Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/031ADC443ABD11F0AE3EC573C4F9AE02.roa
File: 031ADC443ABD11F0AE3EC573C4F9AE02.roa (raw, json)
Hash identifier: HU4M7f//lRCkUgt6RCiA5LbACj2Y8YSHo8BdPc4iqC0=
Subject key identifier: 25:21:75:4C:3E:6A:BE:2D:90:2C:63:F7:01:F3:3A:19:26:A7:B3:18
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BBFE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/031ADC443ABD11F0AE3EC573C4F9AE02.roa
Signing time: Tue 27 May 2025 05:39:52 +0000
ROA not before: Tue 27 May 2025 05:39:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137085
IP address blocks: 27.123.240.0/23 maxlen: 24
43.225.248.0/22 maxlen: 24
43.228.164.0/23 maxlen: 24
103.37.98.0/23 maxlen: 24
103.40.200.0/22 maxlen: 24
103.68.21.0/24 maxlen: 24
103.68.140.0/23 maxlen: 24
103.69.239.0/24 maxlen: 24
103.72.196.0/24 maxlen: 24
103.88.59.0/24 maxlen: 24
103.91.72.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.91.75.0/24 maxlen: 24
103.91.76.0/22 maxlen: 24
103.92.107.0/24 maxlen: 24
103.93.39.0/24 maxlen: 24
103.101.112.0/22 maxlen: 24
103.113.110.0/23 maxlen: 24
103.120.108.0/24 maxlen: 24
103.120.152.0/24 maxlen: 24
103.120.153.0/24 maxlen: 24
103.124.174.0/24 maxlen: 24
103.138.9.0/24 maxlen: 24
103.139.143.0/24 maxlen: 24
103.154.8.0/23 maxlen: 24
103.154.56.0/23 maxlen: 24
103.155.237.0/24 maxlen: 24
103.156.121.0/24 maxlen: 24
103.157.188.0/23 maxlen: 24
103.158.41.0/24 maxlen: 24
103.159.104.0/23 maxlen: 24
103.160.25.0/24 maxlen: 24
103.164.140.0/24 maxlen: 24
103.165.88.0/23 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.167.238.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.169.242.0/23 maxlen: 24
103.170.0.0/24 maxlen: 24
103.170.36.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.84.0/23 maxlen: 24
103.178.24.0/23 maxlen: 24
103.178.117.0/24 maxlen: 24
103.179.50.0/23 maxlen: 24
103.181.66.0/24 maxlen: 24
103.181.119.0/24 maxlen: 24
103.184.41.0/24 maxlen: 24
103.184.205.0/24 maxlen: 24
103.191.202.0/23 maxlen: 24
103.204.70.0/24 maxlen: 24
103.206.51.0/24 maxlen: 24
103.206.96.0/23 maxlen: 24
103.216.141.0/24 maxlen: 24
103.232.232.0/22 maxlen: 24
202.4.169.0/24 maxlen: 24
2001:df0:47c0::/48 maxlen: 48
2001:df1:d240::/48 maxlen: 48
2001:df1:ed40::/48 maxlen: 48
2001:df2:3ac0::/48 maxlen: 48
2001:df2:3f40::/48 maxlen: 48
2001:df3:1340::/48 maxlen: 48
2400:d660::/32 maxlen: 32
2401:bba0::/32 maxlen: 32
2405:e100:a::/48 maxlen: 48
2405:e100:b::/48 maxlen: 48
2405:e100:c::/48 maxlen: 48
2405:e100:d::/48 maxlen: 48
2405:e100:e::/48 maxlen: 48
2405:e100:f::/48 maxlen: 48
2405:e100:1d::/48 maxlen: 48
2405:e100:1e::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 May 2025 07:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48126 (0xbbfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 27 05:39:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68355028-82e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:60:52:9e:24:44:53:e0:ba:62:5e:68:05:39:
cb:0f:ae:6f:1d:76:6e:f8:3a:d7:24:5a:b7:57:f8:
28:a1:7b:93:f3:48:40:8b:29:94:80:1e:a1:c1:2e:
aa:98:ed:3b:79:92:09:c6:65:ff:84:ae:14:bd:92:
c6:b3:de:85:dc:39:5f:e6:db:fa:cb:b1:68:47:41:
a7:33:d2:db:12:4f:15:78:5a:67:fd:1e:43:da:79:
57:e8:5b:79:11:e2:ca:8a:28:ea:09:b8:c6:81:76:
88:a3:e4:18:0b:2f:4b:6e:6b:da:03:4b:45:59:90:
a5:85:fe:cd:84:ca:02:63:c3:f2:e3:94:0c:b0:c8:
93:bc:f0:c6:f4:06:36:aa:95:2f:c1:4c:29:e6:0f:
81:7b:40:91:32:7f:9c:94:5f:54:0b:d8:dd:d7:df:
2a:a7:05:3d:ae:31:4d:0e:0a:10:d5:53:1b:7e:c8:
72:39:09:14:86:ba:02:78:e9:81:5e:46:36:5b:41:
bf:66:7b:c4:22:fc:20:9a:dd:1c:50:44:4e:ca:0d:
15:9e:e3:60:86:70:d2:98:83:06:47:cc:cc:0b:c8:
ab:cf:e5:38:17:ab:2a:f8:b8:9e:93:98:16:ff:84:
c0:71:fb:46:bc:9b:fa:eb:89:78:95:3e:0c:52:0c:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:21:75:4C:3E:6A:BE:2D:90:2C:63:F7:01:F3:3A:19:26:A7:B3:18
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/031ADC443ABD11F0AE3EC573C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/23
43.225.248.0/22
43.228.164.0/23
103.37.98.0/23
103.40.200.0/22
103.68.21.0/24
103.68.140.0/23
103.69.239.0/24
103.72.196.0/24
103.88.59.0/24
103.91.72.0/21
103.92.107.0/24
103.93.39.0/24
103.101.112.0/22
103.113.110.0/23
103.120.108.0/24
103.120.152.0/23
103.124.174.0/24
103.138.9.0/24
103.139.143.0/24
103.154.8.0/23
103.154.56.0/23
103.155.237.0/24
103.156.121.0/24
103.157.188.0/23
103.158.41.0/24
103.159.104.0/23
103.160.25.0/24
103.164.140.0/24
103.165.88.0/23
103.167.154.0/23
103.167.182.0/23
103.167.224.0/23
103.167.238.0/23
103.168.60.0/23
103.169.242.0/23
103.170.0.0/24
103.170.36.0/22
103.170.84.0/23
103.178.24.0/23
103.178.117.0/24
103.179.50.0/23
103.181.66.0/24
103.181.119.0/24
103.184.41.0/24
103.184.205.0/24
103.191.202.0/23
103.204.70.0/24
103.206.51.0/24
103.206.96.0/23
103.216.141.0/24
103.232.232.0/22
202.4.169.0/24
IPv6:
2001:df0:47c0::/48
2001:df1:d240::/48
2001:df1:ed40::/48
2001:df2:3ac0::/48
2001:df2:3f40::/48
2001:df3:1340::/48
2400:d660::/32
2401:bba0::/32
2405:e100:a::-2405:e100:f:ffff:ffff:ffff:ffff:ffff
2405:e100:1d::-2405:e100:1e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0b:e6:1c:7b:e2:c0:ef:0f:7d:4c:e1:15:8d:68:74:a6:aa:56:
20:43:b5:b5:bd:3e:1f:6a:73:89:1b:79:bd:7d:50:55:b8:66:
38:10:35:91:1e:9a:7c:59:61:c2:7d:b5:c0:13:14:db:74:00:
eb:4f:11:47:8c:fa:87:22:6e:cf:fb:86:71:8b:43:f4:0b:c2:
88:79:95:2b:6a:84:0b:4d:c8:e5:75:8b:6f:fc:e9:66:52:80:
3c:1a:37:3d:0d:79:95:43:43:3c:55:92:ac:d9:bb:64:50:15:
80:01:63:04:81:41:5d:e6:50:e4:bd:0b:ea:57:4c:ba:5f:43:
70:6c:69:3b:07:2c:55:0f:8f:cc:ba:d7:a9:4a:cc:dc:37:4e:
2a:57:bc:6a:23:44:10:d2:bf:88:50:14:95:5d:9e:69:c2:42:
0f:5e:cf:e6:fc:2d:a7:2d:53:b3:fa:5c:d3:8a:e5:8f:46:04:
a2:cb:3c:29:4a:61:a7:91:4e:97:b4:49:4d:4e:87:65:19:4d:
84:5f:47:fc:02:32:56:26:4d:82:81:bc:9c:4a:8a:28:34:3e:
1a:b6:30:36:66:4d:9c:f9:33:d8:88:c7:eb:bb:9a:b5:95:9e:
a8:4f:19:13:de:57:25:8b:c9:31:85:83:5d:3f:84:32:6f:0e:
00:e7:02:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 18:30:21 2025 by rpki-client