Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78C4D6A2A93D11ED9CD5A25BC4F9AE02.roa
File: 78C4D6A2A93D11ED9CD5A25BC4F9AE02.roa (raw, json)
Hash identifier: WaH1PBMvG+wJFDAdzchuLIDYJkmp4M81sKdB7J6BJGI=
Subject key identifier: 2D:F7:40:C9:80:1C:86:00:58:17:E7:7F:6C:CB:71:0E:4F:B1:B9:16
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BAE9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78C4D6A2A93D11ED9CD5A25BC4F9AE02.roa
Signing time: Wed 14 May 2025 07:31:53 +0000
ROA not before: Wed 14 May 2025 07:31:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150654
IP address blocks: 45.112.56.0/24 maxlen: 24
45.112.57.0/24 maxlen: 24
45.112.58.0/24 maxlen: 24
45.112.59.0/24 maxlen: 24
103.155.147.0/24 maxlen: 24
103.166.214.0/24 maxlen: 24
103.168.22.0/24 maxlen: 24
103.168.32.0/24 maxlen: 24
103.168.33.0/24 maxlen: 24
103.168.173.0/24 maxlen: 24
103.171.109.0/24 maxlen: 24
103.174.93.0/24 maxlen: 24
103.180.175.0/24 maxlen: 24
103.181.150.0/24 maxlen: 24
103.214.230.0/23 maxlen: 23
103.239.168.0/24 maxlen: 24
103.239.169.0/24 maxlen: 24
103.239.170.0/24 maxlen: 24
103.239.171.0/24 maxlen: 24
163.223.54.0/24 maxlen: 24
175.111.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 05:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47849 (0xbae9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 14 07:31:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682446e9-7f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:56:01:a1:5b:11:7a:9f:51:a1:6b:ef:6d:
8b:a2:bf:73:0a:aa:5e:7d:23:3f:de:eb:ef:72:7a:
ff:49:9f:49:68:8c:8f:a6:78:56:83:e4:c6:e3:4b:
d5:04:4b:d6:35:87:de:51:f0:2c:a1:83:6e:be:fb:
af:fa:5a:13:f4:69:b6:ce:ae:a3:93:95:f2:49:6f:
85:c0:8c:c5:7d:2c:8a:29:11:53:95:75:5c:4a:bf:
b7:d4:4f:3c:8d:7c:b1:f1:8d:2c:cb:1d:a7:70:5b:
22:47:6d:ce:bc:05:9c:b1:d4:25:9a:2f:7e:48:56:
33:fd:4b:38:1c:18:da:1e:31:4f:08:72:7c:a2:08:
9c:bf:48:e8:8a:60:77:de:4f:6e:23:91:18:00:3d:
e7:39:11:43:41:34:a6:90:9e:50:45:38:d5:46:e5:
8f:1d:cd:82:b0:1b:cf:a6:71:9a:75:62:81:d3:de:
8c:63:02:6f:4c:b9:38:c2:9f:c6:a5:6b:e3:a6:fb:
d5:96:a6:a8:d2:57:9d:43:06:22:86:63:aa:92:f7:
0c:b6:3d:a8:60:e7:78:58:e8:8f:8a:e6:ce:79:89:
f3:45:83:c2:8f:35:cd:aa:26:c2:ed:e2:95:ff:26:
9f:7f:5a:29:1c:a0:9c:58:78:bb:84:d1:ce:05:60:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F7:40:C9:80:1C:86:00:58:17:E7:7F:6C:CB:71:0E:4F:B1:B9:16
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/78C4D6A2A93D11ED9CD5A25BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.112.56.0/22
103.155.147.0/24
103.166.214.0/24
103.168.22.0/24
103.168.32.0/23
103.168.173.0/24
103.171.109.0/24
103.174.93.0/24
103.180.175.0/24
103.181.150.0/24
103.214.230.0/23
103.239.168.0/22
163.223.54.0/24
175.111.97.0/24
Signature Algorithm: sha256WithRSAEncryption
90:5e:89:01:ab:e4:66:64:7d:27:2f:af:92:53:fe:97:de:4b:
b9:43:9a:43:8b:d7:7e:fd:d3:51:5a:10:e9:3f:a1:e7:8b:0d:
7e:73:e8:12:6b:d1:56:68:3c:27:d2:59:14:16:62:3d:20:d5:
aa:b2:82:e2:cd:39:98:41:f6:00:87:6c:0c:b0:ac:19:88:2f:
56:bd:bc:06:80:5a:de:61:d2:73:37:2f:d8:29:6a:97:f8:4b:
b0:ed:50:2c:3c:80:3f:f3:26:bf:75:2a:63:57:4c:51:d3:a9:
0c:a8:3c:b9:da:d3:e3:99:df:41:a6:92:b7:7e:bd:28:e2:51:
eb:a6:59:ff:aa:2b:a9:9b:36:f9:d2:3b:85:54:62:db:50:f4:
d0:9b:1c:1c:65:a8:48:59:3d:f7:5b:9d:59:62:d9:6c:58:05:
78:63:05:9a:03:7f:a3:ce:db:23:00:d6:0b:31:3c:58:c0:5e:
92:b2:a8:16:c8:4d:ce:d8:db:65:e8:3d:6f:8e:10:b7:c4:3a:
f6:98:f0:d2:2e:e8:81:32:24:d3:dc:1d:72:dc:4f:af:0d:ad:
aa:a6:e5:fc:43:e8:1c:aa:9b:f2:16:ce:bf:b6:e5:c8:da:1f:
9f:19:35:84:68:19:d1:a9:b7:60:08:7e:b6:52:33:2f:ce:19:
3e:52:d0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:41:27 2025 by rpki-client