Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/490CDADA42F211EBB34A1A60C4F9AE02.roa
File: 490CDADA42F211EBB34A1A60C4F9AE02.roa (raw, json)
Hash identifier: j5L+2E8hgdO5g2Py+e+3EamQHHUmrpaxumPJliNw/Wc=
Subject key identifier: D7:C0:37:92:47:18:4D:6F:43:B7:80:18:35:4B:E9:EA:92:4A:BB:56
Certificate issuer: /CN=A9116BB8/serialNumber=8AE9CDE10BE0B77F091B0D38EBC1967C8BC0919E
Certificate serial: 06D6
Authority key identifier: 8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/490CDADA42F211EBB34A1A60C4F9AE02.roa
Signing time: Fri 27 Dec 2024 06:41:14 +0000
ROA not before: Fri 27 Dec 2024 06:41:14 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 138995
IP address blocks: 45.125.216.0/24 maxlen: 24
45.125.217.0/24 maxlen: 24
45.125.218.0/24 maxlen: 24
45.125.219.0/24 maxlen: 24
103.86.64.0/24 maxlen: 24
103.86.65.0/24 maxlen: 24
103.86.66.0/24 maxlen: 24
103.86.67.0/24 maxlen: 24
103.93.46.0/24 maxlen: 24
103.98.112.0/24 maxlen: 24
103.98.114.0/24 maxlen: 24
103.98.115.0/24 maxlen: 24
103.108.185.0/24 maxlen: 24
103.142.244.0/24 maxlen: 24
103.142.245.0/24 maxlen: 24
103.194.104.0/24 maxlen: 24
103.194.105.0/24 maxlen: 24
103.194.106.0/24 maxlen: 24
103.194.107.0/24 maxlen: 24
116.204.176.0/24 maxlen: 24
116.204.177.0/24 maxlen: 24
116.204.178.0/24 maxlen: 24
116.204.179.0/24 maxlen: 24
2001:df1:5f80::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1750 (0x6d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116BB8
Validity
Not Before: Dec 27 06:41:14 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=676e4c0a-b5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cb:6c:b6:02:ed:35:5e:33:e8:4a:2e:0e:99:
90:fb:24:e8:47:92:96:a2:40:21:4c:37:bf:e7:4e:
b6:f2:c8:34:ee:c3:b1:9e:ed:df:fe:6c:27:ce:03:
af:4c:4c:54:97:d4:5d:54:c2:28:3f:4a:a6:e9:0c:
dd:05:59:84:0e:5a:9f:ba:ed:48:8a:95:ad:10:68:
60:db:f7:2e:ae:97:6a:20:92:aa:4c:c5:4d:d4:6b:
c8:37:a4:7f:45:58:8d:ad:70:8b:ed:fc:93:b0:14:
59:c6:4b:95:6d:43:c7:17:d9:d8:67:d1:6c:24:3e:
25:84:92:90:65:56:5d:41:86:3f:a9:9a:31:db:e5:
6a:92:f1:4b:31:82:ae:27:b3:8e:27:33:56:cd:f9:
f7:e3:60:07:fe:bb:90:1c:ad:da:0f:f1:b6:0e:40:
a5:e3:b2:5e:58:59:0b:0a:e0:24:2c:40:34:a5:60:
45:95:0b:f6:4f:05:ec:8c:5d:21:0d:f8:5c:bd:31:
a4:ae:a7:f4:c2:d1:5d:6d:60:77:cd:d9:a9:5f:f6:
c7:f2:ca:97:b6:1d:f4:07:d9:6b:ea:f9:bd:db:32:
d6:cb:a2:18:7b:1a:5e:74:ee:c7:d6:e9:af:fb:09:
86:9a:c8:be:39:2b:6d:ae:5f:85:e4:4b:43:34:a3:
d6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C0:37:92:47:18:4D:6F:43:B7:80:18:35:4B:E9:EA:92:4A:BB:56
X509v3 Authority Key Identifier:
keyid:8A:E9:CD:E1:0B:E0:B7:7F:09:1B:0D:38:EB:C1:96:7C:8B:C0:91:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/iunN4Qvgt38JGw0468GWfIvAkZ4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iunN4Qvgt38JGw0468GWfIvAkZ4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116BB8/39DCF75442F011EB8A09C75AC4F9AE02/490CDADA42F211EBB34A1A60C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.125.216.0/22
103.86.64.0/22
103.93.46.0/24
103.98.112.0/24
103.98.114.0/23
103.108.185.0/24
103.142.244.0/23
103.194.104.0/22
116.204.176.0/22
IPv6:
2001:df1:5f80::/48
Signature Algorithm: sha256WithRSAEncryption
71:c1:87:ba:77:c4:3f:6a:04:c7:ae:f2:f0:97:b3:b4:4a:1b:
b5:a7:10:92:be:0b:71:bc:97:f3:8b:3d:ba:4c:b0:c3:03:d1:
2d:80:6d:99:98:cb:45:4a:5a:e7:bd:ca:6f:65:a4:0e:ee:40:
a0:70:48:ae:ba:9c:a7:1a:0b:0f:22:2e:5e:e5:8e:35:63:9c:
83:36:b6:5e:27:6f:71:3b:81:fd:84:7f:43:36:7f:ee:df:13:
71:06:f4:d1:c3:ee:8a:d2:58:e6:2c:96:0c:be:a6:01:24:8a:
8d:18:0d:1d:58:d3:82:60:ad:44:16:63:d6:34:50:81:fb:44:
68:41:a2:38:bb:bb:1d:d6:ea:9a:35:14:1c:91:5a:70:b7:e9:
3f:86:3f:a3:78:68:9e:5d:63:da:80:e8:6b:ab:ce:ab:92:81:
e6:ec:b4:cc:57:01:42:06:8e:50:74:3e:78:84:2e:e1:db:5a:
09:24:70:ea:5b:9d:57:01:5a:ed:96:b6:93:dd:31:cc:cd:69:
17:db:ae:8a:d6:56:7a:1b:e9:30:8a:83:21:4b:c8:1e:20:75:
26:02:c7:a4:8d:82:8c:40:73:3c:a9:57:9e:91:2d:eb:32:f1:
aa:1e:de:0e:bf:1f:ee:f5:e8:ab:b3:41:c5:a9:f7:48:20:21:
81:06:20:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:17:56 2025 by rpki-client