Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A59BF8D43ABB11EF9C13D323C4F9AE02.roa
File: A59BF8D43ABB11EF9C13D323C4F9AE02.roa (raw, json)
Hash identifier: rau1c+80JUjuw59DipH0pTN0g1OnO5MwrEFu3v4XAKU=
Subject key identifier: 80:DC:BE:3B:A3:DE:DF:E1:5F:46:01:11:C5:B2:BF:92:11:64:1A:78
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 93F4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A59BF8D43ABB11EF9C13D323C4F9AE02.roa
Signing time: Fri 05 Jul 2024 10:45:09 +0000
ROA not before: Fri 05 Jul 2024 10:45:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133661
IP address blocks: 101.0.32.0/22 maxlen: 24
101.0.37.0/24 maxlen: 24
103.142.198.0/24 maxlen: 24
103.167.212.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.167.238.0/23 maxlen: 24
103.168.32.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.168.78.0/24 maxlen: 24
103.169.242.0/23 maxlen: 24
103.170.36.0/23 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.84.0/23 maxlen: 24
103.171.110.0/23 maxlen: 24
103.171.174.0/23 maxlen: 24
103.173.98.0/23 maxlen: 24
103.176.139.0/24 maxlen: 24
103.177.226.0/23 maxlen: 24
103.178.64.0/23 maxlen: 24
103.178.202.0/23 maxlen: 24
103.179.10.0/23 maxlen: 24
103.179.102.0/23 maxlen: 24
103.180.214.0/23 maxlen: 24
103.180.236.0/23 maxlen: 24
103.180.238.0/23 maxlen: 24
103.181.4.0/23 maxlen: 24
103.181.56.0/23 maxlen: 24
103.181.84.0/23 maxlen: 24
103.181.86.0/23 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.114.0/23 maxlen: 24
103.181.150.0/23 maxlen: 24
103.181.154.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
103.181.198.0/23 maxlen: 24
103.181.212.0/24 maxlen: 24
103.183.30.0/23 maxlen: 24
103.183.32.0/23 maxlen: 24
103.183.34.0/23 maxlen: 24
103.183.216.0/23 maxlen: 24
103.187.92.0/23 maxlen: 24
103.187.96.0/23 maxlen: 24
103.189.82.0/23 maxlen: 24
203.76.178.0/24 maxlen: 24
203.76.180.0/24 maxlen: 24
203.76.181.0/24 maxlen: 24
203.76.188.0/24 maxlen: 24
203.76.190.0/24 maxlen: 24
203.76.191.0/24 maxlen: 24
2001:df2:e200::/48 maxlen: 48
2001:df2:e600::/48 maxlen: 48
2400:7b20::/32 maxlen: 32
2404:7c80::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 05 Jul 2024 10:48:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37876 (0x93f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 5 10:45:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6687ceb4-1a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:18:2c:bd:91:5d:b5:64:a6:d8:75:f8:ae:97:
36:94:6f:f3:8b:7f:19:0e:ed:81:d2:0d:e5:b2:12:
02:65:2d:82:dc:78:7f:12:f5:e7:93:7e:b3:f6:09:
77:88:cc:a8:8b:cc:ec:7d:38:f7:e2:39:71:c8:77:
1c:80:da:72:e5:15:42:05:b1:ab:a1:f3:10:bf:bc:
7a:8a:e6:a8:75:e2:c8:8c:6b:9e:26:1f:7d:68:85:
85:9e:ad:1d:d8:b7:3d:e7:a7:44:14:f3:19:bf:ea:
26:af:74:04:7c:5e:04:fe:04:51:e6:d9:ca:ef:db:
33:d0:0b:bb:a0:b6:3a:89:ac:70:66:3f:77:99:80:
24:60:f3:1c:da:9f:c0:d8:cd:c9:9c:a1:34:c6:91:
75:3f:0d:a7:f4:65:87:d3:32:89:36:0c:c5:6f:62:
01:ca:f6:da:b4:b6:24:a8:c2:7c:9b:5f:11:5e:26:
c8:b9:bf:c7:33:72:13:d9:a3:2b:f1:f7:ba:fe:17:
19:7c:8b:03:b5:fb:96:dd:25:8a:96:69:f7:ab:70:
64:99:4d:87:c6:8f:94:0c:dc:90:9e:d0:8e:2b:19:
99:18:2d:ed:b1:86:ac:8d:07:7a:1c:9c:9f:e4:68:
df:7e:08:95:6b:c0:cf:16:6f:ba:31:3a:80:7d:b8:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DC:BE:3B:A3:DE:DF:E1:5F:46:01:11:C5:B2:BF:92:11:64:1A:78
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A59BF8D43ABB11EF9C13D323C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.0.32.0/22
101.0.37.0/24
103.142.198.0/24
103.167.212.0/23
103.167.224.0/23
103.167.238.0/23
103.168.32.0/23
103.168.60.0/23
103.168.78.0/24
103.169.242.0/23
103.170.36.0/22
103.170.84.0/23
103.171.110.0/23
103.171.174.0/23
103.173.98.0/23
103.176.139.0/24
103.177.226.0/23
103.178.64.0/23
103.178.202.0/23
103.179.10.0/23
103.179.102.0/23
103.180.214.0/23
103.180.236.0/22
103.181.4.0/23
103.181.56.0/23
103.181.84.0/22
103.181.110.0/23
103.181.114.0/23
103.181.150.0/23
103.181.154.0/23
103.181.174.0/23
103.181.198.0/23
103.181.212.0/24
103.183.30.0-103.183.35.255
103.183.216.0/23
103.187.92.0/23
103.187.96.0/23
103.189.82.0/23
203.76.178.0/24
203.76.180.0/23
203.76.188.0/24
203.76.190.0/23
IPv6:
2001:df2:e200::/48
2001:df2:e600::/48
2400:7b20::/32
2404:7c80::/32
Signature Algorithm: sha256WithRSAEncryption
89:c0:0e:ef:22:29:34:54:37:0b:d6:4f:03:5d:55:4d:66:eb:
76:da:fb:94:00:98:5b:10:41:b2:9e:5a:50:39:11:8e:3d:54:
07:80:46:a5:90:ca:c1:2d:fb:58:0f:0b:4a:67:e4:3a:5f:1c:
83:db:4c:47:14:68:69:4c:94:e6:6f:99:cd:4d:57:b8:59:75:
f2:b9:70:fc:e8:7c:1e:c3:3a:65:3a:59:74:fd:e7:55:06:02:
6a:9c:cb:53:ea:b1:90:12:e3:21:ca:74:6f:7d:2d:c6:6e:bb:
1f:0b:ff:27:ee:21:42:39:e8:03:93:21:01:a5:ac:18:88:8d:
43:97:09:86:3d:39:ba:b6:d7:3d:9c:fb:33:a0:33:e3:4e:b8:
f4:20:fc:95:bf:43:f5:3e:77:cc:59:0d:a8:a3:77:4b:4e:96:
e5:bf:76:75:02:8d:03:43:a4:e8:88:60:2e:7d:30:24:08:08:
00:51:5a:47:f4:80:73:5d:e5:b2:c3:b3:37:49:b6:9f:47:83:
1d:69:fa:67:22:9c:f4:72:22:3a:a5:e6:82:4f:cd:59:67:4b:
27:0c:4d:93:cd:fc:0b:11:96:f9:d1:b9:7a:c1:ea:21:15:00:
c0:03:19:b4:70:6a:6f:09:19:79:4a:60:b5:09:4c:0b:ce:4f:
28:2f:f8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:12:23 2025 by rpki-client