Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0733B412EE0511EBBC6A6365C4F9AE02.roa
File: 0733B412EE0511EBBC6A6365C4F9AE02.roa (raw, json)
Hash identifier: ZmMb2bJfAp30EUWVZemTXp7Lv2rtemH8BrkMQtgfaxg=
Subject key identifier: 91:C2:0C:7C:E0:CE:D8:02:0B:7E:89:38:02:92:7B:26:2E:A4:63:AE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 519A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0733B412EE0511EBBC6A6365C4F9AE02.roa
Signing time: Mon 16 May 2022 04:16:38 +0000
ROA not before: Mon 16 May 2022 04:16:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137653
IP address blocks: 103.91.76.0/22 maxlen: 22
103.91.76.0/24 maxlen: 24
103.91.77.0/24 maxlen: 24
103.91.78.0/24 maxlen: 24
103.91.79.0/24 maxlen: 24
103.120.152.0/23 maxlen: 24
103.204.70.0/24 maxlen: 24
103.206.51.0/24 maxlen: 24
103.206.96.0/23 maxlen: 24
202.4.169.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20890 (0x519a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 16 04:16:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d026-c83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:a8:9a:86:ba:81:14:fc:b7:48:7f:95:d9:
28:7b:8d:89:6b:f3:c9:00:39:60:55:63:db:43:06:
bd:c2:90:be:47:7c:8b:92:ba:7b:5d:2b:ee:19:24:
08:e6:ed:a7:f6:85:2f:16:f4:d3:13:96:0a:d7:68:
90:f6:bc:fd:97:91:82:e1:2c:12:f1:43:17:d2:f7:
ea:0e:3a:7a:8a:e9:a8:7d:f8:65:2f:f6:11:f7:a1:
59:51:8a:ce:be:e2:db:d0:fc:ad:3a:04:e5:97:5f:
05:26:3b:86:b6:9d:e6:78:ec:19:ca:b3:2d:0d:5d:
be:da:dc:f8:67:29:0b:68:99:2d:c2:94:9b:2e:8b:
3c:76:e2:02:dc:1c:d4:8d:9a:3f:dd:12:24:49:f8:
90:79:4d:57:61:a8:78:1f:52:05:df:33:83:99:48:
11:ee:4e:9f:b7:9d:47:bc:1d:b5:af:cd:4b:89:e4:
f0:19:7c:91:68:de:37:1e:20:8d:05:77:4e:63:2b:
8d:4b:ec:0e:62:48:60:2d:7e:2b:b8:04:7b:84:fd:
00:ee:41:9b:1f:3d:c4:0c:10:8e:35:1e:46:08:45:
dd:79:54:92:02:cf:67:58:d6:26:09:39:f3:ea:1a:
b0:4d:ec:98:83:8d:4d:3b:14:6b:21:6a:78:b6:13:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C2:0C:7C:E0:CE:D8:02:0B:7E:89:38:02:92:7B:26:2E:A4:63:AE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0733B412EE0511EBBC6A6365C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.91.76.0/22
103.120.152.0/23
103.204.70.0/24
103.206.51.0/24
103.206.96.0/23
202.4.169.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:52:53:2d:d8:62:31:6e:19:9b:50:3f:7d:65:5e:32:93:4a:
82:08:12:ce:52:32:84:3c:3b:24:aa:b1:c8:04:d7:58:23:64:
0c:9e:a3:d8:c1:f9:fa:ea:80:ac:23:98:65:66:b1:ee:18:e7:
5f:75:aa:03:99:3f:82:ff:64:b2:b3:f3:05:e4:64:99:62:2b:
6e:06:1a:5b:f6:88:60:c0:78:28:5f:23:8d:22:36:77:a3:5d:
14:11:0a:ce:e7:fa:77:7c:fc:34:a5:64:49:e3:61:fb:79:03:
c1:9b:e0:3b:1a:88:f7:86:cb:ac:7d:06:d3:85:f8:6e:60:35:
8c:f5:49:30:eb:b4:d7:27:5b:61:3b:ba:61:ab:46:85:e4:00:
64:02:64:26:dd:1a:b1:dd:30:93:a8:60:58:65:8f:55:ce:d7:
53:9d:40:d0:a9:61:bc:ff:6d:4f:84:3d:d8:ab:e5:45:e5:f0:
8c:13:6a:9f:e4:f9:ff:17:75:ea:85:d2:45:f5:d5:21:7c:63:
17:06:01:b7:89:f4:f2:ca:5e:81:cd:fd:8b:c5:a8:1c:8a:6c:
14:e1:bc:df:4b:fb:a5:9d:3e:c7:17:3d:7a:ea:30:f1:7f:38:
59:ef:0f:6a:9c:14:06:21:5d:ad:f1:bd:19:6f:22:cd:59:b5:
3a:6e:df:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:52 2025 by rpki-client