Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A9660E842A5011F0B0AAD273C4F9AE02.roa
File: A9660E842A5011F0B0AAD273C4F9AE02.roa (raw, json)
Hash identifier: vECzB3jxcZDbCEgBIU1n1VgMIpl5GRvkkVNr0qslWws=
Subject key identifier: 7B:B4:BC:CB:3B:AC:95:91:0B:57:C6:AA:E0:F9:C7:A1:74:B5:3E:CB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: BAD3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A9660E842A5011F0B0AAD273C4F9AE02.roa
Signing time: Tue 13 May 2025 12:46:15 +0000
ROA not before: Tue 13 May 2025 12:46:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58678
IP address blocks: 43.241.28.0/22 maxlen: 24
43.241.128.0/22 maxlen: 24
43.241.132.0/22 maxlen: 24
43.242.208.0/24 maxlen: 24
43.242.209.0/24 maxlen: 24
43.242.210.0/24 maxlen: 24
43.242.211.0/24 maxlen: 24
43.242.228.0/22 maxlen: 24
45.64.84.0/22 maxlen: 24
45.114.192.0/22 maxlen: 24
45.117.0.0/22 maxlen: 24
45.127.120.0/22 maxlen: 24
45.250.248.0/24 maxlen: 24
45.250.249.0/24 maxlen: 24
45.250.250.0/24 maxlen: 24
45.251.236.0/24 maxlen: 24
45.251.237.0/24 maxlen: 24
45.251.238.0/24 maxlen: 24
45.251.239.0/24 maxlen: 24
103.14.232.0/22 maxlen: 24
103.17.12.0/23 maxlen: 24
103.26.52.0/22 maxlen: 22
103.26.52.0/24 maxlen: 24
103.26.53.0/24 maxlen: 24
103.26.54.0/24 maxlen: 24
103.26.55.0/24 maxlen: 24
103.26.56.0/22 maxlen: 24
103.39.251.0/24 maxlen: 24
103.42.160.0/22 maxlen: 24
103.48.56.0/23 maxlen: 24
103.48.58.0/24 maxlen: 24
103.48.59.0/24 maxlen: 24
103.48.100.0/22 maxlen: 24
103.57.96.0/23 maxlen: 24
103.59.212.0/22 maxlen: 24
103.69.238.0/24 maxlen: 24
103.74.236.0/22 maxlen: 24
103.77.152.0/22 maxlen: 23
103.77.152.0/23 maxlen: 24
103.77.154.0/24 maxlen: 24
103.89.40.0/22 maxlen: 24
103.111.132.0/22 maxlen: 24
103.112.32.0/24 maxlen: 24
103.112.33.0/24 maxlen: 24
103.112.34.0/24 maxlen: 24
103.112.35.0/24 maxlen: 24
103.117.184.0/24 maxlen: 24
103.117.187.0/24 maxlen: 24
103.137.152.0/22 maxlen: 24
103.148.207.0/24 maxlen: 24
103.153.151.0/24 maxlen: 24
103.166.112.0/23 maxlen: 24
103.168.62.0/24 maxlen: 24
103.168.63.0/24 maxlen: 24
103.173.208.0/23 maxlen: 24
103.174.30.0/24 maxlen: 24
103.174.38.0/24 maxlen: 24
103.181.209.0/24 maxlen: 24
103.185.11.0/24 maxlen: 24
103.204.119.0/24 maxlen: 24
103.209.18.0/24 maxlen: 24
103.209.19.0/24 maxlen: 24
103.215.114.0/23 maxlen: 24
103.216.144.0/22 maxlen: 24
103.218.100.0/22 maxlen: 24
103.219.164.0/24 maxlen: 24
103.219.165.0/24 maxlen: 24
103.219.166.0/24 maxlen: 24
103.219.167.0/24 maxlen: 24
103.220.80.0/22 maxlen: 24
103.220.212.0/22 maxlen: 24
103.226.0.0/22 maxlen: 24
103.226.4.0/22 maxlen: 24
103.226.28.0/22 maxlen: 24
124.108.16.0/22 maxlen: 24
163.223.244.0/23 maxlen: 24
203.134.248.0/23 maxlen: 24
2001:df6:f180::/48 maxlen: 48
2404:bd00::/48 maxlen: 48
2404:bd00:1::/48 maxlen: 48
2404:bd00:2::/48 maxlen: 48
2404:bd00:3::/48 maxlen: 48
2404:bd00:4::/48 maxlen: 48
2404:bd00:5::/48 maxlen: 48
2404:bd00:6::/48 maxlen: 48
2404:bd00:7::/48 maxlen: 48
2404:bd00:8::/48 maxlen: 48
2404:bd00:a::/48 maxlen: 48
2404:bd00:b::/48 maxlen: 48
2404:bd00:c::/48 maxlen: 48
2404:bd00:d::/48 maxlen: 48
2404:bd00:e::/48 maxlen: 48
2404:bd00:f::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 May 2025 12:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47827 (0xbad3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 13 12:46:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68233f17-2b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0d:a8:2c:f9:4d:98:c3:a4:88:df:6d:bd:28:
16:26:04:32:8c:86:46:83:06:a6:f6:2b:da:5d:17:
04:69:44:42:13:1e:a7:2a:0f:53:e8:66:2f:c5:9a:
d2:f4:f6:e0:1f:16:16:17:1e:c9:85:65:02:5c:f5:
8a:06:95:dd:84:81:81:68:49:ed:33:af:1d:7f:e7:
e3:b6:3a:49:a0:c9:4a:19:3c:55:d0:d2:b0:2d:f8:
36:59:06:61:53:0d:7d:ab:e9:c5:20:53:59:dc:25:
63:f2:d2:01:03:a4:eb:aa:ad:9c:e3:9e:31:06:01:
4f:74:e8:45:01:1c:eb:87:53:51:78:56:03:ec:a8:
26:fe:31:62:d9:d2:98:72:09:36:0d:20:8d:fe:79:
f3:cb:10:82:ff:5e:16:b1:df:40:8d:6d:26:ac:23:
d3:8e:d1:fb:65:7d:c7:2c:91:84:1a:7e:6d:7f:9d:
06:48:7e:bd:de:80:01:d8:bd:87:4e:bb:33:6e:8a:
c7:f5:a4:1b:6d:cc:c4:75:73:15:57:a7:bf:7c:e6:
fe:58:58:a2:e2:28:a4:28:1f:3f:43:c7:b0:ba:37:
f9:ab:a2:1e:2c:3c:dd:2c:c7:c4:9c:92:42:a9:de:
fa:29:41:85:d6:59:e9:d4:71:e4:d1:b5:26:24:69:
7f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B4:BC:CB:3B:AC:95:91:0B:57:C6:AA:E0:F9:C7:A1:74:B5:3E:CB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A9660E842A5011F0B0AAD273C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.241.28.0/22
43.241.128.0/21
43.242.208.0/22
43.242.228.0/22
45.64.84.0/22
45.114.192.0/22
45.117.0.0/22
45.127.120.0/22
45.250.248.0-45.250.250.255
45.251.236.0/22
103.14.232.0/22
103.17.12.0/23
103.26.52.0-103.26.59.255
103.39.251.0/24
103.42.160.0/22
103.48.56.0/22
103.48.100.0/22
103.57.96.0/23
103.59.212.0/22
103.69.238.0/24
103.74.236.0/22
103.77.152.0/22
103.89.40.0/22
103.111.132.0/22
103.112.32.0/22
103.117.184.0/24
103.117.187.0/24
103.137.152.0/22
103.148.207.0/24
103.153.151.0/24
103.166.112.0/23
103.168.62.0/23
103.173.208.0/23
103.174.30.0/24
103.174.38.0/24
103.181.209.0/24
103.185.11.0/24
103.204.119.0/24
103.209.18.0/23
103.215.114.0/23
103.216.144.0/22
103.218.100.0/22
103.219.164.0/22
103.220.80.0/22
103.220.212.0/22
103.226.0.0/21
103.226.28.0/22
124.108.16.0/22
163.223.244.0/23
203.134.248.0/23
IPv6:
2001:df6:f180::/48
2404:bd00::-2404:bd00:8:ffff:ffff:ffff:ffff:ffff
2404:bd00:a::-2404:bd00:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
07:1b:c6:42:f9:47:27:fc:34:17:8c:37:ae:f4:b4:e3:98:61:
46:e7:e5:3f:62:3e:17:a9:78:d1:0e:ad:88:70:d4:f7:7b:55:
08:bd:ec:8a:68:5b:57:8b:1b:70:39:13:b1:70:0a:53:98:0a:
9a:4f:3f:5a:08:3e:44:65:46:e9:3e:ff:f5:66:03:d3:12:0f:
9f:41:65:64:1a:cf:f9:bc:ed:84:7f:9d:d0:19:e0:18:94:7f:
2a:da:75:03:a8:0b:19:13:ea:2f:57:48:12:5c:25:07:ba:b4:
ce:71:9d:1d:c7:ff:e6:b8:ef:5d:53:6a:90:92:fd:70:b3:f4:
d8:7b:9b:b9:77:0a:09:77:0c:5c:77:c3:3d:51:cd:c9:32:68:
68:e7:a8:67:c3:2a:cf:b4:7b:97:a2:39:e0:8d:3c:ea:c8:64:
c6:7d:c2:b3:a5:0f:28:b3:67:9f:f2:1e:26:c0:8f:06:5b:59:
69:d7:1a:de:90:8e:72:fe:e0:00:d3:7e:0d:40:61:cc:9e:f3:
7e:8d:da:8d:cc:96:0d:e1:56:80:bd:a4:2e:a4:69:25:23:8e:
9b:d3:b6:e9:7b:2c:1e:e4:83:f0:0b:dc:af:1d:b2:64:24:5c:
57:98:c6:f6:8b:92:66:95:d3:37:3a:07:4d:18:90:81:76:b2:
0b:cc:6f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 17:44:55 2025 by rpki-client