Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/424335D4B17C11EBAA206E6BC4F9AE02.roa
File: 424335D4B17C11EBAA206E6BC4F9AE02.roa (raw, json)
Hash identifier: phy4qY7brhLguyL8oVQOs1Ch/IY4nUotVSMtQQfyZIE=
Subject key identifier: 49:D9:47:A9:6A:2C:35:0E:97:1A:69:16:B6:71:FF:6E:22:A2:19:B2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9E44
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/424335D4B17C11EBAA206E6BC4F9AE02.roa
Signing time: Mon 02 Dec 2024 05:50:29 +0000
ROA not before: Mon 02 Dec 2024 05:50:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141805
IP address blocks: 103.109.136.0/22 maxlen: 22
103.109.136.0/24 maxlen: 24
103.109.137.0/24 maxlen: 24
103.109.138.0/24 maxlen: 24
103.109.139.0/24 maxlen: 24
103.165.170.0/23 maxlen: 24
2001:df6:6b80::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40516 (0x9e44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 2 05:50:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=674d4aa5-ebe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:61:cc:da:7c:37:69:c5:d5:03:05:23:a6:
a3:d8:ea:a4:6c:da:3f:45:7c:b1:fe:4d:3b:52:58:
30:06:f0:d9:58:8c:23:40:4a:c0:09:ef:9f:c0:7a:
92:3e:e0:13:0c:2e:db:18:2a:ea:b5:e7:af:ad:b6:
7d:06:ac:27:1e:35:18:de:cb:09:d3:50:52:d0:c0:
22:3b:27:75:0e:e4:56:38:a1:5c:e1:0b:5b:e7:77:
6d:4c:b6:7d:16:4e:22:23:21:07:98:96:cc:ad:4b:
44:48:38:b9:bf:9c:cc:80:37:98:e1:34:06:c5:80:
1b:5a:44:8b:4b:1d:45:b1:0e:fa:fe:9d:ee:e5:04:
3a:79:ef:3e:e8:63:a0:ea:6a:de:d7:6b:2e:a7:1d:
c6:32:02:19:54:fb:d5:b1:07:aa:da:fb:cd:64:48:
3c:fe:2a:e5:cb:6b:e3:9d:e6:e9:c6:4b:15:43:96:
88:44:8b:6c:46:bf:59:cf:77:c8:72:15:88:9c:27:
97:5e:24:51:62:b6:4b:41:3d:cb:e4:41:ea:f8:8d:
0d:be:c4:38:81:32:b0:0b:40:2f:d9:0d:60:ef:37:
e0:0a:1f:f2:4f:66:e5:58:1b:c1:61:fa:7d:41:07:
6b:02:1d:c3:1a:e5:ef:93:96:e8:8d:d8:13:7b:ed:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D9:47:A9:6A:2C:35:0E:97:1A:69:16:B6:71:FF:6E:22:A2:19:B2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/424335D4B17C11EBAA206E6BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.136.0/22
103.165.170.0/23
IPv6:
2001:df6:6b80::/48
Signature Algorithm: sha256WithRSAEncryption
1f:47:a3:e8:72:62:4b:ed:87:a9:fd:8c:05:1d:3f:8a:82:35:
11:6c:6b:e5:31:46:1a:cf:ed:83:76:b8:3b:31:56:32:19:f2:
d6:8d:cc:fd:47:f9:81:3f:3b:33:8a:2e:d5:b6:2e:65:e2:4e:
d7:27:ce:f8:b2:f3:c5:c1:fd:38:38:b9:fc:c2:c8:9c:0a:05:
cd:54:26:a9:c2:62:92:1d:93:60:da:ec:a4:4d:be:72:d3:2b:
10:08:95:c0:56:a7:51:5f:67:68:d4:ae:8b:18:73:db:5f:a2:
b6:89:c1:ea:84:0d:c3:33:88:c9:04:3c:0a:52:ee:55:ed:c2:
a5:33:40:d2:c4:fd:6b:c1:49:34:9c:3d:05:fb:10:3f:11:48:
7d:9a:c9:2e:da:60:06:e6:67:3a:4d:d9:3d:bf:60:e4:28:25:
06:a1:ee:ce:21:54:2a:31:46:0c:68:31:5a:88:b0:2f:38:a5:
5e:08:c1:a0:9c:b9:b0:16:11:8d:80:d0:71:23:13:38:cb:86:
9f:00:40:f9:9e:0a:c1:eb:23:a8:43:bd:e0:88:ed:6b:54:a1:
ec:84:ee:f9:a5:6f:9e:bd:df:aa:7a:54:77:28:5a:32:28:15:
c6:40:31:20:d0:97:c9:3e:09:7f:22:ff:d1:c0:7d:d4:1a:f1:
e6:31:e0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:00:23 2025 by rpki-client