Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0837B7628A9111EDA4336377C4F9AE02.roa
File: 0837B7628A9111EDA4336377C4F9AE02.roa (raw, json)
Hash identifier: NaRoqctFcWeEE+9ngcqzzbQV89DS3Ap9/8csAfYcsfg=
Subject key identifier: 39:54:D2:43:BF:CE:44:31:EC:C2:B4:2A:3A:EE:CD:3C:0B:8E:83:60
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6258
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0837B7628A9111EDA4336377C4F9AE02.roa
Signing time: Mon 02 Jan 2023 11:31:43 +0000
ROA not before: Mon 02 Jan 2023 11:31:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135139
IP address blocks: 103.99.148.0/22 maxlen: 24
103.122.61.0/24 maxlen: 24
103.130.88.0/22 maxlen: 24
103.130.204.0/23 maxlen: 24
103.133.220.0/23 maxlen: 24
103.183.240.0/23 maxlen: 24
103.185.84.0/23 maxlen: 24
103.185.102.0/23 maxlen: 24
103.186.124.0/23 maxlen: 24
103.186.150.0/23 maxlen: 24
103.186.230.0/23 maxlen: 24
103.186.232.0/23 maxlen: 24
103.187.62.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25176 (0x6258)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 2 11:31:43 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63b2c09f-1015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f5:35:99:3b:14:fb:80:2b:f4:2c:11:80:1d:
d9:cf:ee:64:0b:da:b8:6e:02:45:df:19:8e:7b:8d:
6a:94:17:08:11:4e:66:81:d5:6c:9c:6a:fc:33:52:
1f:5a:50:5f:12:49:3b:72:0d:ed:90:4e:76:b2:c1:
df:0b:ff:ed:15:a8:94:ba:03:e0:2e:8e:89:dc:40:
73:92:29:2e:b0:40:45:c7:b0:5d:b9:ac:84:2d:b6:
a0:e5:c2:de:36:70:b5:cd:e2:79:5e:b1:84:4b:8b:
fc:83:cc:11:5a:76:74:37:63:6e:05:6d:72:e0:93:
ce:05:ad:b1:ec:50:f1:7b:84:ef:66:2c:d3:82:38:
e7:16:ad:d7:ad:52:db:bb:1e:d0:e0:e7:3c:b9:cf:
0b:ac:c2:7d:c0:5e:e6:15:83:27:64:a8:ac:6c:2e:
2c:ea:67:70:36:73:92:be:9b:c2:9b:c1:5b:76:b1:
80:51:2a:ba:a9:76:ad:53:a4:3b:39:9e:8f:d1:b1:
93:2c:49:ba:f6:30:17:9e:67:ce:6e:15:99:85:6c:
50:48:b4:0b:40:aa:61:af:e0:7d:e8:ee:a1:d3:b4:
2d:19:3f:e0:a9:67:c9:92:5f:f3:96:18:a8:07:0e:
8b:e8:c5:71:0d:24:a3:54:5d:c7:18:d7:6f:f7:5c:
00:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:54:D2:43:BF:CE:44:31:EC:C2:B4:2A:3A:EE:CD:3C:0B:8E:83:60
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0837B7628A9111EDA4336377C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.99.148.0/22
103.122.61.0/24
103.130.88.0/22
103.130.204.0/23
103.133.220.0/23
103.183.240.0/23
103.185.84.0/23
103.185.102.0/23
103.186.124.0/23
103.186.150.0/23
103.186.230.0-103.186.233.255
103.187.62.0/23
Signature Algorithm: sha256WithRSAEncryption
41:b5:c6:71:ab:3e:4b:89:15:5f:4e:90:7e:4e:02:9a:bf:12:
a8:de:b5:cc:36:8a:54:48:f1:e0:80:c9:2c:59:f6:78:3d:aa:
da:92:89:d5:c4:e4:d4:8e:70:7f:45:a7:78:45:99:d1:03:f7:
84:16:24:8b:7d:a4:a3:fd:d1:17:96:b3:86:ce:fe:63:38:66:
8f:7b:54:c6:30:50:7f:ef:ad:ca:00:8d:5d:4a:68:fd:5b:03:
7e:d1:20:1c:6f:1a:25:db:ee:6d:2f:5f:ae:ec:68:79:32:8d:
b5:b0:6c:e6:ba:28:62:83:4c:12:40:bf:67:ac:8d:70:ff:c7:
8e:b4:2d:54:0e:fe:60:a3:30:21:7e:a7:49:a0:c3:43:c2:d6:
52:55:43:bb:44:14:cb:ab:e6:37:c7:0b:00:51:9b:92:af:a5:
d6:81:64:b6:c9:5d:f0:69:4b:1b:29:d1:b3:f2:4d:d1:e6:d7:
c8:24:2b:20:e1:21:f4:ca:3b:cf:24:68:07:ac:0e:4a:c4:4c:
05:78:3e:db:4c:b0:8b:b9:ad:89:9b:2b:04:9b:97:73:07:31:
1e:78:9e:e6:d8:e2:63:f8:8b:bb:74:de:1c:6d:5a:fd:1c:b1:
ee:95:22:53:31:d6:e8:f8:d5:18:d6:1b:66:cb:a4:19:bb:97:
02:39:2b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:57 2025 by rpki-client