Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/B4DF66BA809F11E7B741FD2EC4F9AE02.roa
File: B4DF66BA809F11E7B741FD2EC4F9AE02.roa (raw, json)
Hash identifier: WkaE0CXeXaRttmyFDWWMPFZDaH+bNjuHUToZw9FrDRc=
Subject key identifier: EB:21:D1:29:CA:78:4D:7C:FB:2D:D4:1B:03:40:06:9B:7D:45:A8:D3
Certificate issuer: /CN=A914C725/serialNumber=ED17D1BE3D5711C6C98C8CCC59AAF737E865C384
Certificate serial: 190B
Authority key identifier: ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/B4DF66BA809F11E7B741FD2EC4F9AE02.roa
Signing time: Mon 03 Mar 2025 21:22:59 +0000
ROA not before: Mon 03 Mar 2025 21:22:59 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 56286
IP address blocks: 103.29.56.0/22 maxlen: 22
103.29.56.0/24 maxlen: 24
103.29.57.0/24 maxlen: 24
103.29.58.0/24 maxlen: 24
103.29.59.0/24 maxlen: 24
103.106.166.0/23 maxlen: 23
103.106.166.0/24 maxlen: 24
103.106.167.0/24 maxlen: 24
2403:1300::/32 maxlen: 32
2403:1300::/36 maxlen: 36
2403:1300:100::/40 maxlen: 40
2403:1300:100::/48 maxlen: 48
2403:1300:101::/48 maxlen: 48
2403:1300:102::/48 maxlen: 48
2403:1300:111::/48 maxlen: 48
2403:1300:113::/48 maxlen: 48
2403:1300:121::/48 maxlen: 48
2403:1300:122::/48 maxlen: 48
2403:1300:123::/48 maxlen: 48
2403:1300:131::/48 maxlen: 48
2403:1300:200::/40 maxlen: 40
2403:1300:201::/48 maxlen: 48
2403:1300:202::/48 maxlen: 48
2403:1300:211::/48 maxlen: 48
2403:1300:221::/48 maxlen: 48
2403:1300:222::/48 maxlen: 48
2403:1300:223::/48 maxlen: 48
2403:1300:231::/48 maxlen: 48
2403:1300:300::/40 maxlen: 40
2403:1300:301::/48 maxlen: 48
2403:1300:302::/48 maxlen: 48
2403:1300:311::/48 maxlen: 48
2403:1300:1000::/36 maxlen: 36
2403:1300:2000::/36 maxlen: 36
2403:1300:3000::/36 maxlen: 36
2403:1300:8000::/36 maxlen: 36
2403:1300:beef::/48 maxlen: 48
2403:1300:f000::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6411 (0x190b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C725
Validity
Not Before: Mar 3 21:22:59 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67c61db3-f8ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7c:c2:6b:1c:de:26:5a:4c:df:95:2f:3a:04:
1c:5e:fa:ab:fa:f0:e1:7a:a8:33:bf:48:d7:4d:d9:
3b:b5:48:1c:f8:9f:2b:12:7c:b5:d4:14:1d:b3:d4:
ff:2d:4b:80:6c:9c:96:af:12:f3:9d:82:0c:22:7b:
36:62:0b:2a:aa:c6:86:34:10:1c:29:91:80:b0:c3:
d1:37:b0:fe:8d:1e:d8:0e:3b:cf:ab:9d:a6:df:61:
89:cd:b6:de:96:b5:25:a7:bc:8b:cb:4c:9c:d1:39:
1e:b7:a4:b1:53:73:a2:60:4b:65:b6:e2:ef:ec:2f:
73:6f:f7:f0:f3:fc:42:19:c0:5a:84:97:f4:d7:4c:
a2:73:fe:18:42:2e:59:01:fb:d8:a3:15:c7:53:89:
7b:cb:5e:87:b2:e5:de:d9:3b:f4:f3:37:b8:64:1f:
d1:95:ed:af:12:d3:60:1b:15:d9:03:13:cd:04:fb:
dd:50:51:4a:78:ab:80:f3:aa:03:b9:05:0e:e5:c6:
91:ea:0a:dd:c7:77:d9:4f:81:de:fc:7e:e8:cf:24:
f3:d6:81:3c:b3:41:35:8c:2c:7b:6d:e6:93:2d:86:
19:1b:68:14:34:07:7a:f4:f5:15:c6:5a:ea:bb:b6:
bc:5a:89:b2:3f:7a:63:df:d0:37:fa:11:f4:be:7d:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:21:D1:29:CA:78:4D:7C:FB:2D:D4:1B:03:40:06:9B:7D:45:A8:D3
X509v3 Authority Key Identifier:
keyid:ED:17:D1:BE:3D:57:11:C6:C9:8C:8C:CC:59:AA:F7:37:E8:65:C3:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/7RfRvj1XEcbJjIzMWar3N-hlw4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RfRvj1XEcbJjIzMWar3N-hlw4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C725/31844C36809F11E7BD6A6B2EC4F9AE02/B4DF66BA809F11E7B741FD2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.29.56.0/22
103.106.166.0/23
IPv6:
2403:1300::/32
Signature Algorithm: sha256WithRSAEncryption
45:a9:18:ce:75:cc:66:f6:a2:cb:29:30:71:62:0b:2e:43:ad:
41:5b:15:d6:cc:64:c9:72:0e:e2:4c:c7:18:9a:6c:a3:60:d7:
27:5b:88:ea:3c:cc:ac:c0:7b:79:dc:3b:56:7e:02:d6:b7:19:
6f:af:a8:69:c1:0f:77:82:9a:49:19:ac:da:bc:00:09:59:16:
8b:23:6d:3e:34:99:0d:f1:06:ca:f9:2d:d4:1f:0a:06:5f:3b:
1f:80:00:61:1e:77:ab:84:76:b6:c2:cd:8f:a4:b4:39:0e:2b:
fb:14:db:5c:66:cd:d6:bc:54:33:e1:db:74:49:ed:1c:4a:b9:
50:92:b0:3c:0f:fc:f9:34:e8:fa:fd:10:01:41:49:4d:8a:79:
42:42:1b:28:45:fc:bd:68:b5:db:15:92:fc:dc:3d:c9:73:5e:
b5:0a:86:05:6a:85:8a:4b:bb:0f:63:1c:dd:b2:79:50:21:35:
5f:65:08:62:74:7f:33:4f:db:9f:59:63:2c:bc:d4:39:9b:95:
81:d9:5a:6d:41:90:a6:00:a8:39:62:ba:7b:9e:17:e8:d0:74:
16:93:93:dd:64:1b:23:8c:0d:b7:39:30:47:c7:aa:99:11:6b:
f9:b1:1d:a0:a3:cc:7e:15:73:94:1f:4a:34:47:05:67:b0:7e:
d9:9a:b4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:45:02 2025 by rpki-client