Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CD4D92602F311F0BCE5660BC4F9AE02.roa
File: 5CD4D92602F311F0BCE5660BC4F9AE02.roa (raw, json)
Hash identifier: rnbOz0sy3NKYKN8ZnfWUHsCjLWQ0cVl77hhncAWXHTk=
Subject key identifier: A7:EC:13:71:DE:CF:B9:90:61:60:8E:5E:C1:52:0C:F9:B7:4D:B2:74
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AB1D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CD4D92602F311F0BCE5660BC4F9AE02.roa
Signing time: Mon 17 Mar 2025 06:20:56 +0000
ROA not before: Mon 17 Mar 2025 06:20:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.239.152.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
45.251.32.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.98.79.0/24 maxlen: 24
103.99.48.0/23 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.127.188.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.135.60.0/22 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.180.0/23 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.170.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.50.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.158.216.0/23 maxlen: 24
103.159.137.0/24 maxlen: 24
103.162.80.0/23 maxlen: 24
103.165.26.0/23 maxlen: 24
103.166.220.0/23 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.54.0/23 maxlen: 24
103.171.60.0/23 maxlen: 24
103.171.208.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.172.56.0/23 maxlen: 24
103.172.90.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.26.0/23 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.12.0/23 maxlen: 24
103.175.58.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.190.12.0/23 maxlen: 24
103.191.86.0/23 maxlen: 24
103.192.64.0/22 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.234.64.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.245.170.0/23 maxlen: 24
103.254.96.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
202.9.55.0/24 maxlen: 24
203.191.56.0/22 maxlen: 24
2001:df7:8980::/48 maxlen: 48
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
2406:68c0::/32 maxlen: 40
2407:1340::/32 maxlen: 32
2407:4540::/32 maxlen: 40
Validation: Failed, certificate revoked on Mon 17 Mar 2025 06:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43805 (0xab1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 17 06:20:56 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67d7bf48-f6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f6:66:b4:5b:65:76:ed:f0:43:dc:37:e2:80:
a0:7a:af:71:70:52:b2:e5:b8:f9:3c:3e:5a:6c:a0:
99:fa:fc:ce:ac:1f:0d:b3:f0:99:e0:52:cb:e6:3f:
c4:8c:9d:3d:83:9e:8c:f2:bb:d7:e3:14:7b:b9:33:
65:f1:74:cd:63:0c:fb:f5:c1:bf:1f:d9:07:92:43:
02:b3:3d:aa:f5:d3:70:7f:85:93:5b:0e:d5:71:32:
17:60:d0:b5:41:37:41:97:ae:ad:12:a5:ea:7b:69:
45:b6:d5:1d:23:ce:45:b2:95:14:11:2e:b1:81:27:
e8:e2:f7:47:8b:b5:12:d1:6e:db:e9:74:33:95:30:
3b:cc:1f:ce:97:dd:be:da:f4:5a:d1:56:f5:7a:a2:
0f:8f:0f:ad:f7:32:5f:f7:e2:31:6c:21:d0:47:3c:
f4:6e:ee:3e:b3:db:af:73:d3:0b:ea:c4:74:4b:63:
9a:2b:84:72:11:e4:49:b8:7f:4a:a8:49:f2:0c:ac:
80:68:32:d6:d6:c9:55:ca:c6:63:8f:2a:7a:32:7a:
d6:8e:e8:a8:bf:34:ff:7b:c2:ff:e1:59:53:75:ae:
c6:11:1d:cd:3a:b1:b0:91:3e:94:10:e6:50:86:50:
10:c8:8f:8e:3d:b2:39:df:de:67:6b:46:b1:29:f4:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EC:13:71:DE:CF:B9:90:61:60:8E:5E:C1:52:0C:F9:B7:4D:B2:74
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5CD4D92602F311F0BCE5660BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.239.152.0/22
45.114.156.0/22
45.251.32.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.98.79.0/24
103.99.48.0/23
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.127.188.0/22
103.132.203.0/24
103.133.116.0/24
103.135.60.0/22
103.139.88.0/23
103.142.64.0/23
103.143.180.0/23
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.170.0/23
103.155.194.0/23
103.157.50.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.158.216.0/23
103.159.137.0/24
103.162.80.0/23
103.165.26.0/23
103.166.220.0/23
103.169.58.0/23
103.171.8.0/23
103.171.54.0/23
103.171.60.0/23
103.171.208.0/23
103.171.236.0/23
103.172.56.0/23
103.172.90.0/23
103.173.14.0/23
103.173.41.0/24
103.174.26.0/23
103.174.42.0/23
103.175.12.0/23
103.175.58.0/23
103.175.106.0/23
103.176.142.0/24
103.180.216.0/23
103.190.12.0/23
103.191.86.0/23
103.192.64.0/22
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.234.64.0/22
103.236.112.0/22
103.245.170.0/23
103.254.96.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
202.9.55.0/24
203.191.56.0/22
IPv6:
2001:df7:8980::/48
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
2406:68c0::/32
2407:1340::/32
2407:4540::/32
Signature Algorithm: sha256WithRSAEncryption
aa:78:12:88:dd:1e:c1:59:d6:5a:2d:74:fa:0c:4c:c7:e0:4d:
9a:c1:89:8d:e8:6a:1d:22:ec:9d:02:ba:2c:c8:38:ef:b6:24:
ee:d1:8e:90:d4:7f:22:32:43:73:27:d7:5b:0c:b7:18:35:ad:
6c:ea:38:71:8d:45:9e:41:c1:03:be:6f:73:2c:26:53:c3:d1:
80:0b:07:61:59:14:94:29:90:1f:7e:03:2b:4f:ae:c0:1f:91:
8d:93:86:83:b0:7c:6f:24:00:10:ac:23:f5:d7:a1:df:ae:74:
a6:89:36:dc:b0:42:fa:93:f8:3e:51:2c:3b:46:70:96:e5:ab:
bf:b7:68:c3:7d:c9:b0:44:a5:84:84:ac:88:a7:bb:9e:4c:fb:
82:22:b5:69:3b:8b:46:2b:84:62:7b:40:e9:91:0a:0a:3e:e5:
31:5b:c0:8a:40:45:be:58:46:db:bb:b9:29:da:cf:63:38:16:
86:9a:d8:e7:ad:56:93:61:6e:0e:d4:1b:21:3d:3d:ae:be:e5:
94:7f:b5:67:20:32:99:ab:73:1b:9e:ce:0a:fe:9a:22:cc:61:
e5:90:83:bd:2b:e0:36:89:72:af:bc:e9:ba:72:72:7b:d8:c5:
14:c1:c4:b4:d9:fc:6b:b2:fd:57:18:07:3e:f6:b0:cb:69:c8:
e1:2a:83:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:21:12 2025 by rpki-client