Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C823B7AD94611EF96D7F766C4F9AE02.roa
File: 0C823B7AD94611EF96D7F766C4F9AE02.roa (raw, json)
Hash identifier: em/EYY/w4EzFUJbOwWezYjN3iUGq0e8W/KKZdzZh0TY=
Subject key identifier: DD:73:72:4D:22:1E:7C:C3:42:54:3F:77:0C:84:D1:E4:C4:08:70:4C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A37C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C823B7AD94611EF96D7F766C4F9AE02.roa
Signing time: Thu 23 Jan 2025 11:16:55 +0000
ROA not before: Thu 23 Jan 2025 11:16:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.116.60.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.132.203.0/24 maxlen: 24
103.134.160.0/22 maxlen: 24
103.142.64.0/23 maxlen: 24
103.143.109.0/24 maxlen: 24
103.144.112.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.167.157.0/24 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.195.196.0/22 maxlen: 24
103.199.92.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.254.200.0/22 maxlen: 24
137.59.204.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41852 (0xa37c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 23 11:16:55 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67922527-ebeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:c3:dc:05:88:3b:3b:5d:6f:59:da:c7:39:
8e:1f:b6:e5:a1:69:34:b2:a5:8a:5c:27:70:9d:46:
c2:78:0b:27:47:4a:32:f5:6e:53:b1:72:f9:e1:33:
23:e6:ad:ce:be:5c:4c:e2:26:04:aa:b9:07:53:18:
fb:e9:7b:13:7d:87:33:50:fd:02:3f:44:e4:7a:ed:
ba:78:ea:d4:b4:bf:77:25:2e:09:ac:c3:2e:10:cd:
a3:5f:55:eb:c4:e1:4e:bc:62:57:89:ea:ac:4d:c3:
15:a7:83:82:9b:9b:70:c7:e8:a5:2b:43:05:e1:75:
54:89:5f:7f:ee:68:0f:57:ed:46:92:92:e1:44:8d:
ba:84:e0:53:b3:05:ca:71:ca:73:14:03:72:85:08:
a6:6c:58:4f:39:3e:85:e5:ad:fa:13:e9:b8:12:5b:
71:fb:d7:e2:08:ca:5f:41:a2:ad:e4:8d:5e:1a:d9:
12:d8:a1:c9:82:70:27:81:19:f2:29:10:bb:ad:bc:
52:88:92:99:b0:8e:cc:91:62:ad:f1:74:7f:73:6c:
3f:eb:46:66:61:fd:82:89:38:8a:ae:7c:21:66:e8:
53:c4:63:55:4c:00:f7:be:da:f5:1d:e1:5c:c2:0d:
04:88:db:94:d3:88:a1:c6:91:91:ee:62:1d:61:90:
5a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:73:72:4D:22:1E:7C:C3:42:54:3F:77:0C:84:D1:E4:C4:08:70:4C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0C823B7AD94611EF96D7F766C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.231.116.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.27.168.0/24
103.27.170.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.116.60.0/22
103.118.8.0/22
103.132.203.0/24
103.134.160.0/22
103.142.64.0/23
103.143.109.0/24
103.144.112.0/23
103.153.208.0/23
103.155.194.0/23
103.167.157.0/24
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.180.216.0/23
103.192.72.0/22
103.195.196.0/22
103.199.92.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.226.224.0/22
103.228.172.0/22
103.254.200.0/22
137.59.204.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
4a:d2:d4:77:73:8b:81:80:25:90:dc:98:34:04:0b:90:74:30:
95:a2:b5:e0:c2:49:18:8e:a8:06:34:e6:92:5b:3e:4a:3b:de:
8d:e5:d6:aa:a8:af:ca:ef:82:ec:fe:44:5e:af:5d:d0:0c:c8:
0a:78:04:e6:be:2a:46:07:bc:6c:31:f8:48:2a:80:5f:32:b1:
c4:ff:5d:ac:18:cc:91:dc:ba:81:09:f3:44:a1:75:bc:a0:ac:
0b:ba:67:9a:b4:85:1d:d4:0f:8d:78:45:c8:e2:74:1b:48:93:
2a:60:10:67:08:97:57:68:7a:7b:cb:e8:71:85:13:75:c6:ae:
30:bb:43:a9:b4:37:b1:79:02:64:b6:05:8f:52:e7:ee:72:f7:
91:0e:45:8a:84:98:f4:04:f4:df:35:08:0a:3b:2e:99:f8:6e:
28:02:a6:7f:c1:f8:b5:21:78:73:2e:9c:68:21:a0:30:5a:4a:
d4:3f:b7:b2:72:9a:a2:1b:4d:23:40:de:11:2e:e8:ee:7e:17:
2d:55:80:7b:bc:af:49:5e:fe:ff:da:4b:11:c3:d0:b9:0f:8e:
02:a1:9c:44:74:d1:6d:9d:62:06:99:54:f7:59:8a:59:cb:57:
2f:40:77:54:56:46:05:4c:e9:d7:a4:8d:8e:be:e6:35:6a:21:
13:d0:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:16:52 2025 by rpki-client