Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAA7F246E51211EF9D2A2518C4F9AE02.roa
File: EAA7F246E51211EF9D2A2518C4F9AE02.roa (raw, json)
Hash identifier: 4s3s720E6fLJrxa1WZhI1vTsTzIUVw+WrW+Yux/TYbg=
Subject key identifier: 3B:CB:28:B0:9C:04:7B:5D:92:AF:4D:C4:08:94:1B:77:92:00:05:C5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A537
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAA7F246E51211EF9D2A2518C4F9AE02.roa
Signing time: Fri 07 Feb 2025 06:36:18 +0000
ROA not before: Fri 07 Feb 2025 06:36:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.229.200.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
43.239.112.0/22 maxlen: 24
43.248.58.0/23 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.26.169.0/24 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.40.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.139.88.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.109.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.144.188.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.157.162.0/23 maxlen: 24
103.158.180.0/24 maxlen: 24
103.159.137.0/24 maxlen: 24
103.164.0.0/23 maxlen: 24
103.167.157.0/24 maxlen: 24
103.171.8.0/23 maxlen: 24
103.171.78.0/24 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.42.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.182.66.0/23 maxlen: 24
103.190.231.0/24 maxlen: 24
103.192.72.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.199.128.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.224.50.0/23 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.236.112.0/22 maxlen: 24
103.242.236.0/22 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.64.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 07 Feb 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42295 (0xa537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 7 06:36:18 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67a5a9e2-478b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:a2:94:f7:a9:65:bb:9b:21:2b:c4:95:aa:
9c:cc:4e:7b:f1:88:dc:a0:85:6e:39:66:a4:f5:84:
ea:7c:ae:66:31:64:68:5c:10:25:66:43:c8:31:1b:
49:b0:87:b5:8c:bd:2a:b1:a3:c5:84:d3:4f:e5:56:
5e:76:a1:9d:24:d1:c6:dd:4a:45:4c:8f:d1:89:f5:
e8:d0:fb:26:4d:22:df:ab:45:53:36:3a:50:cc:02:
98:b7:7e:e2:00:ff:99:25:c8:4f:c8:80:2c:7f:b8:
74:de:b7:ca:9e:ef:46:16:90:07:65:f7:47:de:11:
35:73:e7:19:59:06:6b:3d:e9:c1:2f:72:71:1b:2a:
a5:49:42:b2:70:2f:48:21:a3:f5:62:36:c3:ec:2a:
a4:5d:0b:02:de:90:9e:e1:3c:f4:80:90:e7:c1:02:
18:89:9c:c3:7e:df:73:21:c9:8b:f9:0e:7c:78:0f:
8c:64:14:55:a0:78:62:c4:83:06:c9:3b:fd:dc:ea:
a4:10:b3:02:2a:15:48:26:78:4e:a4:6e:e7:6f:ea:
d8:17:88:18:7b:92:09:3d:fa:39:de:89:eb:ed:2a:
98:64:ef:31:a6:46:16:f4:f2:81:45:7f:b3:1f:c3:
f7:f8:15:62:90:7f:af:cc:81:c4:38:f9:c9:2b:18:
f2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CB:28:B0:9C:04:7B:5D:92:AF:4D:C4:08:94:1B:77:92:00:05:C5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAA7F246E51211EF9D2A2518C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.229.200.0/22
43.231.116.0/22
43.239.112.0/22
43.248.58.0/23
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.26.169.0/24
103.27.168.0/24
103.27.170.0/23
103.41.40.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.132.203.0/24
103.133.116.0/24
103.139.88.0/23
103.142.64.0/23
103.143.109.0/24
103.144.112.0/23
103.144.188.0/23
103.153.208.0/23
103.155.194.0/23
103.157.162.0/23
103.158.180.0/24
103.159.137.0/24
103.164.0.0/23
103.167.157.0/24
103.171.8.0/23
103.171.78.0/24
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.42.0/23
103.180.216.0/23
103.182.66.0/23
103.190.231.0/24
103.192.72.0/22
103.199.92.0/22
103.199.128.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.224.50.0/23
103.226.224.0/22
103.228.172.0/22
103.236.112.0/22
103.242.236.0/22
103.254.200.0/22
137.59.64.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
220.158.140.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
9c:fa:e5:f5:79:4b:d7:7a:91:f2:21:df:b7:91:17:de:77:4f:
65:27:e6:62:c7:1c:da:3a:5e:ca:bb:93:81:f0:49:6e:37:48:
12:ae:1e:ae:9e:8a:d0:57:ef:41:8a:eb:4f:58:50:0b:bf:7d:
13:ae:ec:7e:fe:83:e0:0a:ce:77:1e:2d:3f:0b:eb:03:d5:2d:
58:4a:d7:bd:46:b6:2e:78:f2:c8:3c:b2:ab:9c:bf:8b:88:f3:
62:ad:da:93:98:5a:51:19:a4:37:99:8b:9d:e0:69:ac:82:79:
5b:7e:d8:2f:44:ba:27:cd:26:dc:0e:5e:fb:9b:4a:90:59:57:
38:fe:08:1c:68:ff:b4:6a:10:13:b1:0d:df:cf:b5:28:a9:ba:
58:bc:af:e9:de:30:8a:8f:ee:bb:26:ed:a9:85:66:32:97:1f:
c7:aa:4b:39:30:97:61:6e:9a:a2:fb:8c:be:bd:9c:e3:29:27:
2c:ff:84:04:01:09:65:67:32:f2:ad:d4:4d:33:fc:1e:a2:b4:
dc:f1:63:2a:37:06:73:80:a9:2e:99:55:10:36:93:fe:72:4c:
e3:16:1a:80:5a:21:69:41:64:47:c9:e6:5e:4a:43:fc:61:d0:
8d:47:ec:7f:ee:b9:04:79:bc:ab:e2:3d:59:ae:eb:d3:95:70:
c9:b5:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 18:01:26 2025 by rpki-client