Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1A46D536B74C11ED916B5A6AC4F9AE02.roa
File: 1A46D536B74C11ED916B5A6AC4F9AE02.roa (raw, json)
Hash identifier: My9JxQr64MxgRm3tz5U8EDLn1NhX0jD/wwPhktZMpZw=
Subject key identifier: D0:48:AF:17:C8:AF:6A:9E:3E:FF:AA:1F:AD:7E:71:40:06:89:AE:2B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 65D1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1A46D536B74C11ED916B5A6AC4F9AE02.roa
Signing time: Tue 28 Feb 2023 09:41:40 +0000
ROA not before: Tue 28 Feb 2023 09:41:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134877
IP address blocks: 103.110.236.0/22 maxlen: 24
103.124.152.0/23 maxlen: 24
103.143.108.0/24 maxlen: 24
103.148.33.0/24 maxlen: 24
103.153.10.0/23 maxlen: 24
103.154.35.0/24 maxlen: 24
103.154.204.0/23 maxlen: 24
103.154.238.0/23 maxlen: 24
103.155.32.0/23 maxlen: 24
103.156.170.0/23 maxlen: 24
103.163.232.0/23 maxlen: 24
103.180.223.0/24 maxlen: 24
103.207.0.0/22 maxlen: 24
103.213.1.0/24 maxlen: 24
103.213.2.0/23 maxlen: 24
103.231.116.0/22 maxlen: 24
113.30.168.0/22 maxlen: 24
210.16.84.0/22 maxlen: 24
2404:d940::/32 maxlen: 35
2404:d940::/33 maxlen: 36
2404:d940:8000::/34 maxlen: 36
2404:d940:c000::/35 maxlen: 36
2404:d940:e000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26065 (0x65d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 28 09:41:40 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63fdcc54-ca98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:b3:b7:82:50:20:9f:f6:8a:8f:16:84:f4:
c5:50:7c:88:3d:ce:23:95:65:dc:bb:f4:12:ba:40:
63:a5:e1:31:23:3e:1a:c4:02:04:05:63:7f:9e:02:
19:f2:c1:f2:ff:eb:34:db:fa:7f:b6:c5:8f:bc:03:
1b:0f:97:cd:99:f3:0c:cc:43:e6:d7:04:ef:cf:7e:
48:0a:22:fb:f4:59:8f:5f:cd:89:ea:18:47:00:43:
d1:df:49:30:17:48:aa:e3:f5:56:ec:fe:21:17:28:
f7:dd:f9:cd:77:21:ec:02:9b:0e:df:e0:cb:83:bf:
2c:da:d7:f4:4e:77:95:d4:51:ef:76:96:9d:6f:0b:
c9:7a:79:d7:ea:7b:d6:91:5e:c4:e7:22:be:88:e1:
c6:18:b4:96:ce:a9:f7:04:d5:cf:af:51:0d:c4:72:
77:5d:20:5b:7c:c8:51:e1:e8:87:5d:d1:84:60:89:
fe:60:3a:8b:2c:65:3f:30:b6:a0:d1:8d:ff:52:db:
ab:1f:44:85:de:66:46:57:cd:82:c6:e2:66:1a:60:
8f:e8:7e:c1:4c:00:3c:b9:de:fe:a5:8d:30:79:52:
8a:f4:e0:54:69:62:04:f9:58:40:d0:37:99:93:f2:
b8:64:05:8c:37:da:c7:40:a2:c7:45:87:0d:36:ae:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:48:AF:17:C8:AF:6A:9E:3E:FF:AA:1F:AD:7E:71:40:06:89:AE:2B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1A46D536B74C11ED916B5A6AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.236.0/22
103.124.152.0/23
103.143.108.0/24
103.148.33.0/24
103.153.10.0/23
103.154.35.0/24
103.154.204.0/23
103.154.238.0/23
103.155.32.0/23
103.156.170.0/23
103.163.232.0/23
103.180.223.0/24
103.207.0.0/22
103.213.1.0-103.213.3.255
103.231.116.0/22
113.30.168.0/22
210.16.84.0/22
IPv6:
2404:d940::/32
Signature Algorithm: sha256WithRSAEncryption
70:68:b4:5c:49:50:94:58:33:93:e1:40:ab:ab:f5:ca:23:2e:
d1:70:1e:e0:f5:b0:d6:20:bf:4e:57:7a:ca:d2:49:d8:55:2f:
4e:42:9d:4a:b6:f9:80:74:c9:64:0e:02:4c:3c:97:ea:78:bb:
ee:fa:e0:df:ff:75:ce:9b:b4:79:02:40:b8:ab:90:07:0f:d7:
ed:44:cf:47:20:e4:99:14:c2:21:1b:14:12:43:c6:6f:c1:97:
3b:67:af:b8:5e:4b:eb:bc:f3:8e:db:dc:69:2e:e5:75:a8:bb:
78:88:84:a9:c7:82:0c:ec:30:ee:7f:62:43:41:49:13:f9:df:
b5:4e:db:ae:47:83:b6:14:01:3c:f6:e1:23:1e:4d:f7:07:f3:
80:16:d1:3d:81:e1:1d:55:36:f0:c0:8b:20:91:af:18:a9:bf:
87:ca:25:cc:99:e7:29:52:b9:17:8b:4f:e8:1e:d2:66:31:88:
69:50:1d:6b:72:fb:9e:5a:da:25:b9:27:cc:d0:6f:a2:78:c3:
d9:bb:d5:d5:d7:6c:1b:1e:e0:50:f0:c8:b4:fb:ce:5d:71:dc:
24:ca:3f:c9:32:25:aa:dc:71:8f:37:10:d9:0d:a3:0a:78:d1:
17:81:77:c9:6f:84:81:cb:37:b5:c8:e0:f6:fe:31:8f:fc:ca:
31:42:5a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:31 2025 by rpki-client