Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1AE2301C63D311EC877C1E0DC4F9AE02.roa
File: 1AE2301C63D311EC877C1E0DC4F9AE02.roa (raw, json)
Hash identifier: SlQ6dfidXKNVlcP4mgNQezxGrED9wGxVJe3pW32GJGA=
Subject key identifier: 8B:65:C5:59:0E:6D:E3:EF:F7:17:B2:2D:93:09:27:73:A2:2D:60:8A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 619B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1AE2301C63D311EC877C1E0DC4F9AE02.roa
Signing time: Tue 20 Dec 2022 05:31:43 +0000
ROA not before: Tue 20 Dec 2022 05:31:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140641
IP address blocks: 45.248.3.0/24 maxlen: 24
103.30.74.0/23 maxlen: 24
103.97.104.0/24 maxlen: 24
103.97.105.0/24 maxlen: 24
103.97.106.0/24 maxlen: 24
103.97.107.0/24 maxlen: 24
103.152.79.0/24 maxlen: 24
103.182.64.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24987 (0x619b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 20 05:31:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63a148bf-3112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ee:f9:b1:f5:d3:68:47:3c:20:76:1b:93:82:
39:df:ab:f0:5f:fd:4e:64:bf:9e:d0:30:82:16:02:
54:00:70:27:f4:26:47:17:19:04:9f:8b:72:eb:85:
8c:dd:2b:d3:d9:7f:f1:01:05:c8:53:04:0d:44:60:
63:d1:f5:32:4c:61:95:95:c7:1e:28:5b:a2:67:23:
f7:08:11:47:21:18:e8:5b:6d:17:ee:78:4b:64:81:
a7:cd:46:92:05:18:9d:3b:9e:18:1e:fe:1e:c6:b0:
3d:8e:18:47:13:58:2f:42:c4:4e:3c:70:b9:b9:89:
8c:29:be:26:ed:b9:d8:14:69:6c:f4:f0:ee:06:b3:
70:79:2e:86:3d:cb:cc:44:b6:67:03:14:ae:88:d3:
f3:06:df:50:11:b5:d6:7a:a0:76:b8:d5:9b:3f:1f:
b9:ca:9d:28:f8:77:5b:cd:35:27:9f:b7:89:ac:52:
9f:7c:bb:66:af:a5:d7:65:64:2f:d8:a7:0a:58:4c:
ea:ae:b3:5d:7d:6f:1a:5a:f7:2c:45:5d:1e:3e:85:
3f:c1:c8:a2:7d:b4:76:58:8c:00:1e:e3:98:22:e5:
65:6a:3d:13:f6:80:62:ca:18:7b:f1:cd:e5:aa:54:
e1:ee:80:75:34:6a:ee:5f:5e:15:0f:2d:81:df:9a:
15:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:65:C5:59:0E:6D:E3:EF:F7:17:B2:2D:93:09:27:73:A2:2D:60:8A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1AE2301C63D311EC877C1E0DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.3.0/24
103.30.74.0/23
103.97.104.0/22
103.152.79.0/24
103.182.64.0/23
Signature Algorithm: sha256WithRSAEncryption
a1:d9:f7:6b:35:1e:7c:49:78:27:3f:46:9d:04:fd:73:24:6d:
e7:4b:dc:4b:17:85:10:db:fb:20:90:15:0f:b8:0b:25:7d:bd:
b2:a2:b2:67:58:a3:82:75:8a:37:e3:68:73:ec:0b:87:ac:04:
2e:62:0a:0f:43:b0:18:80:5d:31:07:2a:5a:30:92:c2:d2:51:
13:42:d7:7a:b2:8f:67:76:63:dc:fd:2a:a4:49:ab:e4:ad:28:
e6:9d:34:d8:51:05:7e:4c:dc:48:b6:3a:cf:a9:af:90:74:16:
26:c6:77:f7:27:b3:3e:6b:ee:1c:15:a3:0f:68:63:af:57:e3:
b3:83:92:a8:ad:5e:34:02:3b:9b:0b:5b:66:42:34:5b:a7:e9:
e6:cd:d9:10:3a:2c:d0:1f:17:c2:8c:c1:cc:5e:0a:2a:ee:35:
72:3c:4e:8f:cc:c5:fa:05:0a:8d:a3:25:14:48:6b:de:ca:cb:
03:86:60:73:cf:47:c9:3d:42:ae:50:a2:34:47:be:f4:d7:96:
db:df:9a:13:97:ad:3f:99:43:41:66:8c:5d:b3:ba:80:1f:ec:
40:05:04:1d:76:05:ff:0a:e2:f0:4d:ba:f2:f1:19:75:fd:55:
9f:36:e6:af:a3:53:7b:d4:52:d0:f2:b9:bb:aa:23:0e:ca:39:
e7:64:81:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:53 2025 by rpki-client