Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10821840EDE511EF9B4E433AC4F9AE02.roa
File: 10821840EDE511EF9B4E433AC4F9AE02.roa (raw, json)
Hash identifier: 0GKIFmRDl1m53pPWIjHjKNIcSuaIBHlhKGdJ96+RQG0=
Subject key identifier: D2:E1:66:22:CA:BC:A1:B3:E8:3D:ED:9D:E6:09:7F:18:A3:20:39:08
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BA2F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10821840EDE511EF9B4E433AC4F9AE02.roa
Signing time: Thu 08 May 2025 16:31:22 +0000
ROA not before: Thu 08 May 2025 16:31:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55352
IP address blocks: 36.255.180.0/22 maxlen: 22
36.255.180.0/24 maxlen: 24
36.255.181.0/24 maxlen: 24
36.255.182.0/24 maxlen: 24
36.255.183.0/24 maxlen: 24
36.255.184.0/22 maxlen: 22
36.255.184.0/24 maxlen: 24
36.255.185.0/24 maxlen: 24
36.255.186.0/24 maxlen: 24
36.255.187.0/24 maxlen: 24
43.231.132.0/22 maxlen: 24
43.231.212.0/22 maxlen: 24
43.231.236.0/22 maxlen: 24
43.231.252.0/22 maxlen: 24
43.247.136.0/22 maxlen: 24
45.112.8.0/22 maxlen: 24
45.112.56.0/22 maxlen: 24
45.114.80.0/22 maxlen: 24
45.115.56.0/24 maxlen: 24
45.115.57.0/24 maxlen: 24
45.115.58.0/24 maxlen: 24
45.115.59.0/24 maxlen: 24
45.117.108.0/22 maxlen: 24
45.126.144.0/22 maxlen: 24
45.251.12.0/24 maxlen: 24
45.251.13.0/24 maxlen: 24
45.251.14.0/24 maxlen: 24
45.251.15.0/24 maxlen: 24
59.152.56.0/22 maxlen: 22
59.152.56.0/24 maxlen: 24
59.152.57.0/24 maxlen: 24
59.152.58.0/24 maxlen: 24
59.152.59.0/24 maxlen: 24
59.153.0.0/22 maxlen: 24
59.153.120.0/22 maxlen: 24
103.8.164.0/22 maxlen: 24
103.29.156.0/22 maxlen: 24
103.36.26.0/24 maxlen: 24
103.36.27.0/24 maxlen: 24
103.57.172.0/22 maxlen: 22
103.57.172.0/24 maxlen: 24
103.57.173.0/24 maxlen: 24
103.57.174.0/24 maxlen: 24
103.57.175.0/24 maxlen: 24
103.60.208.0/22 maxlen: 24
103.75.60.0/23 maxlen: 24
103.83.216.0/22 maxlen: 22
103.83.216.0/24 maxlen: 24
103.83.217.0/24 maxlen: 24
103.83.218.0/24 maxlen: 24
103.83.219.0/24 maxlen: 24
103.102.92.0/22 maxlen: 24
103.114.0.0/22 maxlen: 24
103.119.188.0/22 maxlen: 24
103.131.184.0/22 maxlen: 22
103.131.184.0/24 maxlen: 24
103.131.185.0/24 maxlen: 24
103.131.186.0/24 maxlen: 24
103.131.187.0/24 maxlen: 24
103.136.174.0/24 maxlen: 24
103.155.212.0/23 maxlen: 24
103.156.212.0/23 maxlen: 24
103.163.194.0/23 maxlen: 24
103.176.240.0/23 maxlen: 24
103.179.212.0/23 maxlen: 24
103.181.86.0/24 maxlen: 24
103.183.54.0/23 maxlen: 24
103.197.224.0/22 maxlen: 24
103.198.164.0/22 maxlen: 24
103.200.100.0/22 maxlen: 22
103.200.100.0/24 maxlen: 24
103.200.101.0/24 maxlen: 24
103.200.102.0/24 maxlen: 24
103.200.103.0/24 maxlen: 24
103.200.104.0/22 maxlen: 24
103.200.212.0/22 maxlen: 22
103.200.212.0/24 maxlen: 24
103.200.213.0/24 maxlen: 24
103.200.214.0/24 maxlen: 24
103.200.215.0/24 maxlen: 24
103.204.160.0/22 maxlen: 24
103.205.172.0/22 maxlen: 22
103.205.172.0/24 maxlen: 24
103.205.173.0/24 maxlen: 24
103.205.174.0/24 maxlen: 24
103.205.175.0/24 maxlen: 24
103.220.40.0/22 maxlen: 24
103.221.248.0/22 maxlen: 24
103.226.140.0/22 maxlen: 24
103.226.144.0/22 maxlen: 24
103.226.188.0/22 maxlen: 24
103.226.204.0/22 maxlen: 24
103.226.236.0/22 maxlen: 24
103.226.240.0/22 maxlen: 24
103.234.212.0/22 maxlen: 22
103.234.212.0/24 maxlen: 24
103.234.213.0/24 maxlen: 24
103.234.214.0/24 maxlen: 24
103.234.215.0/24 maxlen: 24
103.234.240.0/22 maxlen: 22
103.234.240.0/24 maxlen: 24
103.234.241.0/24 maxlen: 24
103.234.242.0/24 maxlen: 24
103.234.243.0/24 maxlen: 24
103.239.171.0/24 maxlen: 24
111.125.217.0/24 maxlen: 24
111.125.218.0/23 maxlen: 24
111.125.224.0/24 maxlen: 24
111.125.226.0/24 maxlen: 24
111.125.228.0/24 maxlen: 24
111.125.233.0/24 maxlen: 24
111.125.236.0/24 maxlen: 24
111.125.241.0/24 maxlen: 24
111.125.242.0/24 maxlen: 24
111.125.249.0/24 maxlen: 24
111.125.252.0/22 maxlen: 24
124.66.172.0/22 maxlen: 24
175.100.176.0/20 maxlen: 24
202.168.144.0/22 maxlen: 24
2406:9e00:20::/48 maxlen: 48
2406:9e00:21::/48 maxlen: 48
2406:9e00:22::/48 maxlen: 48
2406:9e00:23::/48 maxlen: 48
2406:9e00:24::/48 maxlen: 48
2406:9e00:25::/48 maxlen: 48
2406:9e00:26::/48 maxlen: 48
2406:9e00:27::/48 maxlen: 48
2406:9e00:28::/48 maxlen: 48
2406:9e00:29::/48 maxlen: 48
2406:9e00:2a::/48 maxlen: 48
2406:9e00:2b::/48 maxlen: 48
2406:9e00:2c::/48 maxlen: 48
2406:9e00:2d::/48 maxlen: 48
2406:9e00:2e::/48 maxlen: 48
2406:9e00:2f::/48 maxlen: 48
2406:9e00:30::/48 maxlen: 48
2406:9e00:31::/48 maxlen: 48
2406:9e00:32::/48 maxlen: 48
2406:9e00:33::/48 maxlen: 48
2406:9e00:34::/48 maxlen: 48
2406:9e00:35::/48 maxlen: 48
2406:9e00:36::/48 maxlen: 48
2406:9e00:37::/48 maxlen: 48
2406:9e00:38::/48 maxlen: 48
2406:9e00:39::/48 maxlen: 48
2406:9e00:3a::/48 maxlen: 48
2406:9e00:3b::/48 maxlen: 48
2406:9e00:3c::/48 maxlen: 48
2406:9e00:3d::/48 maxlen: 48
2406:9e00:3e::/48 maxlen: 48
2406:9e00:3f::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 09 May 2025 10:41:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47663 (0xba2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:31:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=681cdc5a-5c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:b8:2e:38:68:d6:b3:a6:57:9d:3c:79:eb:
e6:8f:e9:da:2b:e9:a1:18:c4:1a:c0:fb:34:c0:03:
4c:d5:a6:41:cc:1e:78:da:e8:99:0c:e0:71:a6:ea:
fd:8f:77:10:4f:af:eb:94:21:f8:d7:b9:e8:1b:da:
e5:61:d0:8c:92:22:a8:82:52:9a:71:b8:fe:ba:69:
2c:c1:3e:88:e3:75:7b:37:97:01:6c:b0:60:90:1e:
74:9a:db:54:af:3b:01:61:24:3b:52:f4:55:02:68:
9e:75:55:11:e1:17:50:d7:16:93:d7:4c:30:47:ad:
f1:d5:a7:6b:2c:51:37:32:eb:0e:f4:dc:ae:9f:35:
9e:6a:71:be:ca:19:cc:cb:76:b2:b5:58:7a:69:3c:
23:d1:2c:fb:8d:62:9b:08:81:69:96:36:6b:c9:d6:
46:3a:c6:08:d2:15:78:1d:0e:ce:01:90:d1:63:a2:
ac:18:a8:44:f1:12:2c:09:4e:55:f7:0a:78:b5:bd:
0e:4b:24:9c:de:39:18:ce:ff:dd:9b:a8:b0:68:79:
30:9e:73:4f:26:c1:1f:d7:8a:ab:22:4d:66:65:b4:
f0:2f:7d:2b:51:47:49:d7:9a:84:2e:f4:0d:a4:ee:
20:1c:36:7b:fd:1b:74:f7:4a:0f:1a:0f:ce:c7:8c:
8e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E1:66:22:CA:BC:A1:B3:E8:3D:ED:9D:E6:09:7F:18:A3:20:39:08
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10821840EDE511EF9B4E433AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.180.0-36.255.187.255
43.231.132.0/22
43.231.212.0/22
43.231.236.0/22
43.231.252.0/22
43.247.136.0/22
45.112.8.0/22
45.112.56.0/22
45.114.80.0/22
45.115.56.0/22
45.117.108.0/22
45.126.144.0/22
45.251.12.0/22
59.152.56.0/22
59.153.0.0/22
59.153.120.0/22
103.8.164.0/22
103.29.156.0/22
103.36.26.0/23
103.57.172.0/22
103.60.208.0/22
103.75.60.0/23
103.83.216.0/22
103.102.92.0/22
103.114.0.0/22
103.119.188.0/22
103.131.184.0/22
103.136.174.0/24
103.155.212.0/23
103.156.212.0/23
103.163.194.0/23
103.176.240.0/23
103.179.212.0/23
103.181.86.0/24
103.183.54.0/23
103.197.224.0/22
103.198.164.0/22
103.200.100.0-103.200.107.255
103.200.212.0/22
103.204.160.0/22
103.205.172.0/22
103.220.40.0/22
103.221.248.0/22
103.226.140.0-103.226.147.255
103.226.188.0/22
103.226.204.0/22
103.226.236.0-103.226.243.255
103.234.212.0/22
103.234.240.0/22
103.239.171.0/24
111.125.217.0-111.125.219.255
111.125.224.0/24
111.125.226.0/24
111.125.228.0/24
111.125.233.0/24
111.125.236.0/24
111.125.241.0-111.125.242.255
111.125.249.0/24
111.125.252.0/22
124.66.172.0/22
175.100.176.0/20
202.168.144.0/22
IPv6:
2406:9e00:20::/43
Signature Algorithm: sha256WithRSAEncryption
63:e3:fc:c2:b7:76:e6:d4:f0:82:03:21:78:5b:26:07:d2:a6:
95:2f:c9:0a:90:cc:8b:ec:c9:3b:98:ef:b6:7c:18:1b:8c:b4:
d8:e1:af:08:8c:68:17:ab:8b:d9:c5:c5:5c:5c:cd:2c:d6:cf:
ec:93:7e:a8:8f:fe:fc:d7:1e:a8:79:34:c3:23:07:21:cf:81:
a1:8d:8f:b3:f2:40:58:d9:f8:13:07:f3:b7:86:82:72:66:c3:
a4:c6:5a:40:b7:9c:45:04:43:06:95:52:eb:17:c6:07:9b:be:
cd:6a:84:05:3f:bf:50:59:13:0c:48:00:13:aa:2a:20:1d:6d:
7a:a8:e3:12:43:f7:32:97:44:c5:16:df:5d:75:9c:ce:7c:33:
d1:b0:23:b2:7a:c5:00:68:e5:ad:ce:cf:08:e8:97:89:eb:7f:
8b:a2:c7:cd:c4:90:64:2c:88:13:d9:d1:c0:9c:42:f8:12:5e:
1f:95:1e:a7:c6:36:f3:ef:12:d3:26:d0:f5:51:a6:3c:9a:c0:
42:71:47:fc:99:55:03:66:df:05:e7:8e:40:ca:73:3d:94:5b:
75:b9:da:c5:a0:18:82:4a:11:f6:2a:41:b5:cc:26:4b:85:bd:
ff:7f:6c:34:b1:76:cf:5b:e9:cb:df:6a:8e:9c:4c:d1:f3:c2:
a1:e3:b5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:27:14 2025 by rpki-client