Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42AA477CC6AB11EF9ED5FA11C4F9AE02.roa
File: 42AA477CC6AB11EF9ED5FA11C4F9AE02.roa (raw, json)
Hash identifier: TirF101YT/KWWBn7uiQ20HCF3KybogcVHrNen8TMR18=
Subject key identifier: F9:C1:2A:1E:16:60:ED:95:AF:77:17:23:DC:83:60:04:18:92:F2:EF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A0D7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42AA477CC6AB11EF9ED5FA11C4F9AE02.roa
Signing time: Mon 30 Dec 2024 16:31:32 +0000
ROA not before: Mon 30 Dec 2024 16:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.87.28.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.129.192.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.156.122.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.195.196.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
103.241.180.0/22 maxlen: 24
137.59.200.0/22 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41175 (0xa0d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 30 16:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6772cae4-c2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:4a:20:bd:f3:40:f0:32:a0:3f:b7:5a:f8:
98:d8:87:e2:60:42:31:d0:26:ed:39:f1:7a:70:2f:
a5:af:88:a1:38:19:96:20:0b:dd:ab:b7:4c:f2:6a:
fb:a7:4c:20:9d:58:f7:38:98:75:58:98:e0:7d:ba:
7b:03:97:db:7e:d7:39:b6:83:a0:56:d8:ad:44:de:
7e:15:77:88:42:3c:cc:56:f1:a4:1f:c0:e0:2f:4b:
af:61:2b:8b:ac:b8:11:ad:98:81:1a:a0:5d:30:79:
a5:c8:27:d5:b5:30:d3:e0:bf:09:6d:35:14:fe:fd:
7f:a2:9a:3b:30:79:67:50:7e:0d:d6:c0:7a:2b:59:
7e:a7:7b:38:a2:93:22:6e:75:60:65:4b:5e:7a:de:
d9:c4:12:4b:7e:29:a7:12:94:ff:3c:8e:64:4f:e1:
3d:48:4e:01:cb:d6:ed:50:c5:97:b5:98:69:d9:cd:
db:41:ab:81:a8:aa:71:54:ec:8f:d1:f0:3c:18:3e:
1e:46:af:01:56:bd:0a:c7:8a:e4:42:ba:08:95:31:
4a:25:ec:e6:06:60:ba:bf:8d:dd:f6:30:86:ad:04:
78:d3:df:bc:02:d0:d4:92:f6:70:ea:81:36:ea:b9:
3f:d5:d0:5a:8a:c3:9e:66:37:a3:62:74:97:21:9c:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C1:2A:1E:16:60:ED:95:AF:77:17:23:DC:83:60:04:18:92:F2:EF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/42AA477CC6AB11EF9ED5FA11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.231.116.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.27.168.0/24
103.27.170.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.87.28.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.129.192.0/23
103.142.64.0/23
103.155.194.0/23
103.156.122.0/23
103.171.236.0/23
103.173.41.0/24
103.180.216.0/23
103.192.72.0/22
103.195.196.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.226.224.0/22
103.228.172.0/22
103.241.180.0/22
137.59.200.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
aa:0f:1a:65:37:a4:d3:96:e3:c4:09:0e:7e:32:e5:29:6c:32:
af:4c:dc:3a:76:32:53:b9:72:64:45:cb:10:10:ac:d8:a8:ee:
49:6a:d1:23:00:16:fa:f2:80:6f:09:c8:45:84:0b:38:76:a4:
fa:2f:94:14:3c:66:6e:b6:d9:c6:f9:10:aa:c0:78:40:ac:10:
b2:61:b0:80:f6:93:0e:3b:ec:7c:50:50:83:8d:67:62:9b:b3:
6f:94:74:d0:e9:8f:e3:e7:5f:69:0f:d1:ca:1f:b0:1c:b1:2e:
db:36:73:9f:93:7a:7f:c9:64:e9:00:44:75:8b:2f:82:97:06:
66:46:ee:00:d8:1e:67:2b:b7:eb:a2:5f:85:6d:43:67:12:3b:
f1:a0:75:bb:a9:42:4c:f6:bf:68:70:d5:f0:a9:da:a3:66:cb:
df:cd:b7:27:4e:c6:f3:d3:a8:35:89:0f:cb:dc:f6:48:1a:38:
ef:91:0b:5b:70:7f:a8:fc:43:56:33:a3:ba:b9:cc:01:d4:50:
29:27:25:d6:2b:c6:9b:2f:32:f4:50:e6:14:b0:b2:f1:c2:fa:
a5:3f:62:3d:0f:e7:f7:ae:de:eb:d0:17:0d:89:b8:6a:dc:bb:
fc:ec:d9:09:0b:25:78:00:27:3f:ea:5d:13:ab:75:d8:75:b4:
16:3c:00:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:16 2025 by rpki-client