Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37D1E84AAB5611ED92BF837EC4F9AE02.roa
File: 37D1E84AAB5611ED92BF837EC4F9AE02.roa (raw, json)
Hash identifier: S+wbYyMUAo8z5rVsBLK8jz0280MJIRCC3+DSrLkBxFY=
Subject key identifier: 47:FC:62:2E:EB:E5:C0:8B:83:78:BE:F1:51:E6:89:BD:40:44:7D:06
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 64B5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37D1E84AAB5611ED92BF837EC4F9AE02.roa
Signing time: Mon 13 Feb 2023 04:23:51 +0000
ROA not before: Mon 13 Feb 2023 04:23:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135192
IP address blocks: 103.218.132.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25781 (0x64b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 13 04:23:51 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63e9bb57-01a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:fa:4d:54:6a:c4:ed:3a:bc:fa:cc:3a:41:
24:77:ae:bd:b8:ab:28:f7:36:78:68:d3:a5:c8:9d:
74:b7:db:7a:0e:7c:7d:b2:66:23:14:c0:43:c4:b8:
b3:44:66:d1:a7:b6:74:ae:d6:8e:9b:99:90:61:4b:
a5:a9:ec:cb:4c:9c:76:a7:61:aa:4d:49:bd:b3:5e:
59:f7:ec:4a:ac:47:5f:ac:ec:18:bb:b7:6a:4d:3e:
22:3b:4e:10:56:e7:31:ae:7b:2b:89:35:cb:7e:01:
7c:b8:d7:36:a5:98:17:4e:94:fe:02:bc:1f:36:7c:
97:62:35:bd:7e:81:e3:17:1d:22:cb:71:4a:4b:37:
08:b5:76:be:cd:01:6e:4a:d7:11:55:67:6f:31:18:
a3:f8:fb:00:b3:dd:73:be:5d:6b:07:db:9f:55:b7:
7b:c1:91:61:4e:59:db:5b:ea:3f:5e:b7:0d:b1:5e:
4f:88:40:06:ce:ed:ce:1c:8a:8f:48:5a:d3:5b:f7:
e3:c8:79:c9:55:99:4e:2b:ae:8a:f9:64:22:5c:9e:
01:14:57:bf:86:2e:aa:e3:3a:33:48:00:a2:53:7f:
0b:7f:ac:b5:2b:9d:ea:b1:cd:6b:6d:d9:df:e1:7f:
c3:80:bf:a4:13:4e:93:a9:b4:23:53:a4:17:4b:c3:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FC:62:2E:EB:E5:C0:8B:83:78:BE:F1:51:E6:89:BD:40:44:7D:06
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/37D1E84AAB5611ED92BF837EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.218.132.0/22
Signature Algorithm: sha256WithRSAEncryption
31:94:bd:74:90:02:7b:8d:98:d7:7e:1e:48:90:21:54:7d:53:
51:ff:4b:ad:6e:8a:3b:65:21:3b:7d:98:35:b0:e2:bf:5f:fe:
72:ed:fe:31:23:f6:97:e4:99:4e:72:8b:eb:08:70:09:df:38:
fb:f5:ad:ee:1e:a6:6c:78:0c:cf:d3:19:1f:1c:f7:58:cd:d2:
77:ec:93:f3:27:18:78:21:4e:e9:84:d4:97:49:69:76:a6:81:
2a:52:7d:da:48:6b:78:68:3d:06:0e:e0:69:11:a1:c6:ae:97:
4b:f9:a3:b8:51:2a:60:a0:59:3a:4f:9c:1c:48:6b:d2:03:7e:
e4:25:30:3d:7c:46:ee:27:4e:d4:c3:8b:5f:6e:42:2a:b1:a4:
32:38:15:b1:e8:8d:75:14:28:a4:4e:54:31:c0:a4:26:c2:e0:
29:93:82:63:5b:b5:5e:cf:a4:69:4a:b3:ef:66:41:50:8c:74:
b5:4e:7d:f0:38:f6:e4:30:8c:76:2c:48:69:dc:94:94:8f:c5:
10:b9:b9:32:e6:bb:78:9a:cc:52:61:2d:5e:76:e5:53:98:df:
66:8f:06:93:d6:8f:58:92:55:b1:be:6e:0b:e6:c5:5a:06:46:
bb:8e:92:3d:df:11:48:4f:66:f1:11:9b:3e:9a:f9:ad:b0:1a:
cc:53:5d:69
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICZLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwMjEzMDQyMzUxWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2U5YmI1Ny0wMWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy5b6TVRqxO06vPrMOkEkd669uKso9zZ4aNOlyJ10t9t6Dnx9smYjFMBDxLiz
RGbRp7Z0rtaOm5mQYUulqezLTJx2p2GqTUm9s15Z9+xKrEdfrOwYu7dqTT4iO04Q
VucxrnsriTXLfgF8uNc2pZgXTpT+ArwfNnyXYjW9foHjFx0iy3FKSzcItXa+zQFu
StcRVWdvMRij+PsAs91zvl1rB9ufVbd7wZFhTlnbW+o/XrcNsV5PiEAGzu3OHIqP
SFrTW/fjyHnJVZlOK66K+WQiXJ4BFFe/hi6q4zozSACiU38Lf6y1K53qsc1rbdnf
4X/DgL+kE06TqbQjU6QXS8NFUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEf8Yi7r
5cCLg3i+8VHmib1ARH0GMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzdEMUU4NEFB
QjU2MTFFRDkyQkY4MzdFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn2oQwDQYJKoZIhvcNAQELBQADggEBADGUvXSQAnuNmNd+
HkiQIVR9U1H/S61uijtlITt9mDWw4r9f/nLt/jEj9pfkmU5yi+sIcAnfOPv1re4e
pmx4DM/TGR8c91jN0nfsk/MnGHghTumE1JdJaXamgSpSfdpIa3hoPQYO4GkRocau
l0v5o7hRKmCgWTpPnBxIa9IDfuQlMD18Ru4nTtTDi19uQiqxpDI4FbHojXUUKKRO
VDHApCbC4CmTgmNbtV7PpGlKs+9mQVCMdLVOffA49uQwjHYsSGnclJSPxRC5uTLm
u3iazFJhLV525VOY32aPBpPWj1iSVbG+bgvmxVoGRruOkj3fEUhPZvERmz6a+a2w
GsxTXWk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:37 2025 by rpki-client