Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F3FD768E9F611EF99EE124AC4F9AE02.roa
File: 4F3FD768E9F611EF99EE124AC4F9AE02.roa (raw, json)
Hash identifier: nhu1x0ej0uNIkPDurzzbRsJPf33ynG4Z0zB1NwARLyQ=
Subject key identifier: E7:F7:45:40:9A:0C:10:53:D9:BC:C4:C1:41:7E:2E:44:AE:0D:59:32
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A64B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F3FD768E9F611EF99EE124AC4F9AE02.roa
Signing time: Tue 18 Feb 2025 05:40:48 +0000
ROA not before: Tue 18 Feb 2025 05:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
45.251.48.0/22 maxlen: 24
59.153.96.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.20.0/22 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.109.0/24 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.159.137.0/24 maxlen: 24
103.164.24.0/23 maxlen: 24
103.167.157.0/24 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.215.204.0/22 maxlen: 24
103.219.228.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
2402:f80::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 18 Feb 2025 10:46:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42571 (0xa64b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 18 05:40:48 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67b41d60-a656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:ce:46:2a:71:01:9c:e2:84:2d:1c:4b:4e:
ed:27:a0:92:6a:8a:1f:15:a3:e0:0a:6d:7c:ed:44:
23:23:1f:19:d6:7f:c6:0e:bb:fe:86:91:c7:c9:f5:
1e:38:5f:59:b6:36:eb:57:31:5a:05:6b:fd:c0:89:
8a:0f:a1:66:46:6e:6f:b6:27:14:ef:42:f0:66:72:
74:61:65:eb:a9:f5:96:01:10:a9:11:d0:42:72:e9:
70:d7:f6:57:da:b6:60:37:bc:f0:ad:bc:8c:73:39:
fd:f2:0d:b4:84:b8:2a:4a:ec:db:05:2b:34:4f:d1:
31:ef:6d:c3:68:83:96:0a:ba:1d:4a:e9:bd:3a:4c:
c6:94:06:54:63:10:f7:4a:f3:35:ba:f4:d8:eb:cd:
94:c6:52:04:c7:10:cf:bd:c7:cd:6e:b8:00:71:73:
d5:0d:d7:ba:fa:36:bd:89:75:50:29:fe:8f:bf:94:
11:73:cf:ba:44:e9:1a:30:92:ef:29:f3:f0:80:b6:
48:d9:06:86:e1:23:d7:a4:63:30:a0:69:3f:2c:00:
41:9f:e9:3d:8e:cd:60:5b:03:7d:31:36:30:25:f4:
26:28:5a:d0:6b:1e:cd:16:bb:35:f8:83:a9:f7:7f:
85:44:86:80:ee:cb:9e:67:b9:8a:01:c5:a6:47:e5:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F7:45:40:9A:0C:10:53:D9:BC:C4:C1:41:7E:2E:44:AE:0D:59:32
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F3FD768E9F611EF99EE124AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
45.114.156.0/22
45.251.48.0/22
59.153.96.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.47.152.0/24
103.51.20.0/22
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.143.109.0/24
103.143.215.0/24
103.144.112.0/23
103.153.208.0/23
103.154.26.0/24
103.155.194.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.159.137.0/24
103.164.24.0/23
103.167.157.0/24
103.169.58.0/23
103.171.8.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.175.106.0/23
103.180.216.0/23
103.192.72.0/22
103.199.92.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.215.204.0/22
103.219.228.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.236.112.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
2402:f80::/32
Signature Algorithm: sha256WithRSAEncryption
22:c7:9b:b5:1b:d6:f3:d0:54:79:da:5f:62:9f:f4:3d:0e:31:
14:d9:ef:be:0e:26:34:be:b6:0f:7d:9d:3e:a3:33:0b:63:1c:
fd:d5:b3:db:44:05:01:e7:10:e0:29:04:a7:51:5e:ca:c6:90:
81:84:67:89:71:d6:17:e3:79:42:cd:0f:9e:7f:c0:ec:d1:a9:
b2:52:41:77:14:99:d4:33:2e:1a:8b:87:66:55:67:09:bd:8b:
99:39:4b:ce:0e:89:a1:ed:d3:a7:68:8d:25:a9:88:76:22:34:
87:57:e4:c5:2e:10:c2:0a:7e:38:bc:29:a2:55:7b:bc:d9:78:
42:eb:24:1c:31:07:bc:92:1d:47:31:2e:ec:aa:f1:2a:fa:98:
b1:cc:e1:02:83:3e:56:1a:74:09:48:93:7e:c1:7b:c3:85:0e:
9c:f0:c7:c8:16:ea:3d:0f:15:3e:ac:59:7f:11:1c:96:b3:93:
dc:55:b9:81:c6:ca:6e:dd:9c:8e:e6:d2:f6:9b:e1:fa:49:94:
bf:09:d8:74:8b:b6:5b:9d:0e:fe:13:33:0a:13:34:f3:57:7e:
fb:17:20:5d:be:3c:5d:1c:70:c6:60:31:15:df:9d:57:b9:2d:
ab:b9:c6:d4:8c:6f:fa:8d:38:8f:b6:f4:02:f8:ee:2a:6f:97:
a7:29:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:36:07 2025 by rpki-client