Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0197076C7AAD11ED93CEF115C4F9AE02.roa
File: 0197076C7AAD11ED93CEF115C4F9AE02.roa (raw, json)
Hash identifier: ZxHLR3I1WAOukAihBlUbdXUzoLMoqeMq10vAtkwv070=
Subject key identifier: 7C:CA:0E:E7:3E:F9:84:AB:A4:64:F8:35:5D:94:A6:9C:DC:0F:9F:BB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6634
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0197076C7AAD11ED93CEF115C4F9AE02.roa
Signing time: Mon 06 Mar 2023 11:41:44 +0000
ROA not before: Mon 06 Mar 2023 11:41:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138245
IP address blocks: 103.127.130.0/23 maxlen: 23
103.127.131.0/24 maxlen: 24
103.158.216.0/23 maxlen: 23
103.158.217.0/24 maxlen: 24
103.159.42.0/23 maxlen: 24
103.174.242.0/23 maxlen: 24
103.176.16.0/23 maxlen: 23
103.176.16.0/24 maxlen: 24
103.181.160.0/23 maxlen: 24
2001:df5:f980::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26164 (0x6634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 6 11:41:44 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6405d178-5b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4b:04:4b:f1:58:e1:7f:38:fa:bc:2d:81:06:
e1:5d:69:46:b8:ad:55:4b:81:df:14:d8:9d:d6:90:
c8:38:54:d4:da:8f:dc:41:c7:40:5f:31:a1:07:43:
e8:91:c6:b0:d4:0b:96:87:84:32:b7:74:81:1e:20:
f4:fd:16:46:c7:de:ba:23:8c:54:db:d6:9b:6c:f5:
74:43:80:12:c4:3b:15:b7:99:07:ac:25:2b:aa:80:
56:62:b4:4a:37:f9:b3:f1:31:92:94:2e:72:23:42:
7f:4a:b8:0b:a1:9e:88:d6:f2:68:99:b3:1c:07:a3:
4a:93:58:83:0f:7d:bc:d8:64:0b:2b:0e:b4:df:6e:
04:ec:11:10:4c:19:ab:ce:6d:79:e8:f7:2b:72:c4:
bc:56:2d:25:01:c8:3c:f2:5f:bd:57:90:30:fb:2b:
53:1c:23:c4:fd:4f:ee:bc:b3:e9:e7:48:a7:5a:a8:
3b:c8:f7:8c:04:96:10:55:71:d8:4f:40:f4:46:27:
c3:be:e5:68:34:ad:af:fa:5d:e7:46:08:11:20:95:
c4:d0:96:b0:9d:84:9a:8d:73:43:9d:6b:79:3e:b7:
ef:6c:d5:81:b4:53:f8:0b:74:39:a0:61:87:be:69:
c3:51:be:15:78:be:dc:f7:d8:76:4f:4e:56:6f:8b:
0f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CA:0E:E7:3E:F9:84:AB:A4:64:F8:35:5D:94:A6:9C:DC:0F:9F:BB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0197076C7AAD11ED93CEF115C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.130.0/23
103.158.216.0/23
103.159.42.0/23
103.174.242.0/23
103.176.16.0/23
103.181.160.0/23
IPv6:
2001:df5:f980::/48
Signature Algorithm: sha256WithRSAEncryption
2d:95:5c:e6:8c:5c:d3:e7:94:02:ad:72:99:d7:e6:6e:fa:2e:
4f:11:eb:d6:bc:59:85:cc:ac:8c:46:72:45:01:f4:5f:f2:64:
f9:13:df:67:04:3b:a5:1e:21:15:7d:a4:b9:27:43:20:e5:a9:
82:8d:63:a9:ea:2c:65:be:cc:b4:52:d3:0d:0c:84:ce:22:f2:
47:da:cb:7c:c0:0d:36:ac:96:bc:2d:65:56:22:95:4d:6c:4b:
cc:58:39:a1:d1:bb:5a:49:bb:6e:c4:e7:0f:f9:57:91:7c:5a:
80:82:68:bc:c7:0b:85:43:07:89:28:eb:eb:91:0a:35:36:ba:
29:e4:6b:b1:c9:71:84:71:37:fb:5b:16:07:fd:08:e8:21:8c:
32:5b:35:c5:5d:3a:a6:2c:07:90:48:94:e6:c4:c1:6e:38:5d:
28:b2:d2:3b:31:16:78:4f:d5:50:f1:fd:1c:28:0a:b9:25:e5:
5e:f0:72:10:c1:b7:15:1c:f5:46:21:ed:62:49:c6:f9:0c:db:
ee:d9:93:88:c2:fb:47:17:12:f7:fb:5c:3c:d5:7b:05:13:bb:
b0:98:4d:62:44:37:54:be:ca:16:42:08:30:35:e3:3b:77:33:
95:22:13:34:39:b8:76:b0:10:83:d6:65:3b:d0:dc:93:82:8d:
a7:83:b5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:50 2025 by rpki-client