Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/223C7666A7AB11ED8CD18C33C4F9AE02.roa
File: 223C7666A7AB11ED8CD18C33C4F9AE02.roa (raw, json)
Hash identifier: YlCuRB6fGCPxLFxtVWLmxFum1/oPKoKpN84iBpBrHrc=
Subject key identifier: B7:31:95:39:AE:6D:F3:11:40:67:1B:F9:76:73:06:A4:3C:0F:A5:5A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6487
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/223C7666A7AB11ED8CD18C33C4F9AE02.roa
Signing time: Wed 08 Feb 2023 12:21:38 +0000
ROA not before: Wed 08 Feb 2023 12:21:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58762
IP address blocks: 45.117.180.0/24 maxlen: 24
45.117.181.0/24 maxlen: 24
45.117.182.0/24 maxlen: 24
45.117.183.0/24 maxlen: 24
103.18.72.0/24 maxlen: 24
103.18.73.0/24 maxlen: 24
103.18.74.0/24 maxlen: 24
103.18.75.0/24 maxlen: 24
103.69.12.0/22 maxlen: 24
103.84.184.0/22 maxlen: 24
103.88.56.0/22 maxlen: 22
103.88.56.0/24 maxlen: 24
103.88.57.0/24 maxlen: 24
103.88.58.0/24 maxlen: 24
103.88.59.0/24 maxlen: 24
103.138.8.0/24 maxlen: 24
103.147.0.0/24 maxlen: 24
103.147.1.0/24 maxlen: 24
103.153.12.0/24 maxlen: 24
103.157.4.0/23 maxlen: 24
103.157.10.0/23 maxlen: 24
103.164.46.0/23 maxlen: 24
103.165.28.0/23 maxlen: 24
103.165.102.0/23 maxlen: 24
103.170.158.0/23 maxlen: 24
103.225.56.0/22 maxlen: 22
103.225.56.0/24 maxlen: 24
103.225.57.0/24 maxlen: 24
103.225.58.0/24 maxlen: 24
103.225.59.0/24 maxlen: 24
150.129.44.0/24 maxlen: 24
150.129.45.0/24 maxlen: 24
150.129.46.0/24 maxlen: 24
150.129.47.0/24 maxlen: 24
2001:df0:8000::/48 maxlen: 56
2407:c140::/32 maxlen: 38
2407:c140::/36 maxlen: 40
2407:c140:1000::/37 maxlen: 40
2407:c140:1800::/38 maxlen: 40
2407:c140:1c00::/39 maxlen: 40
2407:c140:1e00::/40 maxlen: 40
2407:c140:1f00::/40 maxlen: 40
2407:c140:2000::/35 maxlen: 40
2407:c140:4000::/34 maxlen: 40
2407:c140:8000::/33 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25735 (0x6487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 8 12:21:37 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63e393d1-05fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:64:67:f8:ba:67:e3:d1:0c:a2:6c:05:7f:ba:
a9:16:ad:55:80:d3:6d:ab:25:4e:47:3a:28:e2:07:
cb:ba:10:23:c9:1a:a6:6b:7b:f3:10:28:ca:fc:0f:
4f:fb:d0:c5:43:26:a4:e7:db:93:96:6f:79:59:a8:
01:dd:cc:78:f1:71:e2:03:b4:99:c7:72:8b:3b:67:
2f:58:52:95:4c:e3:38:cd:55:c4:45:79:9e:f6:ff:
96:b4:46:85:5c:2f:83:26:f4:4e:3a:bd:66:6a:18:
14:b3:70:ba:9f:0c:87:14:74:43:45:cb:70:5a:6e:
d7:17:e2:4a:e5:03:76:db:ef:52:aa:89:bc:d0:00:
53:a9:35:4c:89:c8:31:e9:cd:14:cb:56:9e:d7:4d:
58:b0:66:4e:22:88:91:48:62:5b:52:2c:a8:ac:e4:
9e:1a:6f:07:20:07:7e:f9:da:af:9c:97:0e:1e:1e:
5c:f7:06:17:c0:3b:43:cd:28:25:4a:29:57:dd:28:
07:02:01:0e:86:fa:f9:1c:e6:ad:a4:f2:8d:b5:aa:
0d:d6:88:ac:1c:2d:64:f2:82:1d:84:89:a2:be:e0:
b3:04:c0:d3:14:82:2e:8b:0e:09:f4:e2:9d:1f:a4:
bd:6a:b9:c5:e7:ea:1b:22:18:c6:88:b8:79:23:b0:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:31:95:39:AE:6D:F3:11:40:67:1B:F9:76:73:06:A4:3C:0F:A5:5A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/223C7666A7AB11ED8CD18C33C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.117.180.0/22
103.18.72.0/22
103.69.12.0/22
103.84.184.0/22
103.88.56.0/22
103.138.8.0/24
103.147.0.0/23
103.153.12.0/24
103.157.4.0/23
103.157.10.0/23
103.164.46.0/23
103.165.28.0/23
103.165.102.0/23
103.170.158.0/23
103.225.56.0/22
150.129.44.0/22
IPv6:
2001:df0:8000::/48
2407:c140::/32
Signature Algorithm: sha256WithRSAEncryption
6a:8b:67:4a:25:6e:a8:81:2c:f8:37:83:77:ae:5b:77:d0:b7:
a0:22:28:0d:e5:ae:3c:68:57:68:02:6d:76:8d:11:63:7b:de:
a0:fe:b5:71:72:b6:e7:89:95:63:49:23:4a:ab:9b:ac:bd:a1:
57:c6:cf:c8:38:2a:e2:64:05:36:92:78:09:e9:7c:3f:f4:b6:
7c:85:01:28:da:72:02:4e:07:64:7e:f2:b0:f3:5d:4a:12:a6:
c9:76:0a:b0:f7:c8:17:0b:c9:13:59:46:2f:74:62:ad:3c:d2:
22:cd:ad:fa:fa:8f:95:d2:df:ab:32:7a:a2:25:b2:34:bb:de:
2a:ba:eb:98:84:ad:93:04:44:4e:4e:80:e3:e6:7e:fd:20:27:
cf:ed:74:a7:0b:bd:03:88:e5:a2:2d:93:ec:1c:5a:ed:11:6d:
97:8e:65:19:7a:67:6d:7d:96:fa:f9:00:84:49:94:c5:01:82:
43:7b:16:16:b2:86:6b:48:35:21:32:83:33:1b:46:88:8c:64:
17:73:a5:7b:70:fc:ca:06:1b:74:26:5f:2d:cd:08:8b:73:93:
4c:e2:00:99:87:75:66:29:3e:32:ab:5d:f4:ff:22:06:75:02:
fe:bf:78:43:b2:69:75:2a:53:34:95:46:78:55:5d:dd:0e:5f:
ee:35:9d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:56 2025 by rpki-client