Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B225330A379911F090A92D3EC4F9AE02.roa
File: B225330A379911F090A92D3EC4F9AE02.roa (raw, json)
Hash identifier: s2inwBvIOlCL2aPhPx0hmv77+z8+a94g35f01647Nhw=
Subject key identifier: B7:DC:A3:11:3F:54:5C:45:47:BE:1A:3A:DA:47:62:30:A2:1B:76:B3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BBC1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B225330A379911F090A92D3EC4F9AE02.roa
Signing time: Fri 23 May 2025 05:49:31 +0000
ROA not before: Fri 23 May 2025 05:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 150654
IP address blocks: 45.112.56.0/24 maxlen: 24
45.112.57.0/24 maxlen: 24
45.112.58.0/24 maxlen: 24
45.112.59.0/24 maxlen: 24
103.155.147.0/24 maxlen: 24
103.166.214.0/24 maxlen: 24
103.168.22.0/24 maxlen: 24
103.168.32.0/24 maxlen: 24
103.168.33.0/24 maxlen: 24
103.168.173.0/24 maxlen: 24
103.171.109.0/24 maxlen: 24
103.174.93.0/24 maxlen: 24
103.180.175.0/24 maxlen: 24
103.181.150.0/24 maxlen: 24
103.214.230.0/23 maxlen: 24
103.239.168.0/24 maxlen: 24
103.239.169.0/24 maxlen: 24
103.239.170.0/24 maxlen: 24
103.239.171.0/24 maxlen: 24
163.223.54.0/24 maxlen: 24
175.111.97.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 27 May 2025 12:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 48065 (0xbbc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 23 05:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68300c6a-72f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ee:7f:38:c9:57:9f:cd:45:71:e8:cb:b0:a2:
88:2d:3a:da:37:89:19:84:d6:bf:a1:d9:af:75:c4:
43:72:72:c9:24:fa:87:a1:39:4d:e5:72:54:3a:64:
29:fb:cc:aa:99:df:0e:bc:29:0c:6c:08:ea:99:e8:
4f:8d:85:04:65:ef:d3:cd:96:fb:66:92:1e:3f:90:
37:4b:8b:f2:29:19:10:c2:ff:90:5f:84:a3:7a:1b:
c8:32:98:b9:3b:86:da:82:36:4d:1d:4a:d5:82:38:
b0:4d:96:f4:27:00:0f:7b:43:08:2f:52:13:fa:25:
8a:e9:10:3d:2c:d6:78:3b:f6:05:05:dc:aa:11:e3:
76:84:26:7d:47:12:c2:1c:23:a6:c5:50:e5:bc:a2:
9f:32:72:b1:e6:7c:96:44:15:28:5c:60:75:7b:5f:
f5:d7:65:e4:db:cc:9e:9c:11:ac:3d:3c:ee:ae:67:
55:48:4c:d5:e6:0f:6c:ae:b7:e8:8c:8f:07:2b:9e:
94:ca:16:d1:2d:a4:61:fa:be:94:c2:65:66:a3:43:
55:60:14:69:47:09:fd:11:95:f3:32:2a:11:3e:2f:
46:ee:89:2b:37:80:3f:4b:3a:19:a2:5e:d1:91:e0:
38:76:f7:05:d9:a0:67:2c:35:62:c7:4c:49:a4:da:
05:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DC:A3:11:3F:54:5C:45:47:BE:1A:3A:DA:47:62:30:A2:1B:76:B3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B225330A379911F090A92D3EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.112.56.0/22
103.155.147.0/24
103.166.214.0/24
103.168.22.0/24
103.168.32.0/23
103.168.173.0/24
103.171.109.0/24
103.174.93.0/24
103.180.175.0/24
103.181.150.0/24
103.214.230.0/23
103.239.168.0/22
163.223.54.0/24
175.111.97.0/24
Signature Algorithm: sha256WithRSAEncryption
17:83:34:a4:33:52:1d:98:27:54:38:34:fe:5f:47:42:72:07:
f3:47:67:e9:e1:e9:46:1c:05:c9:7d:21:95:ac:57:03:13:e8:
31:5f:49:d5:98:d3:3b:9f:25:be:65:73:e0:fa:df:bb:52:0b:
22:d6:10:2e:15:e3:6f:c3:d4:00:b9:bf:ba:b5:11:81:07:2a:
2a:bc:59:52:31:eb:93:e9:71:e6:a9:86:66:2a:71:1f:76:98:
86:db:41:c3:e5:7b:fc:1a:b6:23:aa:83:78:4f:43:75:51:98:
82:c2:7d:4b:1a:4d:36:d4:3d:82:b6:5c:85:b6:6d:bd:da:9b:
34:4a:4f:1e:30:05:83:a7:03:4c:5b:71:3e:9e:04:24:0a:d7:
f7:af:38:90:25:60:f4:4a:47:b3:16:3e:6d:c0:8b:eb:ff:1c:
c3:5a:73:dd:1a:f8:a8:2d:cb:54:98:e6:9d:58:e3:69:5f:ee:
ed:98:2e:ba:69:07:32:b2:60:f4:2a:2b:12:4b:dd:75:08:5c:
53:1e:22:c2:8d:f7:c6:c5:68:9d:7c:3a:c0:5a:be:57:37:1b:
c7:ad:b6:f8:2b:3b:4e:ac:bf:64:09:92:2b:31:f5:6a:86:c3:
7e:88:bc:ca:fa:79:da:f3:92:32:2b:9d:e2:79:44:9e:ef:ef:
99:58:fa:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:55:25 2025 by rpki-client