Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FF7BF578A59D11EFB201FE3AC4F9AE02.roa
File: FF7BF578A59D11EFB201FE3AC4F9AE02.roa (raw, json)
Hash identifier: nQIPirMRDG4y3HkwnAaZN5J2UVW0Rf9GVmaq+IzmYt4=
Subject key identifier: B9:B8:0D:80:22:2A:1D:28:05:E1:B1:0E:9C:71:56:6F:CE:73:99:AC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A1BC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FF7BF578A59D11EFB201FE3AC4F9AE02.roa
Signing time: Wed 08 Jan 2025 06:22:32 +0000
ROA not before: Wed 08 Jan 2025 06:22:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133676
IP address blocks: 36.50.82.0/24 maxlen: 24
43.225.74.0/24 maxlen: 24
43.230.196.0/22 maxlen: 24
43.239.132.0/22 maxlen: 24
43.240.4.0/24 maxlen: 24
43.240.6.0/24 maxlen: 24
43.240.7.0/24 maxlen: 24
43.250.252.0/22 maxlen: 24
45.64.8.0/24 maxlen: 24
45.64.9.0/24 maxlen: 24
45.64.10.0/24 maxlen: 24
45.64.11.0/24 maxlen: 24
45.248.24.0/24 maxlen: 24
45.248.26.0/23 maxlen: 24
103.42.88.0/22 maxlen: 24
103.47.12.0/23 maxlen: 24
103.47.15.0/24 maxlen: 24
103.47.72.0/23 maxlen: 24
103.47.74.0/23 maxlen: 24
103.47.172.0/23 maxlen: 24
103.47.174.0/23 maxlen: 24
103.49.232.0/23 maxlen: 24
103.54.24.0/23 maxlen: 24
103.54.26.0/24 maxlen: 24
103.62.147.0/24 maxlen: 24
103.80.34.0/23 maxlen: 24
103.82.72.0/22 maxlen: 24
103.85.118.0/23 maxlen: 24
103.87.204.0/22 maxlen: 24
103.93.172.0/22 maxlen: 24
103.93.212.0/23 maxlen: 24
103.98.53.0/24 maxlen: 24
103.101.116.0/24 maxlen: 24
103.101.117.0/24 maxlen: 24
103.101.118.0/23 maxlen: 24
103.103.163.0/24 maxlen: 24
103.109.180.0/23 maxlen: 24
103.109.182.0/23 maxlen: 24
103.114.188.0/23 maxlen: 24
103.118.180.0/22 maxlen: 24
103.148.66.0/23 maxlen: 24
103.173.218.0/24 maxlen: 24
103.177.202.0/23 maxlen: 24
103.178.58.0/23 maxlen: 24
103.181.90.0/23 maxlen: 24
103.182.44.0/23 maxlen: 24
103.184.184.0/23 maxlen: 24
103.186.44.0/23 maxlen: 24
103.189.146.0/24 maxlen: 24
103.189.147.0/24 maxlen: 24
103.191.182.0/23 maxlen: 24
103.191.234.0/23 maxlen: 24
103.204.168.0/22 maxlen: 24
103.211.56.0/23 maxlen: 24
103.211.58.0/24 maxlen: 24
103.211.190.0/23 maxlen: 24
103.212.136.0/23 maxlen: 24
103.212.138.0/23 maxlen: 24
103.213.6.0/23 maxlen: 24
103.225.205.0/24 maxlen: 24
103.225.206.0/23 maxlen: 24
103.226.200.0/22 maxlen: 24
103.227.95.0/24 maxlen: 24
103.248.120.0/24 maxlen: 24
103.248.121.0/24 maxlen: 24
139.5.16.0/23 maxlen: 24
139.5.18.0/23 maxlen: 24
2405:5540::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 19 Feb 2025 06:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41404 (0xa1bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 8 06:22:32 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=677e19a8-81ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e8:51:91:d4:02:9b:87:d5:d3:4d:df:f0:8a:
01:e1:c4:be:43:c6:ac:7e:a7:14:f8:7d:60:66:a3:
e9:4a:b7:92:c3:d0:4e:2d:55:ca:e1:5b:f8:4b:c5:
5e:f6:f6:70:45:20:49:27:ef:a7:b3:16:6d:b8:51:
d3:74:2f:4b:3f:6d:7a:1b:24:d5:0e:de:96:b7:af:
c4:8f:d7:6f:1d:1a:dc:91:d3:ca:12:56:0e:31:03:
e3:29:85:3f:de:2e:88:07:91:69:21:0c:3d:ba:9f:
94:bc:58:36:81:2d:9c:c6:db:4f:12:32:ad:24:e6:
25:c0:d2:32:f5:e1:00:6c:99:b7:cb:93:a8:65:92:
3c:2d:48:a3:7b:a9:f6:93:a4:d0:4a:1d:12:7f:a7:
7a:49:d3:dc:87:55:5f:29:78:52:53:da:b7:bc:53:
e1:61:b7:c9:b1:bd:48:ad:c2:87:81:48:ad:15:46:
e3:ef:70:d6:17:60:be:3c:c5:b6:e2:93:85:b2:c7:
1d:dc:55:a4:6b:f8:8e:94:fa:fc:aa:9d:5d:ed:0f:
ed:40:01:24:c8:43:34:fd:0d:ca:c8:48:61:ad:d3:
80:96:5a:b7:db:58:25:1a:9a:76:9b:52:7c:61:5a:
c1:60:55:37:fa:23:cb:98:7c:ea:ba:0f:2b:7b:06:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B8:0D:80:22:2A:1D:28:05:E1:B1:0E:9C:71:56:6F:CE:73:99:AC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FF7BF578A59D11EFB201FE3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.82.0/24
43.225.74.0/24
43.230.196.0/22
43.239.132.0/22
43.240.4.0/24
43.240.6.0/23
43.250.252.0/22
45.64.8.0/22
45.248.24.0/24
45.248.26.0/23
103.42.88.0/22
103.47.12.0/23
103.47.15.0/24
103.47.72.0/22
103.47.172.0/22
103.49.232.0/23
103.54.24.0-103.54.26.255
103.62.147.0/24
103.80.34.0/23
103.82.72.0/22
103.85.118.0/23
103.87.204.0/22
103.93.172.0/22
103.93.212.0/23
103.98.53.0/24
103.101.116.0/22
103.103.163.0/24
103.109.180.0/22
103.114.188.0/23
103.118.180.0/22
103.148.66.0/23
103.173.218.0/24
103.177.202.0/23
103.178.58.0/23
103.181.90.0/23
103.182.44.0/23
103.184.184.0/23
103.186.44.0/23
103.189.146.0/23
103.191.182.0/23
103.191.234.0/23
103.204.168.0/22
103.211.56.0-103.211.58.255
103.211.190.0/23
103.212.136.0/22
103.213.6.0/23
103.225.205.0-103.225.207.255
103.226.200.0/22
103.227.95.0/24
103.248.120.0/23
139.5.16.0/22
IPv6:
2405:5540::/32
Signature Algorithm: sha256WithRSAEncryption
1e:95:0d:7e:a2:f5:ac:b5:92:4f:4b:a1:59:f8:91:7a:a0:94:
ed:20:39:ef:90:64:a2:69:37:da:23:cd:46:e6:55:11:d1:13:
d8:22:2b:25:f3:05:0a:b7:76:97:81:61:8b:c0:7f:a0:17:94:
d5:69:89:f5:9d:40:c9:0e:8a:7b:68:7c:a4:c4:b7:79:30:8d:
d8:b1:57:b5:80:59:03:8e:67:34:7c:7c:e0:6d:e7:23:87:bf:
8d:38:cf:10:a4:f4:6c:8f:4a:8f:e6:24:13:4a:ca:bd:3c:de:
d6:02:ee:b5:9d:b3:a7:9b:cb:91:8d:b3:12:aa:6f:48:07:7d:
6d:d1:98:ee:a2:e7:82:81:0a:ff:12:96:aa:48:3d:66:1a:73:
73:f8:03:fa:a4:86:ea:3d:5a:7b:6e:a4:22:73:5d:fc:c1:dc:
63:93:92:4c:22:2a:2f:61:fd:6a:e7:a9:14:d9:90:62:a3:1c:
7d:7d:9b:09:bf:ef:5f:5c:8a:86:92:11:e0:c7:5e:95:a7:9e:
55:53:de:e9:29:65:45:a2:23:9c:6f:d5:18:e3:95:ec:02:0d:
e2:9a:0e:f9:cd:81:6a:f4:8c:e0:d2:ac:e7:78:bd:43:c0:93:
84:3f:6c:7a:11:82:0b:e3:d8:9c:86:26:b7:84:6e:8e:f4:21:
43:bf:2b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:30 2025 by rpki-client