Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/70593850F04911EF9C173132C4F9AE02.roa
File: 70593850F04911EF9C173132C4F9AE02.roa (raw, json)
Hash identifier: weXRULt3gc4I5adGGJMmu6Sb7y+U1894W2KIGF6bilc=
Subject key identifier: BB:D3:F9:DC:FF:0C:50:18:70:F8:8C:00:57:2E:66:8C:FC:79:11:E5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A774
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/70593850F04911EF9C173132C4F9AE02.roa
Signing time: Mon 24 Feb 2025 06:42:04 +0000
ROA not before: Mon 24 Feb 2025 06:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.48.196.0/22 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.109.0/24 maxlen: 24
103.143.215.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.154.26.0/24 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.69.0/24 maxlen: 24
103.158.111.0/24 maxlen: 24
103.158.180.0/24 maxlen: 24
103.159.137.0/24 maxlen: 24
103.167.157.0/24 maxlen: 24
103.169.58.0/23 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.175.106.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.144.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.228.184.0/22 maxlen: 24
103.236.112.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
192.140.152.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Feb 2025 11:13:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42868 (0xa774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 24 06:42:04 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67bc14bb-44ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:b1:9b:85:3b:68:11:74:69:a7:46:cc:9a:
a1:ac:dd:4b:1b:34:9c:41:c8:50:dc:02:b5:7f:2a:
ec:f2:35:46:59:de:42:41:0d:66:22:1c:06:a6:e3:
72:4b:f9:c8:80:4f:7c:72:93:e9:40:83:ca:e3:74:
a8:85:1b:03:0d:e1:54:c4:b0:64:f2:fc:d9:e5:e1:
15:9d:43:68:db:23:22:23:62:e9:07:b6:f0:08:44:
4e:ec:78:a3:bc:14:0a:e4:39:b4:01:0d:3f:99:a7:
cc:c5:77:c7:01:0b:09:05:d4:2c:fd:9d:23:be:60:
eb:32:ad:38:1b:6a:76:0a:49:d8:d9:d6:28:df:71:
4b:54:c0:62:09:e7:a6:0a:56:c9:30:a1:5a:6b:39:
eb:80:3b:cd:08:8c:c8:40:c8:7b:f7:3b:4c:08:ff:
a3:e6:34:44:c8:23:4c:9a:d0:a2:7f:b3:86:ec:ed:
45:25:37:8a:5e:9c:67:ba:87:23:98:d4:2e:a3:5d:
e6:b4:82:7a:de:19:30:5d:21:60:c3:9b:af:10:f6:
38:f2:b4:9f:db:06:f3:74:53:b7:0b:c4:f2:b5:a9:
f0:32:44:ac:d4:ef:24:de:e8:94:72:90:8d:2f:c3:
8c:1a:38:74:ae:59:41:85:6b:4d:f3:7a:52:c3:f5:
28:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D3:F9:DC:FF:0C:50:18:70:F8:8C:00:57:2E:66:8C:FC:79:11:E5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/70593850F04911EF9C173132C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.47.152.0/24
103.48.196.0/22
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.143.109.0/24
103.143.215.0/24
103.144.112.0/23
103.154.26.0/24
103.155.194.0/23
103.157.69.0/24
103.158.111.0/24
103.158.180.0/24
103.159.137.0/24
103.167.157.0/24
103.169.58.0/23
103.171.8.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.175.106.0/23
103.180.216.0/23
103.192.72.0/22
103.199.92.0/22
103.199.144.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.228.184.0/22
103.236.112.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
192.140.152.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
7c:c6:7e:bf:d7:28:14:bf:3f:35:d9:25:94:64:1e:c5:92:85:
71:46:ee:f6:89:ad:5e:79:cf:e5:1c:df:fd:b8:8c:80:ae:2a:
6d:90:e7:34:42:21:7c:6f:78:54:b0:12:ea:85:9f:dd:03:56:
b8:8f:23:4f:08:72:4f:a1:2d:34:17:f0:b0:2c:c5:7a:4a:9e:
56:7b:41:24:25:d6:95:41:02:d3:65:4b:31:84:9c:79:70:39:
ac:9e:49:8b:35:d7:6f:07:ea:70:cc:36:9c:9b:9b:77:c5:17:
c2:14:15:ce:f9:d8:ad:d6:cd:6e:3e:d9:57:3a:f2:20:dc:fe:
27:2e:43:81:ca:9a:ce:a5:7e:4f:51:6d:f3:34:cf:ac:9d:62:
b2:9e:ce:18:fc:ae:78:1a:41:e5:1a:54:dd:47:ba:f2:86:8b:
c4:8a:87:80:2b:4e:6e:b8:3e:01:e1:d1:66:40:ba:32:99:56:
76:94:a5:d4:55:60:fd:26:09:42:d0:41:f7:3b:bb:00:da:d0:
1e:c4:a0:91:d7:de:8a:e3:14:9a:f1:a7:66:64:60:ce:17:5c:
99:e8:8f:38:47:91:bc:43:18:a2:30:07:16:31:bd:52:f5:78:
54:ca:d7:b5:61:18:87:4e:e3:12:93:ea:bd:34:43:d4:67:ea:
8e:76:d5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:57:48 2025 by rpki-client