Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/17381CE4A93511EDB4A25022C4F9AE02.roa
File: 17381CE4A93511EDB4A25022C4F9AE02.roa (raw, json)
Hash identifier: RX9TqzM+BdGu0BVvAWxPXdVQnO5AwmMc6FstMyikmKM=
Subject key identifier: 4F:4C:04:EB:A5:F2:36:FB:0F:8F:DA:73:06:E6:E7:4D:2E:7D:D5:6B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 64A9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/17381CE4A93511EDB4A25022C4F9AE02.roa
Signing time: Fri 10 Feb 2023 11:21:41 +0000
ROA not before: Fri 10 Feb 2023 11:21:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134249
IP address blocks: 43.248.36.0/22 maxlen: 24
45.126.188.0/22 maxlen: 24
103.109.84.0/22 maxlen: 24
103.195.68.0/22 maxlen: 24
2001:df4:3900::/48 maxlen: 48
2001:df5:fc00::/48 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25769 (0x64a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 10 11:21:41 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63e628c4-f786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:a3:46:d8:23:32:74:20:0f:47:c7:6b:6a:
a7:5f:09:3c:04:02:c6:39:fc:6d:54:f6:f6:36:d6:
e6:c4:6a:2b:5f:88:c9:bc:42:a6:0f:7b:2f:fe:c6:
a6:58:13:8c:c8:73:82:79:ed:2b:dc:ae:59:e3:4c:
b3:72:21:39:82:ab:83:e0:58:19:9d:8e:26:e9:cc:
34:8b:a0:7e:61:bf:b7:ec:80:a6:d2:2e:0a:a7:25:
a1:5f:7a:a1:5e:d8:68:d6:b6:d8:cd:e7:a5:cc:7c:
f7:ee:3e:ba:60:84:9f:3f:6a:a8:cb:48:6f:1a:51:
35:cf:50:19:02:9d:5e:c8:82:1a:eb:3a:4f:3f:7f:
b8:48:37:5b:ed:f8:f5:72:8b:5a:f0:38:67:41:f6:
2d:02:94:28:b7:ba:43:14:c7:a5:03:66:70:69:41:
41:f8:30:b8:7e:d6:bd:38:f1:eb:19:ae:da:e7:44:
e9:c0:51:0e:fe:e9:2c:0e:39:9d:3a:64:ca:19:f9:
50:97:0e:1b:60:99:43:ee:61:11:ef:da:60:55:06:
8a:31:5a:57:aa:24:fa:2c:c3:11:87:9b:50:e3:1d:
a3:00:ab:aa:6c:61:d7:62:f1:87:40:86:ba:18:0d:
93:7e:c6:72:35:e0:40:03:66:f9:d1:e4:0f:19:d0:
79:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4C:04:EB:A5:F2:36:FB:0F:8F:DA:73:06:E6:E7:4D:2E:7D:D5:6B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/17381CE4A93511EDB4A25022C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.36.0/22
45.126.188.0/22
103.109.84.0/22
103.195.68.0/22
IPv6:
2001:df4:3900::/48
2001:df5:fc00::/48
Signature Algorithm: sha256WithRSAEncryption
22:23:d6:46:54:2f:37:fd:87:54:bf:f5:c8:c4:03:58:8e:d1:
ae:db:f3:10:7c:6b:51:a4:07:bc:82:f6:99:ff:ca:36:60:9f:
a6:50:44:a8:18:d9:2e:e5:d3:e9:0f:03:bb:ee:d1:89:af:cf:
76:f7:66:58:23:74:c2:32:76:8d:4b:25:80:9b:75:44:ce:7e:
9c:57:b2:bb:3c:e9:bf:cc:cd:cb:21:82:46:5a:90:b1:96:bd:
9f:4c:e0:71:38:ec:1d:ec:15:c6:62:e8:31:f3:16:f5:89:0c:
f0:d9:f2:65:54:6c:83:c4:5f:c2:bd:31:64:e7:e6:b5:a9:9a:
2b:59:81:f0:ec:ac:50:59:8a:e5:4c:06:f8:10:2c:71:41:c2:
31:d9:0c:2b:09:b1:13:5f:8d:df:3d:f2:ff:15:c6:f6:06:6a:
ac:7e:c3:e1:a8:30:ef:b7:94:3f:7f:85:54:fa:a2:72:2a:f3:
19:0a:a7:68:c8:1c:f2:12:bd:6e:7c:6d:f2:7e:99:5f:76:f7:
e4:b5:75:d1:22:04:91:f3:bc:e7:8c:8a:fc:31:a2:44:3f:ca:
9b:0e:24:db:1c:57:ed:93:95:2b:7c:2f:43:8c:7d:5b:e6:f4:
98:e0:9e:fc:f1:8e:d6:d7:76:fc:ec:f3:17:a6:b4:db:ac:fa:
4a:ba:6e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:24:10 2025 by rpki-client