Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F3A3FD0D35711EB9945B441C4F9AE02.roa
File: 2F3A3FD0D35711EB9945B441C4F9AE02.roa (raw, json)
Hash identifier: t3esUqAUWF/wdPHCwhHmK7MzPA7drqDBV6+KEQa2UJk=
Subject key identifier: BB:1C:27:68:DA:66:07:26:9B:65:C5:70:9B:9B:6C:49:7D:A2:56:7E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 913B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F3A3FD0D35711EB9945B441C4F9AE02.roa
Signing time: Thu 30 May 2024 16:31:19 +0000
ROA not before: Thu 30 May 2024 16:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 1.22.36.0/24 maxlen: 24
1.23.62.0/24 maxlen: 24
103.57.216.0/24 maxlen: 24
103.57.217.0/24 maxlen: 24
103.57.218.0/24 maxlen: 24
103.57.219.0/24 maxlen: 24
103.81.88.0/22 maxlen: 24
103.109.224.0/24 maxlen: 24
103.109.225.0/24 maxlen: 24
103.109.226.0/24 maxlen: 24
103.109.227.0/24 maxlen: 24
103.112.230.0/23 maxlen: 24
103.173.132.0/24 maxlen: 24
103.237.84.0/24 maxlen: 24
113.193.25.0/24 maxlen: 24
113.193.48.0/24 maxlen: 24
113.193.128.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37179 (0x913b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a9d6-b647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:8b:d1:4b:8c:8b:cb:8d:bf:f9:9b:24:d2:
70:18:52:49:b0:c1:ab:d5:14:d6:9b:d1:85:17:59:
cd:36:10:d9:09:28:dc:b5:73:d7:53:c5:2e:3b:ee:
ee:4e:17:c2:64:6f:e8:e7:b8:dc:74:e1:d8:df:f9:
12:06:fb:9e:98:78:c9:a4:18:22:d3:89:30:e5:24:
5d:e9:b1:14:48:c7:f9:a6:fe:94:86:37:9d:57:5a:
a4:c8:21:c6:db:08:24:1b:72:e6:08:b3:88:52:84:
50:38:7e:89:1d:32:e5:a1:e6:a1:5f:5d:3c:63:8c:
4f:e9:e9:2b:be:0c:54:17:9c:c6:38:ff:0a:d5:03:
50:dd:e2:4e:72:49:00:6f:8f:1e:ff:d6:7d:0a:11:
80:87:20:fa:b2:d5:41:ad:8d:ab:3c:22:1b:53:36:
fa:6c:9a:56:ec:10:b0:c9:a6:05:22:10:1a:cb:4b:
b9:3a:da:ee:76:76:78:67:7d:60:14:4b:00:8e:36:
2a:db:ec:4f:55:60:a0:08:b6:a3:93:dd:10:a6:cc:
94:5d:ed:84:c3:b5:a3:89:d4:10:74:2b:bc:64:c8:
fd:5f:6e:1f:91:ab:d1:40:a2:8c:bc:c3:9e:25:50:
0f:6a:9d:95:a8:4c:65:3b:f0:d7:6a:4e:c7:c6:4e:
cb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1C:27:68:DA:66:07:26:9B:65:C5:70:9B:9B:6C:49:7D:A2:56:7E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2F3A3FD0D35711EB9945B441C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.22.36.0/24
1.23.62.0/24
103.57.216.0/22
103.81.88.0/22
103.109.224.0/22
103.112.230.0/23
103.173.132.0/24
103.237.84.0/24
113.193.25.0/24
113.193.48.0/24
113.193.128.0/24
Signature Algorithm: sha256WithRSAEncryption
96:13:48:0b:d4:58:2d:87:33:77:93:b3:0f:91:41:56:cb:6e:
30:3e:c4:d6:c6:8f:35:30:99:f5:c6:a0:6b:41:ab:26:34:89:
fd:59:ca:4d:88:36:81:a7:ff:c3:ca:a6:1d:7f:f0:5b:94:18:
66:2e:e1:de:49:40:20:f6:54:08:a4:5d:e0:32:5d:eb:0a:cb:
20:92:df:c0:f9:01:66:bf:c8:46:a3:34:d8:4e:5b:b0:3e:32:
c6:d5:7c:22:82:9f:ed:94:1f:29:96:39:1d:e1:1f:79:b3:17:
4b:06:1d:12:b3:a0:58:de:26:fc:1b:17:54:ef:7b:9e:e3:2d:
da:58:c0:ae:fa:61:02:7c:28:c1:3c:b9:71:9f:5b:89:50:26:
35:e7:4f:99:56:8e:2b:89:2e:3e:57:33:27:bb:2b:3d:2f:c9:
24:3b:08:32:31:94:0a:3c:72:7c:e7:56:14:3b:de:fa:a8:8f:
7e:b6:74:3a:1d:9c:46:42:9d:29:a9:e4:af:4b:01:2e:ea:85:
88:53:2c:66:c9:8d:fc:72:43:12:cd:7b:a2:76:da:87:e1:45:
25:cc:e3:2c:cf:1b:b4:71:39:07:d1:7c:b2:00:20:b2:85:d6:
84:e9:b1:63:13:7a:b7:07:26:e1:79:b5:e3:2a:49:65:7e:58:
7f:1a:2a:31
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgIDAJE7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MzExOVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE5ZDYtYjY0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMbzi9FLjIvLjb/5myTScBhSSbDBq9UU1pvRhRdZzTYQ2Qko3LVz11PFLjvu
7k4XwmRv6Oe43HTh2N/5Egb7nph4yaQYItOJMOUkXemxFEjH+ab+lIY3nVdapMgh
xtsIJBty5giziFKEUDh+iR0y5aHmoV9dPGOMT+npK74MVBecxjj/CtUDUN3iTnJJ
AG+PHv/WfQoRgIcg+rLVQa2NqzwiG1M2+myaVuwQsMmmBSIQGstLuTra7nZ2eGd9
YBRLAI42KtvsT1VgoAi2o5PdEKbMlF3thMO1o4nUEHQrvGTI/V9uH5Gr0UCijLzD
niVQD2qdlahMZTvw12pOx8ZOyx8CAwEAAaOCAtEwggLNMB0GA1UdDgQWBBS7HCdo
2mYHJptlxXCbm2xJfaJWfjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzJGM0EzRkQw
RDM1NzExRUI5OTQ1QjQ0MUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBwEHAQH/
BEwwSjBIBAIAATBCAwQAARYkAwQAARc+AwQCZznYAwQCZ1FYAwQCZ23gAwQBZ3Dm
AwQAZ62EAwQAZ+1UAwQAccEZAwQAccEwAwQAccGAMA0GCSqGSIb3DQEBCwUAA4IB
AQCWE0gL1FgthzN3k7MPkUFWy24wPsTWxo81MJn1xqBrQasmNIn9WcpNiDaBp//D
yqYdf/BblBhmLuHeSUAg9lQIpF3gMl3rCssgkt/A+QFmv8hGozTYTluwPjLG1Xwi
gp/tlB8pljkd4R95sxdLBh0Ss6BY3ib8GxdU73ue4y3aWMCu+mECfCjBPLlxn1uJ
UCY150+ZVo4riS4+VzMnuys9L8kkOwgyMZQKPHJ851YUO976qI9+tnQ6HZxGQp0p
qeSvSwEu6oWIUyxmyY38ckMSzXuidtqH4UUlzOMszxu0cTkH0XyyACCyhdaE6bFj
E3q3BybhebXjKkllflh/Giox
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:15 2025 by rpki-client