Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/050D306A3F7711F0A8C96024C4F9AE02.roa
File: 050D306A3F7711F0A8C96024C4F9AE02.roa (raw, json)
Hash identifier: DBeLAV3jjzihQw5DRkzDGuCWvWq54Do+Jt6adjBXjvA=
Subject key identifier: 45:B4:DD:7E:78:1E:0C:71:30:E2:7E:F1:54:44:2F:09:C7:31:5F:C9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BCA4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/050D306A3F7711F0A8C96024C4F9AE02.roa
Signing time: Mon 02 Jun 2025 06:01:27 +0000
ROA not before: Mon 02 Jun 2025 06:01:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133676
IP address blocks: 36.50.82.0/24 maxlen: 24
43.225.74.0/24 maxlen: 24
43.230.196.0/22 maxlen: 24
43.239.132.0/22 maxlen: 24
43.240.4.0/24 maxlen: 24
43.240.5.0/24 maxlen: 24
43.240.6.0/24 maxlen: 24
43.240.7.0/24 maxlen: 24
43.250.252.0/22 maxlen: 24
45.64.8.0/24 maxlen: 24
45.64.9.0/24 maxlen: 24
45.64.10.0/24 maxlen: 24
45.64.11.0/24 maxlen: 24
45.248.24.0/24 maxlen: 24
45.248.25.0/24 maxlen: 24
45.248.26.0/23 maxlen: 24
103.42.88.0/22 maxlen: 24
103.47.12.0/23 maxlen: 24
103.47.14.0/24 maxlen: 24
103.47.15.0/24 maxlen: 24
103.47.72.0/23 maxlen: 24
103.47.74.0/23 maxlen: 24
103.47.172.0/23 maxlen: 24
103.47.174.0/23 maxlen: 24
103.49.232.0/23 maxlen: 24
103.54.24.0/23 maxlen: 24
103.54.26.0/24 maxlen: 24
103.62.147.0/24 maxlen: 24
103.80.34.0/23 maxlen: 24
103.82.72.0/22 maxlen: 24
103.85.118.0/23 maxlen: 24
103.87.204.0/22 maxlen: 24
103.93.172.0/22 maxlen: 24
103.93.212.0/23 maxlen: 24
103.98.53.0/24 maxlen: 24
103.101.116.0/24 maxlen: 24
103.101.117.0/24 maxlen: 24
103.101.118.0/23 maxlen: 24
103.103.163.0/24 maxlen: 24
103.109.180.0/23 maxlen: 24
103.109.182.0/23 maxlen: 24
103.114.188.0/23 maxlen: 24
103.118.180.0/22 maxlen: 24
103.148.66.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.173.218.0/24 maxlen: 24
103.177.202.0/23 maxlen: 24
103.178.58.0/24 maxlen: 24
103.178.59.0/24 maxlen: 24
103.181.90.0/23 maxlen: 24
103.182.44.0/23 maxlen: 24
103.182.160.0/23 maxlen: 24
103.184.184.0/23 maxlen: 24
103.189.146.0/24 maxlen: 24
103.189.147.0/24 maxlen: 24
103.191.182.0/23 maxlen: 24
103.191.234.0/23 maxlen: 24
103.195.26.0/23 maxlen: 24
103.204.168.0/22 maxlen: 24
103.211.56.0/23 maxlen: 24
103.211.58.0/24 maxlen: 24
103.211.190.0/23 maxlen: 24
103.212.136.0/23 maxlen: 24
103.212.138.0/23 maxlen: 24
103.213.6.0/23 maxlen: 24
103.225.204.0/24 maxlen: 24
103.225.205.0/24 maxlen: 24
103.225.206.0/23 maxlen: 24
103.226.200.0/22 maxlen: 24
103.227.95.0/24 maxlen: 24
103.248.120.0/24 maxlen: 24
103.248.121.0/24 maxlen: 24
103.248.122.0/24 maxlen: 24
103.248.123.0/24 maxlen: 24
139.5.16.0/23 maxlen: 24
139.5.18.0/23 maxlen: 24
2405:5540::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 03 Jun 2025 10:46:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48292 (0xbca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 2 06:01:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=683d3e36-3f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:85:fe:31:d5:9c:5d:9a:9d:ff:e3:fe:65:
11:88:fc:b5:76:af:d6:df:3c:7e:c8:6b:31:84:fc:
42:e7:c3:a8:77:6a:77:c7:0c:11:d9:07:c6:e2:6a:
35:70:5c:60:1a:62:03:46:2e:68:7f:27:97:ab:0c:
8a:b4:45:2c:4f:de:28:24:9c:5f:02:53:e1:db:8d:
be:2b:b6:be:ed:2a:66:74:de:18:6b:f4:5b:58:95:
53:88:7c:b9:72:63:d9:ea:8a:a4:ea:11:b4:35:c7:
8e:40:fa:0c:51:c5:2f:86:47:5b:2f:89:7a:3f:9e:
81:64:78:c2:f3:ec:4a:0a:8f:47:b1:93:fc:d7:bf:
5c:ae:ef:95:22:70:36:e0:88:73:b1:79:58:07:3e:
eb:71:9a:6c:df:9e:09:e3:d1:ef:f6:41:3b:1c:7b:
59:62:28:85:e4:f8:ad:61:dc:25:3e:1a:ae:59:f2:
1d:5f:47:b0:de:ee:4c:95:ec:26:ce:fc:02:a6:2b:
7e:f3:5b:9e:15:50:1d:4f:55:56:02:5e:51:af:bf:
eb:96:77:41:61:98:14:72:6f:f1:80:fa:70:ea:15:
75:49:c9:67:2c:d6:bf:3f:f7:6a:cb:c2:44:4c:01:
f4:eb:f2:03:c7:e0:1f:4d:e2:7d:a8:ac:4e:41:d5:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B4:DD:7E:78:1E:0C:71:30:E2:7E:F1:54:44:2F:09:C7:31:5F:C9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/050D306A3F7711F0A8C96024C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.82.0/24
43.225.74.0/24
43.230.196.0/22
43.239.132.0/22
43.240.4.0/22
43.250.252.0/22
45.64.8.0/22
45.248.24.0/22
103.42.88.0/22
103.47.12.0/22
103.47.72.0/22
103.47.172.0/22
103.49.232.0/23
103.54.24.0-103.54.26.255
103.62.147.0/24
103.80.34.0/23
103.82.72.0/22
103.85.118.0/23
103.87.204.0/22
103.93.172.0/22
103.93.212.0/23
103.98.53.0/24
103.101.116.0/22
103.103.163.0/24
103.109.180.0/22
103.114.188.0/23
103.118.180.0/22
103.148.66.0/23
103.153.208.0/23
103.173.218.0/24
103.177.202.0/23
103.178.58.0/23
103.181.90.0/23
103.182.44.0/23
103.182.160.0/23
103.184.184.0/23
103.189.146.0/23
103.191.182.0/23
103.191.234.0/23
103.195.26.0/23
103.204.168.0/22
103.211.56.0-103.211.58.255
103.211.190.0/23
103.212.136.0/22
103.213.6.0/23
103.225.204.0/22
103.226.200.0/22
103.227.95.0/24
103.248.120.0/22
139.5.16.0/22
IPv6:
2405:5540::/32
Signature Algorithm: sha256WithRSAEncryption
83:4d:ca:8c:f1:79:34:f1:eb:a8:96:5a:c4:17:75:65:eb:eb:
8a:36:b1:52:b3:ae:1f:68:10:02:96:57:43:71:23:26:67:6e:
a8:63:b5:7b:06:2c:b3:15:52:42:da:32:13:f6:06:82:c7:3b:
1e:52:41:5c:52:b6:92:6f:0f:7f:42:9c:c0:68:c9:bc:fc:ef:
a3:d7:1a:f7:89:79:3a:63:08:4a:b6:40:f6:11:01:3c:fe:1f:
26:19:c4:ce:77:a0:19:4f:04:47:d2:65:97:89:7d:e0:fa:dd:
b8:fc:2a:d1:35:23:0e:c0:24:37:9f:e0:95:a4:28:6f:73:f7:
43:8c:b2:a4:b3:a2:11:d8:ca:7c:c2:a3:61:3c:8c:06:98:b5:
54:91:74:46:52:5f:33:b2:4f:d6:9a:33:b5:d4:b7:c7:83:13:
7c:b8:f1:8b:a8:5a:a1:6d:e3:e3:66:a5:6a:28:95:c0:ad:80:
2a:df:aa:17:f0:42:da:cc:fa:0e:25:2d:15:f2:ed:66:73:64:
39:5d:96:94:3b:c0:4f:7b:a9:a2:38:73:b9:62:af:84:e4:dd:
9b:9a:d2:00:70:34:8f:50:51:ee:42:de:a0:4e:30:82:05:96:
04:54:15:ab:84:70:1c:22:27:c9:da:b5:43:f4:bc:16:04:54:
7e:b0:0d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 21:06:45 2025 by rpki-client