykVGkVCicZJv3KGI2aib8hZaO0iM/4wxWhpyLUJ
LbaDZaLPNCutGWwZE+QDCqEUbS6JUIzosKPKmGkHTQApHBU8Loc8GWWl/MHk+XiN
NnC7wyTP9lAS2qRkBHjGz0XqngnI2U4BNndLjd0U5bQZadOsBdWl/U9kPgyiR77t
cZ1XEAoMR9LKLdui56aVhJm2FlwNz2vk6ittt7TPVltREVcpv0e9uQclGePyPoUf
RWxDdRUGdTAADo7sHFj6nIMkYrMCAwEAAaOCAvwwggL4MB0GA1UdDgQWBBTyP4sA
Q6I6PMXdKysDXKRNQHtikzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y2RTdCN0Q0
QjBBNzExRUZCRDBDQ0E3RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIGFBggrBgEFBQcBBwEB
/wR2MHQwWgQCAAEwVAMEAi11tAMEAmcSSAMEAmdFDAMEAmdUuAMEAmdYAAMEAWeK
CAMEAWeTAAMEAGeZDAMEAWedBAMEAWedCgMEAWekLgMEAWelHAMEAmfhOAMEApaB
LDAWBAIAAjAQAwcAIAEN8IAAAwUAJAfBQDANBgkqhkiG9w0BAQsFAAOCAQEAX/mD
CsRDpOnZShKaG3c2mtN45iHFmVE3dBVcXdLIQbD8UvuuAZGCVUaixFTID+FAIDBE
cQrjRiHDwOXgEC8LHED6pnh3e3vcO45CvqudCETJ67uw32dUpvurZ3Bt0IHyKnTY
kV/opbZA/I9Oo83hHjJQa9Hfjd6V8lpqV/sRhvRScr0AHVrGvK31amy6S2LiNZXG
UmUNDEutuzaaTkK8NX9gAnVG+QMDpuXMVmDx1eESd/sA1/3YkmteMSZSFQSxPC4y
vvp43soxCovMAqT0DvG++1+Gp7vEwbTWPT9X1HLmLz+PM/wvH+7rA+r/pM9I1s+5
iXm919VSug3j6AeD/w==
-----END CERTIFICATE-----
Generated at Fri Apr 11 09:54:39 2025 by rpki-client