Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/206DBE64518911EB80345C53C4F9AE02.roa
File: 206DBE64518911EB80345C53C4F9AE02.roa (raw, json)
Hash identifier: gV2NAx/FA3zb191soEANankCLLlzfixf0n+7hTFm/XA=
Subject key identifier: A0:66:6B:A6:2E:D1:9E:C5:CF:68:8B:F5:75:35:C7:17:8D:C9:43:23
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8934
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/206DBE64518911EB80345C53C4F9AE02.roa
Signing time: Thu 30 May 2024 15:57:51 +0000
ROA not before: Thu 30 May 2024 15:57:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133727
IP address blocks: 36.255.64.0/22 maxlen: 24
103.41.196.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35124 (0x8934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:57:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a1fe-97b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c9:16:69:08:7a:8c:ee:37:9c:7f:13:17:c3:
3d:c7:ef:af:2f:80:98:4a:84:71:6c:89:e7:8c:81:
ef:c2:da:b2:96:12:ed:bd:ca:19:14:e4:9c:0e:72:
ac:3f:8c:c2:f8:95:39:f3:72:1f:f3:76:97:d3:77:
e9:e9:64:e3:98:6b:da:0f:19:1c:4c:ac:1b:da:ca:
91:32:19:f5:10:d6:34:52:21:86:8e:c9:03:f0:ee:
bb:4a:af:49:a6:b1:04:32:a5:56:ef:09:22:4a:dd:
cd:51:ca:77:24:e7:fc:5d:8e:ed:06:72:3b:3d:a3:
ab:51:17:81:f7:87:f1:39:49:8b:2e:02:9e:0e:3f:
60:c0:86:55:2e:17:f8:84:43:88:4f:7d:e0:4f:5f:
54:ac:92:d1:9c:cf:7b:16:17:bc:13:a0:39:4e:71:
85:a2:df:b7:82:54:6c:9c:2d:42:e8:e8:69:f6:1a:
ae:d5:c3:a3:50:a5:fe:b0:16:32:e9:75:33:db:c2:
06:37:5b:58:d9:90:95:da:f2:3a:31:46:0e:9d:de:
f4:4d:70:1e:b9:7c:66:f8:c8:23:4c:50:ff:8f:43:
45:65:00:3b:7a:6d:94:d7:1b:88:2d:29:73:6e:aa:
f3:46:d9:14:af:e1:33:a7:8f:a3:a1:05:12:5d:61:
4a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:66:6B:A6:2E:D1:9E:C5:CF:68:8B:F5:75:35:C7:17:8D:C9:43:23
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/206DBE64518911EB80345C53C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.64.0/22
103.41.196.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:26:dd:d2:8a:b0:21:f7:af:74:e6:5d:25:f7:76:23:16:7f:
88:65:39:4f:f4:fa:4b:f6:5d:a9:11:70:b7:1a:8b:16:15:3f:
89:f8:45:58:5f:f7:89:2a:9a:17:27:1d:62:18:33:a3:e3:29:
e7:a6:61:97:d3:50:9f:43:84:b3:07:e7:e0:9d:98:11:d8:75:
c7:8a:b8:a2:1e:6b:ff:2d:1c:e4:8f:cb:c9:1a:42:76:54:25:
c7:e3:74:0f:52:12:90:3e:d2:65:00:92:82:d0:22:b7:43:d6:
4c:ef:9e:01:ca:a8:c6:5a:34:ca:9f:94:ac:d0:63:3d:de:c4:
0f:33:de:a9:59:7b:3d:ad:d8:86:a8:91:74:b8:31:0a:1f:58:
67:a9:d8:99:64:23:ec:6c:95:9f:01:94:8f:52:17:ea:27:84:
ed:1a:34:68:1b:87:cc:fd:5f:a2:a0:76:a0:86:6b:c9:df:7b:
c5:b6:fd:de:25:ad:a9:a0:f2:b9:b5:d6:d8:54:35:14:1b:6c:
7c:eb:92:f5:9b:8f:44:51:96:ba:55:02:af:53:08:12:79:3c:
e4:3d:3e:1e:49:02:e5:dd:07:8e:c1:57:64:5a:38:30:08:c5:
a8:63:26:da:4a:a4:69:a1:0a:a9:74:ef:d0:22:5a:c5:f4:a9:
97:ff:e9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:47 2025 by rpki-client