Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/174B4D06B3A011EFBD5FE062C4F9AE02.roa
File: 174B4D06B3A011EFBD5FE062C4F9AE02.roa (raw, json)
Hash identifier: buFCLxNlgG9PoYDT/sOyyebhBEMl9THbXYbukeKzC7A=
Subject key identifier: FB:07:02:F6:56:09:3D:BA:BC:4C:63:8B:3B:CC:18:0A:10:0F:F8:CB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9EB9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/174B4D06B3A011EFBD5FE062C4F9AE02.roa
Signing time: Fri 06 Dec 2024 07:02:44 +0000
ROA not before: Fri 06 Dec 2024 07:02:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133246
IP address blocks: 43.240.8.0/24 maxlen: 24
43.240.9.0/24 maxlen: 24
43.240.10.0/24 maxlen: 24
43.240.11.0/24 maxlen: 24
103.51.216.0/22 maxlen: 24
103.68.95.0/24 maxlen: 24
103.81.208.0/22 maxlen: 24
103.100.178.0/23 maxlen: 24
103.173.191.0/24 maxlen: 24
103.218.108.0/24 maxlen: 24
103.218.109.0/24 maxlen: 24
103.218.110.0/24 maxlen: 24
103.218.111.0/24 maxlen: 24
103.232.124.0/24 maxlen: 24
103.232.125.0/24 maxlen: 24
103.232.126.0/24 maxlen: 24
103.232.127.0/24 maxlen: 24
220.158.136.0/22 maxlen: 24
2001:df2:ab40::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40633 (0x9eb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 6 07:02:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6752a194-7d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:a7:c7:1b:d3:fb:b5:eb:b6:61:53:5d:67:
fa:63:64:7b:0a:03:c1:9a:89:e8:07:84:e9:06:9f:
34:a7:4b:28:84:ed:ef:e2:52:d8:e4:4d:52:4d:23:
ef:a4:e4:28:4c:23:71:4d:29:09:3c:1e:1e:ce:e4:
29:67:ca:c5:23:e8:53:b4:6e:1c:98:b4:a4:8a:c5:
c6:f0:53:64:4e:9f:10:05:3c:85:bf:d7:bd:50:09:
e4:ad:ef:32:7f:1a:8d:d3:1e:27:fb:3f:3b:9a:7a:
a2:30:0d:23:17:c2:37:31:53:5b:b3:c9:1f:dd:b9:
b8:26:59:88:82:90:e8:54:7a:05:6c:f7:9d:42:1d:
90:17:ed:85:6d:71:ab:25:80:3d:72:ee:a9:2f:17:
89:86:51:ee:c9:a8:26:5a:3f:b9:f7:93:02:4a:d0:
c2:c6:73:32:58:78:e4:eb:35:43:4f:8d:ff:6b:51:
49:96:7c:b8:17:98:e3:be:62:78:af:10:50:00:63:
6f:bc:6d:3d:59:8a:79:0e:01:a3:d7:9e:82:79:15:
72:bc:c9:cb:54:c4:83:cc:48:70:f9:94:c2:d9:d9:
aa:95:9b:4a:30:7a:49:2b:a3:ef:4a:21:74:6d:67:
bb:30:63:e9:41:c7:6e:9a:e8:66:97:8d:4f:d3:6f:
a1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:07:02:F6:56:09:3D:BA:BC:4C:63:8B:3B:CC:18:0A:10:0F:F8:CB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/174B4D06B3A011EFBD5FE062C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.240.8.0/22
103.51.216.0/22
103.68.95.0/24
103.81.208.0/22
103.100.178.0/23
103.173.191.0/24
103.218.108.0/22
103.232.124.0/22
220.158.136.0/22
IPv6:
2001:df2:ab40::/48
Signature Algorithm: sha256WithRSAEncryption
69:65:28:eb:63:e3:ca:42:19:60:4a:2a:4a:b0:0b:3d:f3:ad:
43:82:28:3a:3a:bf:fe:d3:39:32:8c:91:96:30:6f:d4:0b:ab:
2e:a5:62:06:45:9e:11:ec:3b:f9:64:5d:8e:e9:46:23:13:ca:
36:de:73:9d:0e:83:db:0f:6c:3a:3b:e4:11:30:00:83:a8:91:
23:61:a2:75:ba:1c:bf:c8:5d:47:5e:39:c2:6b:b5:0f:60:3b:
a3:d9:75:54:5b:10:43:ff:64:13:6f:7a:4e:91:4e:e2:b9:da:
f7:a3:dc:f5:45:58:2f:7a:db:1c:12:1d:30:b9:56:04:f1:0e:
59:50:b5:4e:47:e5:3f:21:63:ee:af:21:11:db:98:62:ab:b1:
3d:4f:71:d6:87:9a:58:5d:be:92:3b:62:bf:68:5c:8e:f3:66:
e1:3c:ac:50:48:32:0f:a3:49:48:97:e3:1e:66:05:6b:0a:e3:
61:be:2f:44:a5:4a:e2:fd:85:ac:f6:cc:43:96:e3:d0:2b:57:
29:35:37:b8:1e:ea:39:f1:85:ac:b5:f9:92:57:cb:95:c2:a2:
3b:1b:f8:28:b5:bb:31:ad:bf:c4:ce:4e:ee:d7:ba:5c:73:2d:
44:e4:3b:62:45:04:d3:31:d1:af:fd:f7:86:5d:68:1e:5f:d8:
da:5f:ef:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:47 2025 by rpki-client