Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E48B7F45F9B11EFA9BE6174C4F9AE02.roa
File: 2E48B7F45F9B11EFA9BE6174C4F9AE02.roa (raw, json)
Hash identifier: qjRDOZ2DyDfS8SWmo4Uri3rhzosc+FDhanBNEylUnm8=
Subject key identifier: AD:AD:DC:E1:39:D0:89:66:80:39:71:62:57:E9:0C:B2:91:1A:26:31
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9740
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E48B7F45F9B11EFA9BE6174C4F9AE02.roa
Signing time: Wed 21 Aug 2024 08:55:57 +0000
ROA not before: Wed 21 Aug 2024 08:55:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134026
IP address blocks: 45.115.104.0/22 maxlen: 24
103.55.88.0/22 maxlen: 24
103.70.200.0/22 maxlen: 24
103.92.112.0/24 maxlen: 24
103.160.72.0/23 maxlen: 24
103.169.156.0/24 maxlen: 24
103.171.222.0/23 maxlen: 24
103.177.174.0/24 maxlen: 24
103.179.222.0/23 maxlen: 24
103.184.70.0/23 maxlen: 24
103.209.220.0/22 maxlen: 24
2405:5c0::/32 maxlen: 32
2405:80c0::/32 maxlen: 32
2407:c8c0::/32 maxlen: 37
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38720 (0x9740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 21 08:55:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66c5ab9d-6fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:97:6c:9c:df:a2:13:b6:58:57:de:e7:69:49:
da:00:d7:a7:a5:18:f2:ac:eb:19:b1:18:d0:d6:54:
70:a0:68:a6:9d:c3:d3:7e:f1:ef:16:84:a4:72:4c:
86:06:f4:14:f0:af:0f:c6:f7:8b:29:b1:31:f9:d1:
bd:cc:68:e8:96:b8:e3:fa:10:26:07:10:0f:8d:ff:
29:ff:c5:92:1e:1d:66:e0:61:67:9c:e8:2f:8e:f0:
44:dc:b3:c9:b5:c7:97:b0:6a:9c:b3:ca:3f:8a:9d:
72:ef:bf:53:ff:03:fb:aa:bd:0a:9c:0e:af:e7:ea:
5e:6c:79:99:6a:bc:6c:a8:b8:1e:a0:9f:4a:c7:23:
d2:15:6b:25:45:3f:3a:ef:cd:ad:c4:ca:72:6b:be:
44:8f:fa:f7:47:4d:dc:33:93:b5:5e:ff:b1:da:be:
75:cc:3c:06:53:0b:c8:69:0a:aa:92:6b:05:19:d2:
3e:3d:c5:17:c6:68:2c:3f:30:4e:09:75:94:b6:96:
e4:dd:c3:a8:26:a1:22:a1:3e:4b:7b:65:bd:3b:f2:
c8:cb:b2:f4:83:ce:3b:66:63:7a:e6:6c:eb:6a:de:
bf:7c:d1:0c:b7:c7:1d:0f:dd:1c:69:3b:c4:b1:86:
03:c2:6e:c6:58:be:b4:44:8f:60:00:f3:09:35:9a:
e1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AD:DC:E1:39:D0:89:66:80:39:71:62:57:E9:0C:B2:91:1A:26:31
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2E48B7F45F9B11EFA9BE6174C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.104.0/22
103.55.88.0/22
103.70.200.0/22
103.92.112.0/24
103.160.72.0/23
103.169.156.0/24
103.171.222.0/23
103.177.174.0/24
103.179.222.0/23
103.184.70.0/23
103.209.220.0/22
IPv6:
2405:5c0::/32
2405:80c0::/32
2407:c8c0::/32
Signature Algorithm: sha256WithRSAEncryption
49:cf:0b:bc:75:d6:b6:c1:11:e9:9c:ed:c9:df:1a:84:f2:02:
00:ce:5a:f2:e3:bd:21:b6:c9:a9:a3:5a:3f:a4:85:27:2a:44:
5d:ac:cb:5d:09:fa:0b:89:d3:c5:ae:b7:34:e6:83:09:2c:5b:
5c:a1:92:1c:62:c8:60:85:a9:88:a6:9f:e2:47:8d:36:db:7a:
e9:49:a7:18:59:f0:cc:31:3d:fe:d6:e6:46:9b:24:c4:ae:e3:
dc:3e:07:de:27:2d:48:03:e8:2a:00:7c:11:78:98:d6:51:0b:
d7:79:40:e5:72:96:b3:01:0e:90:c4:7c:19:2f:1a:be:a2:ce:
46:55:a1:3d:6f:4a:c5:51:04:8c:51:90:e6:57:1a:b1:7e:09:
72:31:35:e2:ee:98:16:c2:2b:41:7f:98:14:32:7b:be:1b:f4:
89:20:e7:02:04:4a:96:90:e5:57:ba:7d:34:af:94:0c:d0:8a:
1a:4a:5d:b9:6b:8d:f7:b3:be:e8:fc:9b:07:1b:26:b5:5e:eb:
0f:1e:a0:97:8e:3b:7e:d6:62:88:51:e8:96:54:0a:76:4b:08:
e6:d2:c1:07:71:8d:ec:53:ad:bd:cd:51:8d:9a:f6:ed:28:38:
87:f7:2c:6b:9c:37:2d:b7:21:e3:2f:d4:9a:0d:9f:34:4e:08:
74:6c:ce:f4
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgIDAJdAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDgyMTA4NTU1N1oXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjZjNWFiOWQtNmZkNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALCXbJzfohO2WFfe52lJ2gDXp6UY8qzrGbEY0NZUcKBopp3D037x7xaEpHJM
hgb0FPCvD8b3iymxMfnRvcxo6Ja44/oQJgcQD43/Kf/Fkh4dZuBhZ5zoL47wRNyz
ybXHl7BqnLPKP4qdcu+/U/8D+6q9CpwOr+fqXmx5mWq8bKi4HqCfSscj0hVrJUU/
Ou/NrcTKcmu+RI/690dN3DOTtV7/sdq+dcw8BlMLyGkKqpJrBRnSPj3FF8ZoLD8w
Tgl1lLaW5N3DqCahIqE+S3tlvTvyyMuy9IPOO2ZjeuZs62rev3zRDLfHHQ/dHGk7
xLGGA8Juxli+tESPYADzCTWa4RcCAwEAAaOCAu4wggLqMB0GA1UdDgQWBBStrdzh
OdCJZoA5cWJX6QyykRomMTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJFNDhCN0Y0
NUY5QjExRUZBOUJFNjE3NEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMHgGCCsGAQUFBwEHAQH/
BGkwZzBIBAIAATBCAwQCLXNoAwQCZzdYAwQCZ0bIAwQAZ1xwAwQBZ6BIAwQAZ6mc
AwQBZ6veAwQAZ7GuAwQBZ7PeAwQBZ7hGAwQCZ9HcMBsEAgACMBUDBQAkBQXAAwUA
JAWAwAMFACQHyMAwDQYJKoZIhvcNAQELBQADggEBAEnPC7x11rbBEemc7cnfGoTy
AgDOWvLjvSG2yamjWj+khScqRF2sy10J+guJ08WutzTmgwksW1yhkhxiyGCFqYim
n+JHjTbbeulJpxhZ8MwxPf7W5kabJMSu49w+B94nLUgD6CoAfBF4mNZRC9d5QOVy
lrMBDpDEfBkvGr6izkZVoT1vSsVRBIxRkOZXGrF+CXIxNeLumBbCK0F/mBQye74b
9Ikg5wIESpaQ5Ve6fTSvlAzQihpKXblrjfezvuj8mwcbJrVe6w8eoJeOO37WYohR
6JZUCnZLCObSwQdxjexTrb3NUY2a9u0oOIf3LGucNy23IeMv1JoNnzROCHRszvQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:36 2025 by rpki-client