Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08D87974822C11EF88C3BA1FC4F9AE02.roa
File: 08D87974822C11EF88C3BA1FC4F9AE02.roa (raw, json)
Hash identifier: cvYz3PRCdPZciBdSHnvNIHNdWfZTydevHZTkkFVlSQ0=
Subject key identifier: 38:7C:56:57:A9:E9:63:3D:33:B4:B7:5A:14:B5:65:8B:32:98:71:F5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9ABC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08D87974822C11EF88C3BA1FC4F9AE02.roa
Signing time: Fri 04 Oct 2024 08:38:31 +0000
ROA not before: Fri 04 Oct 2024 08:38:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45528
IP address blocks: 1.22.36.0/24 maxlen: 24
1.23.62.0/24 maxlen: 24
43.224.164.0/22 maxlen: 24
103.28.180.0/22 maxlen: 24
103.159.239.0/24 maxlen: 24
202.56.117.0/24 maxlen: 24
202.56.118.0/24 maxlen: 24
202.56.119.0/24 maxlen: 24
202.56.120.0/24 maxlen: 24
202.56.121.0/24 maxlen: 24
202.56.123.0/24 maxlen: 24
202.56.124.0/24 maxlen: 24
202.56.126.0/24 maxlen: 24
202.56.127.0/24 maxlen: 24
203.76.128.0/24 maxlen: 24
203.76.129.0/24 maxlen: 24
203.76.130.0/24 maxlen: 24
203.76.131.0/24 maxlen: 24
203.76.132.0/24 maxlen: 24
203.76.133.0/24 maxlen: 24
203.76.134.0/24 maxlen: 24
203.76.135.0/24 maxlen: 24
203.76.136.0/24 maxlen: 24
203.76.137.0/24 maxlen: 24
203.76.138.0/24 maxlen: 24
203.76.140.0/24 maxlen: 24
203.76.142.0/24 maxlen: 24
203.90.64.0/24 maxlen: 24
203.90.65.0/24 maxlen: 24
203.90.66.0/24 maxlen: 24
203.90.68.0/24 maxlen: 24
203.90.69.0/24 maxlen: 24
203.90.76.0/24 maxlen: 24
203.90.77.0/24 maxlen: 24
203.90.78.0/24 maxlen: 24
203.90.79.0/24 maxlen: 24
203.90.80.0/24 maxlen: 24
203.90.82.0/24 maxlen: 24
203.90.85.0/24 maxlen: 24
203.90.86.0/24 maxlen: 24
203.90.87.0/24 maxlen: 24
203.90.88.0/24 maxlen: 24
203.90.89.0/24 maxlen: 24
203.90.90.0/24 maxlen: 24
203.90.91.0/24 maxlen: 24
203.90.92.0/24 maxlen: 24
203.90.94.0/24 maxlen: 24
203.90.95.0/24 maxlen: 24
203.90.96.0/24 maxlen: 24
203.90.97.0/24 maxlen: 24
203.90.98.0/24 maxlen: 24
203.90.99.0/24 maxlen: 24
203.90.100.0/24 maxlen: 24
203.90.101.0/24 maxlen: 24
203.90.102.0/24 maxlen: 24
203.90.103.0/24 maxlen: 24
203.90.104.0/24 maxlen: 24
203.90.105.0/24 maxlen: 24
203.90.109.0/24 maxlen: 24
203.90.110.0/24 maxlen: 24
203.90.111.0/24 maxlen: 24
203.90.112.0/24 maxlen: 24
203.90.113.0/24 maxlen: 24
203.90.114.0/24 maxlen: 24
203.90.115.0/24 maxlen: 24
203.90.116.0/24 maxlen: 24
203.90.117.0/24 maxlen: 24
203.90.118.0/24 maxlen: 24
203.90.119.0/24 maxlen: 24
203.90.120.0/24 maxlen: 24
203.90.123.0/24 maxlen: 24
203.90.124.0/24 maxlen: 24
203.90.125.0/24 maxlen: 24
203.90.127.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39612 (0x9abc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Oct 4 08:38:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ffa987-655f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:90:a8:8e:2c:b9:33:5f:e9:23:c7:b7:37:
13:87:7a:0d:9e:07:f6:a6:06:80:d2:c5:d8:bc:11:
e6:2c:81:59:64:ac:ac:86:47:2a:a2:48:ae:ad:ba:
17:65:82:2e:50:b5:e2:99:4b:74:ac:1e:ce:6d:22:
d3:4f:90:e3:7b:dc:bc:38:91:aa:ed:84:5a:e5:b4:
ea:ff:5d:3a:69:cc:93:ee:c1:f4:55:58:6b:eb:85:
71:32:52:20:96:c9:88:12:5c:65:7f:d6:e0:57:07:
ef:35:29:8b:45:52:a4:3f:e3:64:0e:eb:dd:1d:0c:
5c:ca:f7:d5:3e:8e:be:f3:0c:91:ce:4a:e2:15:ad:
e5:1f:eb:f1:a8:41:2d:4e:18:60:87:e9:fd:c9:48:
49:cc:86:fc:1b:98:c9:52:5c:93:19:7b:cd:04:c4:
8e:fa:cf:a1:ef:9e:ed:a1:c3:dd:6d:db:97:0c:69:
6c:b4:ac:f7:5a:97:a2:8c:f2:2a:4e:d3:b3:8f:91:
b3:d0:e6:05:3b:64:46:53:49:57:9d:08:27:dd:84:
4d:2c:16:06:fd:16:2f:d4:25:1c:03:b9:1e:2d:22:
2d:2d:de:a5:00:9a:f5:3e:70:fa:21:f1:b3:56:af:
ca:97:b6:07:54:e0:00:49:31:d6:0b:57:74:9a:4c:
83:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7C:56:57:A9:E9:63:3D:33:B4:B7:5A:14:B5:65:8B:32:98:71:F5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/08D87974822C11EF88C3BA1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.22.36.0/24
1.23.62.0/24
43.224.164.0/22
103.28.180.0/22
103.159.239.0/24
202.56.117.0-202.56.121.255
202.56.123.0-202.56.124.255
202.56.126.0/23
203.76.128.0-203.76.138.255
203.76.140.0/24
203.76.142.0/24
203.90.64.0-203.90.66.255
203.90.68.0/23
203.90.76.0-203.90.80.255
203.90.82.0/24
203.90.85.0-203.90.92.255
203.90.94.0-203.90.105.255
203.90.109.0-203.90.120.255
203.90.123.0-203.90.125.255
203.90.127.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0e:da:5d:b5:bb:05:ab:2c:cf:40:e7:35:95:a5:69:c1:e4:
e8:d4:a6:cc:27:7c:fe:8d:8e:06:c5:b0:29:66:c6:4d:9a:b8:
10:f5:e7:65:d9:2a:be:1c:14:e0:1b:1d:5f:29:08:f0:e7:30:
3b:f5:3c:a0:d8:2d:48:7d:29:9f:2a:42:93:39:3d:c7:2e:a2:
87:39:d9:b7:97:ec:4b:f1:4a:b5:05:c2:6a:c6:d0:b1:54:4d:
5d:83:6e:7c:4a:da:40:3d:95:65:a5:de:a7:16:8b:a1:a0:08:
8c:9b:1b:d8:b8:67:a9:b2:f6:d9:b7:c6:cb:07:2c:c4:b0:78:
88:28:34:4c:bf:90:8a:9f:90:88:d9:5e:2b:2e:c9:90:8d:de:
45:c8:dd:d8:7e:d5:7e:bb:b1:40:1e:54:b8:23:25:95:2b:c1:
7b:28:46:c8:b0:61:05:40:92:9b:fd:9e:9e:ba:87:de:fd:b6:
10:34:a9:24:a4:57:f3:1b:e8:a5:de:ac:ae:a9:b0:92:8e:96:
fb:f0:00:41:46:ee:e7:c7:8a:d1:cd:43:34:9d:70:72:e4:36:
cc:8a:fb:db:a5:fd:8f:45:d6:67:fb:96:b1:da:82:8e:61:bb:
72:9e:50:b5:e4:95:3a:57:1b:fe:c0:cc:15:24:77:bc:69:d9:
4b:e0:66:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:50 2025 by rpki-client