Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FD6EEFEC9B511EFA1DFD34BC4F9AE02.roa
File: 2FD6EEFEC9B511EFA1DFD34BC4F9AE02.roa (raw, json)
Hash identifier: X5yQwD6S4Tnd5t8a5VjIqsx+vbmCRAcf/igEK229zeM=
Subject key identifier: 96:60:6C:D1:4A:EA:4D:A4:B4:EE:2C:1D:F5:1A:7D:B5:96:3A:2D:A1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A170
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FD6EEFEC9B511EFA1DFD34BC4F9AE02.roa
Signing time: Fri 03 Jan 2025 09:29:11 +0000
ROA not before: Fri 03 Jan 2025 09:29:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
45.121.108.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.41.28.0/22 maxlen: 24
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.124.38.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.195.196.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41328 (0xa170)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 3 09:29:11 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6777ade6-d1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:9f:1a:d4:f5:af:20:6f:5e:f3:34:65:53:
8a:59:d7:18:fc:4a:ed:3f:df:a9:cf:a6:82:4b:3c:
bd:8b:95:98:cd:5a:6d:c7:82:64:dd:0b:27:86:80:
75:18:18:94:80:09:63:c3:a2:46:b1:b3:5f:63:44:
e3:7d:f2:da:26:39:0b:bf:f7:f7:3d:dd:b8:aa:70:
07:4f:c1:16:31:45:63:02:23:9b:19:18:8f:b6:68:
ca:1f:29:e3:06:2c:02:6a:b8:1a:30:bc:a4:89:5a:
08:b9:8c:f2:9a:77:27:df:8e:88:69:37:23:cf:76:
63:11:54:52:b5:ac:02:89:65:be:7f:1f:00:cd:17:
c2:81:43:76:32:76:44:b7:da:9c:2b:48:9b:86:02:
25:44:9b:15:f2:3e:7d:37:c1:58:35:de:b2:0a:a4:
88:9c:56:f5:87:5d:4a:84:a7:b2:ff:90:a7:1d:38:
7d:d9:06:34:1a:28:f8:11:93:a8:9e:8c:97:48:a4:
4c:9c:53:6e:cc:83:d2:f6:8a:39:e0:ce:25:53:83:
18:fc:6e:b1:6b:a9:f6:2d:fc:a5:83:d9:81:a3:fd:
ee:9f:71:4e:5b:db:83:43:9a:97:2e:ed:52:b5:1e:
7b:75:57:85:b5:50:d3:58:9e:ec:c9:5c:89:fe:f6:
0c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:60:6C:D1:4A:EA:4D:A4:B4:EE:2C:1D:F5:1A:7D:B5:96:3A:2D:A1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2FD6EEFEC9B511EFA1DFD34BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.231.116.0/22
45.114.156.0/22
45.121.108.0/22
103.14.196.0/22
103.16.140.0/22
103.27.168.0/24
103.27.170.0/23
103.41.28.0/22
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.124.38.0/23
103.142.64.0/23
103.155.194.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.180.216.0/23
103.192.72.0/22
103.195.196.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.226.224.0/22
103.228.172.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
2c:00:c4:8f:01:e3:8f:b0:f7:9b:b0:2d:07:fe:50:ff:5b:9e:
fb:22:af:7a:ea:b0:ad:ed:91:42:f6:40:c0:6e:2d:1f:d8:31:
a3:96:9f:0d:84:6b:5c:7e:b5:5c:c1:bf:63:e2:f8:3c:e0:05:
b7:e1:be:9f:57:e2:ff:f0:6c:4f:6a:12:58:c4:62:08:e1:0e:
fb:a0:bd:c2:57:78:44:a7:83:11:c5:3b:f1:79:6d:18:e2:09:
a5:10:13:50:af:94:c1:8b:50:c2:cc:4d:87:92:bb:93:26:5d:
51:6f:12:d4:a4:16:c7:35:08:68:80:7c:b8:9e:f8:66:d1:af:
c1:d1:a2:99:29:8f:24:2f:b6:f2:aa:1a:87:1e:4e:28:15:dc:
30:75:90:a6:87:14:cb:cb:e3:78:fb:4e:04:9c:7c:7f:62:6c:
f1:eb:e6:ba:0a:b3:97:1b:33:41:6c:e0:54:4b:3f:e4:9a:5d:
56:7e:03:62:c3:dc:06:34:fa:ce:95:6d:b5:b6:32:9d:1a:dd:
99:16:fd:a6:6e:cb:34:70:76:42:e0:d7:cd:54:89:c1:c4:a5:
a5:a4:ef:06:f1:7e:01:b6:c4:06:41:2d:36:a6:5e:40:f1:df:
84:57:21:8d:23:7d:2c:82:e9:93:ce:f7:65:ba:74:1e:15:df:
09:62:e6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:46 2025 by rpki-client