Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30398D78B7BF11EF8558060BC4F9AE02.roa
File: 30398D78B7BF11EF8558060BC4F9AE02.roa (raw, json)
Hash identifier: dnC28fhxnLjhuA7mBrKDAocJa7Aeutf1qXTRLzS2C7s=
Subject key identifier: 87:9D:21:4A:40:32:FA:15:2E:D5:3F:30:0A:AC:15:95:86:B3:BA:61
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9EDA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30398D78B7BF11EF8558060BC4F9AE02.roa
Signing time: Wed 11 Dec 2024 12:55:25 +0000
ROA not before: Wed 11 Dec 2024 12:55:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132453
IP address blocks: 103.21.184.0/22 maxlen: 24
103.57.71.0/24 maxlen: 24
103.227.68.0/22 maxlen: 22
103.227.68.0/24 maxlen: 24
103.227.69.0/24 maxlen: 24
103.227.70.0/24 maxlen: 24
103.227.71.0/24 maxlen: 24
103.240.192.0/22 maxlen: 22
103.240.192.0/24 maxlen: 24
103.240.193.0/24 maxlen: 24
103.240.194.0/24 maxlen: 24
103.240.195.0/24 maxlen: 24
103.240.232.0/22 maxlen: 22
103.240.232.0/24 maxlen: 24
103.240.233.0/24 maxlen: 24
103.240.234.0/24 maxlen: 24
103.240.235.0/24 maxlen: 24
103.240.236.0/22 maxlen: 22
103.240.236.0/24 maxlen: 24
103.240.237.0/24 maxlen: 24
103.240.238.0/24 maxlen: 24
103.240.239.0/24 maxlen: 24
103.245.12.0/22 maxlen: 22
103.245.12.0/24 maxlen: 24
103.245.13.0/24 maxlen: 24
103.245.14.0/24 maxlen: 24
103.245.15.0/24 maxlen: 24
103.248.84.0/22 maxlen: 22
103.248.84.0/24 maxlen: 24
103.248.85.0/24 maxlen: 24
103.248.86.0/24 maxlen: 24
103.248.87.0/24 maxlen: 24
103.252.216.0/22 maxlen: 22
103.252.216.0/24 maxlen: 24
103.252.217.0/24 maxlen: 24
103.252.218.0/24 maxlen: 24
103.252.219.0/24 maxlen: 24
103.253.172.0/22 maxlen: 22
103.253.172.0/24 maxlen: 24
103.253.173.0/24 maxlen: 24
103.253.174.0/24 maxlen: 24
103.253.175.0/24 maxlen: 24
111.125.196.0/22 maxlen: 24
150.129.180.0/22 maxlen: 22
150.129.180.0/24 maxlen: 24
150.129.181.0/24 maxlen: 24
150.129.182.0/24 maxlen: 24
150.129.183.0/24 maxlen: 24
150.129.236.0/22 maxlen: 22
150.129.236.0/24 maxlen: 24
150.129.237.0/24 maxlen: 24
150.129.238.0/24 maxlen: 24
150.129.239.0/24 maxlen: 24
150.129.248.0/22 maxlen: 22
150.129.248.0/24 maxlen: 24
150.129.249.0/24 maxlen: 24
150.129.250.0/24 maxlen: 24
150.129.251.0/24 maxlen: 24
150.242.60.0/22 maxlen: 22
150.242.60.0/24 maxlen: 24
150.242.61.0/24 maxlen: 24
150.242.62.0/24 maxlen: 24
150.242.63.0/24 maxlen: 24
150.242.64.0/22 maxlen: 22
150.242.64.0/24 maxlen: 24
150.242.65.0/24 maxlen: 24
150.242.66.0/24 maxlen: 24
150.242.67.0/24 maxlen: 24
150.242.72.0/22 maxlen: 22
150.242.72.0/24 maxlen: 24
150.242.73.0/24 maxlen: 24
150.242.74.0/24 maxlen: 24
150.242.75.0/24 maxlen: 24
150.242.84.0/22 maxlen: 22
150.242.84.0/24 maxlen: 24
150.242.85.0/24 maxlen: 24
150.242.86.0/24 maxlen: 24
150.242.87.0/24 maxlen: 24
150.242.172.0/22 maxlen: 22
150.242.172.0/24 maxlen: 24
150.242.173.0/24 maxlen: 24
150.242.174.0/24 maxlen: 24
150.242.175.0/24 maxlen: 24
2400:80c0::/32 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40666 (0x9eda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 11 12:55:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67598bbd-ac98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:3a:05:17:37:46:9e:3f:d6:01:bb:cd:79:
a1:24:db:11:4b:24:49:a3:92:4a:b0:46:fa:45:9e:
3a:8d:06:4f:52:ba:36:4c:3f:4c:a3:5a:c1:c2:ec:
00:d5:6e:ba:b4:06:20:2e:20:fa:e2:c6:79:78:8b:
de:f3:64:65:8e:98:ce:16:57:71:8d:08:8a:23:17:
71:dc:3d:28:02:f5:27:b2:35:cf:f1:e0:75:9e:4b:
3b:8f:45:6a:8c:1d:01:82:23:cd:71:18:ad:ee:62:
16:5d:f9:a7:f6:16:d4:e7:e0:1f:90:6a:d8:65:5e:
7a:b0:76:b8:ec:d0:b4:87:33:16:08:54:22:77:d2:
34:2a:a9:31:ae:4b:41:35:60:d9:36:68:a3:45:9b:
d1:54:9d:3f:36:08:94:21:76:2d:c6:e4:cf:6d:aa:
a7:de:38:c6:85:c5:10:3e:a4:3a:a0:b0:dc:01:fc:
dd:a3:57:17:3b:72:94:31:93:d9:2b:a4:f5:b4:c0:
07:8e:d2:a1:c2:f1:bb:fc:c6:24:97:94:7f:fa:1c:
3b:c9:1a:e3:c2:2d:24:e6:2e:75:dd:d5:f9:97:61:
a2:69:21:a2:37:5f:2b:c4:f8:b8:b6:c6:e2:13:62:
83:f0:73:dd:2e:fb:6e:82:0d:31:22:72:74:c5:22:
a4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:9D:21:4A:40:32:FA:15:2E:D5:3F:30:0A:AC:15:95:86:B3:BA:61
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/30398D78B7BF11EF8558060BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.184.0/22
103.57.71.0/24
103.227.68.0/22
103.240.192.0/22
103.240.232.0/21
103.245.12.0/22
103.248.84.0/22
103.252.216.0/22
103.253.172.0/22
111.125.196.0/22
150.129.180.0/22
150.129.236.0/22
150.129.248.0/22
150.242.60.0-150.242.67.255
150.242.72.0/22
150.242.84.0/22
150.242.172.0/22
IPv6:
2400:80c0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:d5:46:4f:b7:bd:c3:a8:eb:97:c0:35:fc:1d:f7:53:96:94:
93:4d:22:d1:17:b1:52:63:08:a6:49:54:47:a0:0a:d7:56:04:
07:99:70:df:ac:82:93:47:24:67:72:80:bc:a4:83:b7:35:a5:
ef:e9:32:50:a8:c9:4c:f5:4a:3d:a7:0f:21:69:2f:97:ff:3e:
1f:58:b6:08:34:5d:ad:a5:22:5c:9d:be:66:0b:68:07:0a:38:
8e:0b:b5:20:05:b0:b3:e9:63:03:e8:71:e2:19:82:8a:2f:da:
84:0b:1b:98:f4:21:0c:e5:b7:18:d0:d9:0a:cf:85:f6:00:cc:
55:67:19:7f:0b:7e:a7:f5:ab:e0:87:4f:1a:58:f6:ab:5e:86:
9c:1a:74:a5:ac:26:bc:06:da:3a:d8:81:ad:2f:15:2b:7c:d9:
64:d4:ea:95:bb:25:7b:36:21:c3:63:77:67:ea:b6:b0:bc:e9:
a1:2a:e3:7e:8a:0c:34:85:d4:9b:ea:5f:e3:34:25:74:2b:e8:
0a:03:b3:4c:3b:20:74:f8:9f:e1:86:d4:20:09:2d:1f:8a:e0:
2d:ff:dc:09:6f:bc:cf:dd:87:90:4c:81:99:4e:02:8a:dc:30:
ea:b0:28:6c:8d:a3:e1:01:f8:32:a8:3d:d2:e0:b6:73:a3:1c:
96:5c:a2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:53 2025 by rpki-client