Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0045A176690311EEB8B73872C4F9AE02.roa
File: 0045A176690311EEB8B73872C4F9AE02.roa (raw, json)
Hash identifier: iFZW9zdtkiHOUcVRTyRKqL2wYcWFFPBkJymqSK4hVU0=
Subject key identifier: E5:AA:FB:67:2D:BA:D7:E4:AB:CA:C3:FC:1F:09:F2:F9:28:E8:7D:63
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7BDD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0045A176690311EEB8B73872C4F9AE02.roa
Signing time: Fri 13 Oct 2023 11:01:41 +0000
ROA not before: Fri 13 Oct 2023 11:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149240
IP address blocks: 103.69.239.0/24 maxlen: 24
103.88.56.0/24 maxlen: 24
103.88.57.0/24 maxlen: 24
103.124.172.0/24 maxlen: 24
103.139.191.0/24 maxlen: 24
103.162.196.0/23 maxlen: 24
103.163.15.0/24 maxlen: 24
103.163.166.0/23 maxlen: 24
103.167.172.0/24 maxlen: 24
103.170.1.0/24 maxlen: 24
103.173.41.0/24 maxlen: 24
103.178.176.0/23 maxlen: 24
103.184.40.0/24 maxlen: 24
103.184.236.0/23 maxlen: 24
103.191.203.0/24 maxlen: 24
2001:df0:3bc0::/48 maxlen: 48
2001:df0:9340::/48 maxlen: 48
2001:df2:c3c0::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31709 (0x7bdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Oct 13 11:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65292394-5ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:f0:a2:74:68:86:ff:fb:ba:02:30:4f:c2:
7f:26:e0:a0:3b:c3:47:cf:9e:3b:09:56:59:35:7d:
82:26:fa:4d:93:47:f9:54:0e:63:78:96:90:5a:a9:
5a:de:8b:95:64:86:fc:36:73:eb:8b:cb:20:43:87:
74:6d:28:72:33:be:e6:2c:0c:06:cb:7c:a7:74:ea:
0f:26:81:88:87:32:bc:90:53:ee:e3:e1:03:7f:05:
85:61:fa:14:a4:94:2a:7d:48:7b:a2:ae:62:3f:5c:
d3:9a:c9:9e:8b:ff:44:13:b7:81:02:59:43:27:40:
6f:2b:b8:39:b5:90:80:27:3e:0e:98:b5:d1:c6:8a:
3f:77:b5:25:7a:98:99:4c:96:13:34:77:19:2b:2b:
6f:77:01:1d:c7:6d:b0:92:92:8f:84:b2:12:d0:aa:
80:6d:2f:26:f2:8b:9e:ca:1b:7d:8a:53:1b:f5:51:
a1:5a:80:e8:74:9e:79:01:18:ac:88:82:76:be:85:
f3:d0:21:23:83:16:98:27:fc:87:4d:55:8b:12:10:
aa:dd:f6:e0:21:e1:94:2b:cf:a9:fe:07:31:40:8f:
35:a4:95:37:03:9f:30:7d:b1:32:96:24:9e:b2:f2:
4e:bb:e0:8e:ac:57:55:6a:b0:fe:5d:01:84:74:bf:
1b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AA:FB:67:2D:BA:D7:E4:AB:CA:C3:FC:1F:09:F2:F9:28:E8:7D:63
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0045A176690311EEB8B73872C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.239.0/24
103.88.56.0/23
103.124.172.0/24
103.139.191.0/24
103.162.196.0/23
103.163.15.0/24
103.163.166.0/23
103.167.172.0/24
103.170.1.0/24
103.173.41.0/24
103.178.176.0/23
103.184.40.0/24
103.184.236.0/23
103.191.203.0/24
IPv6:
2001:df0:3bc0::/48
2001:df0:9340::/48
2001:df2:c3c0::/48
Signature Algorithm: sha256WithRSAEncryption
06:3c:c8:a5:80:ab:59:12:b0:2b:28:85:39:5e:42:e9:2c:66:
c5:c2:a2:a8:f0:de:d0:57:ce:6a:d2:c1:e7:ae:df:84:cf:75:
3a:4a:e3:e8:60:9c:be:2e:0f:0e:98:76:20:98:1e:5e:9c:e7:
79:57:89:c8:01:1a:94:85:9f:02:23:54:8e:30:44:6f:0a:d4:
e7:56:c1:b4:50:72:a3:cf:c7:c0:07:73:ce:83:37:1a:4d:d3:
26:8a:cd:54:29:20:50:8d:a4:49:97:9f:a4:c1:5b:7f:f4:83:
d5:ee:6f:39:ea:5a:71:72:51:09:84:70:56:c1:3f:94:16:91:
49:c7:9e:36:22:85:19:2f:b2:98:ab:d8:12:49:67:e7:51:18:
92:56:2c:ac:05:69:16:ed:c1:11:ec:d4:b4:1d:5c:3e:36:22:
73:d6:dc:3d:1b:66:12:b6:7e:81:f8:7e:ec:1f:0c:1b:7f:e4:
41:df:98:21:83:c7:19:d4:66:e4:39:be:ac:2a:de:af:83:18:
16:5e:9f:21:8e:68:19:7d:77:22:84:23:fc:0c:25:ac:6a:d0:
d8:59:80:85:11:4f:27:af:2c:76:5d:12:d6:ba:72:60:68:35:
13:f7:67:61:f4:fb:87:1a:c9:19:d9:62:53:51:fc:9c:50:2f:
77:17:b6:52
-----BEGIN CERTIFICATE-----
MIIF5DCCBMygAwIBAgICe90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMxMDEzMTEwMTQxWhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTI5MjM5NC01YWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwh/wonRohv/7ugIwT8J/JuCgO8NHz547CVZZNX2CJvpNk0f5VA5jeJaQWqla
3ouVZIb8NnPri8sgQ4d0bShyM77mLAwGy3yndOoPJoGIhzK8kFPu4+EDfwWFYfoU
pJQqfUh7oq5iP1zTmsmei/9EE7eBAllDJ0BvK7g5tZCAJz4OmLXRxoo/d7UlepiZ
TJYTNHcZKytvdwEdx22wkpKPhLIS0KqAbS8m8oueyht9ilMb9VGhWoDodJ55ARis
iIJ2voXz0CEjgxaYJ/yHTVWLEhCq3fbgIeGUK8+p/gcxQI81pJU3A58wfbEyliSe
svJOu+COrFdVarD+XQGEdL8bgQIDAQABo4IDCDCCAwQwHQYDVR0OBBYEFOWq+2ct
utfkq8rD/B8J8vko6H1jMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMDA0NUExNzY2
OTAzMTFFRUI4QjczODcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgZEGCCsGAQUFBwEHAQH/
BIGBMH8wWgQCAAEwVAMEAGdF7wMEAWdYOAMEAGd8rAMEAGeLvwMEAWeixAMEAGej
DwMEAWejpgMEAGenrAMEAGeqAQMEAGetKQMEAWeysAMEAGe4KAMEAWe47AMEAGe/
yzAhBAIAAjAbAwcAIAEN8DvAAwcAIAEN8JNAAwcAIAEN8sPAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGPMilgKtZErArKIU5XkLpLGbFwqKo8N7QV85q0sHnrt+Ez3U6SuPo
YJy+Lg8OmHYgmB5enOd5V4nIARqUhZ8CI1SOMERvCtTnVsG0UHKjz8fAB3POgzca
TdMmis1UKSBQjaRJl5+kwVt/9IPV7m856lpxclEJhHBWwT+UFpFJx542IoUZL7KY
q9gSSWfnURiSViysBWkW7cER7NS0HVw+NiJz1tw9G2YStn6B+H7sHwwbf+RB35gh
g8cZ1GbkOb6sKt6vgxgWXp8hjmgZfXcihCP8DCWsatDYWYCFEU8nryx2XRLWunJg
aDUT92dh9PuHGskZ2WJTUfycUC93F7ZS
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:51 2025 by rpki-client