Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F959B0ACC42111EFA022BD45C4F9AE02.roa
File: F959B0ACC42111EFA022BD45C4F9AE02.roa (raw, json)
Hash identifier: HibAKe6xvGgo7VeP5sqKAxoO0ySJuEHJerxo3GOwj7Y=
Subject key identifier: 8C:AD:B5:81:27:14:88:28:B0:BC:1A:15:30:0D:7E:6A:05:80:55:5F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A07A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F959B0ACC42111EFA022BD45C4F9AE02.roa
Signing time: Fri 27 Dec 2024 07:54:24 +0000
ROA not before: Fri 27 Dec 2024 07:54:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.85.16.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.87.28.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.129.206.0/24 maxlen: 24
103.142.64.0/23 maxlen: 24
103.155.188.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.156.122.0/23 maxlen: 24
103.166.119.0/24 maxlen: 24
103.171.236.0/23 maxlen: 24
103.172.178.0/23 maxlen: 24
103.173.22.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.195.196.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41082 (0xa07a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 27 07:54:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=676e5d30-23cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:b3:ff:57:94:b6:3c:aa:53:19:5d:9e:bd:
24:40:b6:4e:0f:fc:59:32:8e:92:cb:3b:60:76:b3:
24:c3:dc:79:b9:ff:76:5b:5a:bd:6e:29:b7:68:ab:
02:f7:4f:e6:f7:1a:85:b4:75:33:bb:fc:b8:77:a5:
26:bb:b4:ab:7e:fc:f7:6e:43:2e:ac:d2:8d:11:ad:
d9:21:81:44:41:cc:6b:97:91:bb:56:62:3a:30:eb:
f8:33:c8:09:a1:44:25:6a:41:be:26:86:5d:13:ce:
48:5e:78:f2:dc:f9:53:36:dd:1a:f1:59:8c:e2:15:
f4:7c:9b:9f:80:10:69:97:14:a3:1e:4b:0c:9e:e1:
b2:fa:68:31:8b:22:f6:0a:ea:04:64:27:28:cb:4f:
12:f8:81:30:cd:62:f9:13:61:e8:4b:06:f3:68:fe:
cd:a6:bf:d1:61:77:d9:c1:5f:74:91:aa:b6:11:f3:
38:a6:85:40:16:52:58:38:52:ed:15:69:6f:a3:e4:
37:16:40:22:e8:6f:63:1e:29:d7:af:b4:d4:43:e6:
83:fc:31:2a:90:89:57:06:81:77:db:9b:58:b9:9a:
8f:60:cf:a6:a2:c3:85:88:6f:9f:c3:8a:fe:ae:71:
25:b1:67:6f:51:df:de:74:29:b4:fb:d6:8a:74:14:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AD:B5:81:27:14:88:28:B0:BC:1A:15:30:0D:7E:6A:05:80:55:5F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F959B0ACC42111EFA022BD45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.231.116.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.27.168.0/24
103.27.170.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.85.16.0/22
103.86.20.0/22
103.87.28.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.129.206.0/24
103.142.64.0/23
103.155.188.0/23
103.155.194.0/23
103.156.122.0/23
103.166.119.0/24
103.171.236.0/23
103.172.178.0/23
103.173.22.0/23
103.180.216.0/23
103.192.72.0/22
103.195.196.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.226.224.0/22
103.228.172.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
4f:57:41:2e:ba:e7:8d:ba:09:ad:4d:00:11:f7:e5:a9:59:d3:
38:d7:00:49:4b:7e:3d:c7:ee:a1:dd:b2:6b:47:64:6e:52:fe:
28:99:c5:4e:74:14:e3:ac:a3:3b:9a:8d:c5:0f:04:36:6b:97:
22:5f:52:17:7d:f0:32:03:bd:1f:4b:e1:82:d1:88:3b:6c:ba:
d6:bf:fd:23:79:aa:14:88:98:9c:96:dd:34:31:d7:b7:0e:1d:
8c:e6:de:7f:74:64:91:84:1e:69:0e:84:d5:0f:5c:b8:88:aa:
c2:04:d9:c2:d4:b1:9c:a2:67:f4:04:db:71:4a:55:ff:fa:de:
2e:93:8b:89:6c:84:45:7f:22:74:f6:6d:9a:ba:d2:8a:f4:95:
db:76:c6:34:55:f2:f7:20:5b:33:1b:9b:29:bc:3c:19:d4:e8:
61:ef:d1:96:65:7a:b9:c0:11:3b:7f:3d:db:f7:ec:31:4a:b5:
a9:65:09:80:08:d6:4c:bd:fe:65:e0:99:6c:d2:69:65:32:b5:
18:6c:8e:4e:13:ec:04:80:05:01:45:1a:4b:2e:16:ec:47:99:
29:3a:1c:4a:96:dc:ec:62:62:7d:16:4d:62:95:ae:4f:7e:5d:
e5:d2:b6:d0:41:ba:65:4a:40:eb:f9:23:c4:a5:cb:ec:81:8a:
95:48:77:ba
-----BEGIN CERTIFICATE-----
MIIGgzCCBWugAwIBAgIDAKB6MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MTIyNzA3NTQyNFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjc2ZTVkMzAtMjNjZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALmRs/9XlLY8qlMZXZ69JEC2Tg/8WTKOkss7YHazJMPcebn/dltavW4pt2ir
AvdP5vcahbR1M7v8uHelJru0q378925DLqzSjRGt2SGBREHMa5eRu1ZiOjDr+DPI
CaFEJWpBviaGXRPOSF548tz5UzbdGvFZjOIV9Hybn4AQaZcUox5LDJ7hsvpoMYsi
9grqBGQnKMtPEviBMM1i+RNh6EsG82j+zaa/0WF32cFfdJGqthHzOKaFQBZSWDhS
7RVpb6PkNxZAIuhvYx4p16+01EPmg/wxKpCJVwaBd9ubWLmaj2DPpqLDhYhvn8OK
/q5xJbFnb1Hf3nQptPvWinQUxEECAwEAAaOCA6YwggOiMB0GA1UdDgQWBBSMrbWB
JxSIKLC8GhUwDX5qBYBVXzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0Y5NTlCMEFD
QzQyMTExRUZBMDIyQkQ0NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIIBLgYIKwYBBQUHAQcB
Af8EggEdMIIBGTCB8QQCAAEwgeoDBAIr4QADBAIr53QDBAItcpwDBAJnDsQDBAJn
EIwDBABnG6gDBAFnG6oDBABnL5gDBAJnM1wDBAJnNDADBAJnNmADBAJnN1QDBAJn
UpADBAJnVRADBAJnVhQDBAJnVxwDBAJnWHwDBAJnbEwDBAJnb4ADBAJndggDBABn
gc4DBAFnjkADBAFnm7wDBAFnm8IDBAFnnHoDBABnpncDBAFnq+wDBAFnrLIDBAFn
rRYDBAFntNgDBAJnwEgDBAJnw8QDBAJnyDADBAJnzkADBAJn1IQDBAJn4uADBAJn
5KwDBAKLBWADBALLvzgwIwQCAAIwHTASAwcBJADRgABmAwcBJADRgABoAwcBJADR
gABwMA0GCSqGSIb3DQEBCwUAA4IBAQBPV0EuuueNugmtTQAR9+WpWdM41wBJS349
x+6h3bJrR2RuUv4omcVOdBTjrKM7mo3FDwQ2a5ciX1IXffAyA70fS+GC0Yg7bLrW
v/0jeaoUiJiclt00Mde3Dh2M5t5/dGSRhB5pDoTVD1y4iKrCBNnC1LGcomf0BNtx
SlX/+t4uk4uJbIRFfyJ09m2autKK9JXbdsY0VfL3IFszG5spvDwZ1Ohh79GWZXq5
wBE7fz3b9+wxSrWpZQmACNZMvf5l4Jls0mllMrUYbI5OE+wEgAUBRRpLLhbsR5kp
OhxKltzsYmJ9Fk1ila5Pfl3l0rbQQbplSkDr+SPEpcvsgYqVSHe6
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:32 2025 by rpki-client