Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45872474BB6B11EFBB8A6455C4F9AE02.roa
File: 45872474BB6B11EFBB8A6455C4F9AE02.roa (raw, json)
Hash identifier: gizsCxPmdCnkHoeOd8cLtF2ZuolKzSzHsIB5Bk3t4wg=
Subject key identifier: A6:0A:D1:57:F3:D4:59:68:EC:A7:35:BE:21:E3:8C:F0:33:F4:67:0C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9F1E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45872474BB6B11EFBB8A6455C4F9AE02.roa
Signing time: Mon 16 Dec 2024 05:04:48 +0000
ROA not before: Mon 16 Dec 2024 05:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133272
IP address blocks: 103.239.235.0/24 maxlen: 24
2404:3b40::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40734 (0x9f1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 16 05:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=675fb4ef-9dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:c5:d5:32:3f:9f:e8:0b:52:82:5b:f6:aa:
c9:0f:27:7d:ad:db:b4:09:26:c6:42:87:37:6c:7f:
2e:9c:fd:cf:a1:d8:a8:0d:81:41:03:84:27:b6:78:
99:2a:42:dd:8c:ff:b2:99:83:e3:d6:a0:a5:b1:dd:
cd:b2:fc:69:f9:30:c4:2e:43:c4:4e:93:60:52:a8:
b7:fd:dc:1c:62:b8:e6:28:65:30:44:22:b9:f3:0a:
fd:dc:db:48:26:39:ad:5d:7a:cc:b9:55:31:a4:2e:
8c:cd:12:1b:ab:43:2c:77:ed:3a:de:92:e4:fa:24:
e9:52:4a:f9:73:e4:11:e6:fc:8c:f2:18:cf:c3:4d:
a2:35:03:1a:d7:a6:02:1f:37:55:cb:0f:28:56:dc:
70:69:5e:27:63:ea:71:d2:18:9a:60:50:12:b9:2b:
73:d5:2d:7f:45:bb:0e:9d:6f:5d:b6:33:f7:1b:6d:
9b:ee:07:16:53:67:d8:6b:58:f9:80:86:d2:8c:2f:
94:51:11:20:99:92:66:86:d3:1a:98:77:36:40:99:
97:7c:7c:85:b8:12:b0:1e:a2:e0:e3:38:fd:13:2a:
e9:03:ed:02:16:f9:bd:d1:af:df:42:15:83:20:fe:
48:2a:32:2d:36:fd:d3:7d:b0:c1:47:85:5d:62:3a:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0A:D1:57:F3:D4:59:68:EC:A7:35:BE:21:E3:8C:F0:33:F4:67:0C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45872474BB6B11EFBB8A6455C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.239.235.0/24
IPv6:
2404:3b40::/32
Signature Algorithm: sha256WithRSAEncryption
42:7c:c0:d0:78:e3:91:1a:b8:81:43:e8:dd:87:9a:53:75:a6:
7a:a4:c4:fb:57:04:37:f7:c2:d6:ba:4d:41:ef:b1:77:c7:0e:
3d:1b:ec:cf:35:dc:52:09:a1:da:c9:0e:57:35:4f:4a:40:90:
55:c8:b4:b9:a9:37:7b:44:cf:c4:39:05:84:57:c6:2d:35:88:
5c:16:6d:cf:dd:9a:52:8c:fb:fc:64:91:ec:87:d4:6a:3b:59:
64:c0:b3:b3:9f:47:7c:67:32:59:64:c1:62:8d:b1:18:08:2f:
ea:fa:7c:10:02:1b:a9:44:93:59:2e:c3:a2:69:04:42:d1:0f:
69:36:ae:c7:8a:c6:0c:2e:67:f6:4b:be:3c:5a:ea:f3:33:97:
fb:78:c0:a4:cd:b9:b0:0a:74:03:37:f4:5f:ff:4c:0e:96:30:
3d:cb:3a:3e:ba:7c:8f:53:71:17:38:e2:45:f3:0c:be:b2:16:
62:09:f3:cf:4b:6a:8e:3c:69:89:69:46:22:03:d2:6f:7f:38:
56:b9:d2:1a:4e:fd:b0:35:3d:79:3e:c6:c6:0b:52:75:2c:06:
04:1e:75:15:0c:8b:a8:82:a3:1b:72:74:26:64:91:58:27:10:
94:56:fb:36:ba:dd:80:48:7f:a7:4f:7c:50:27:0a:db:65:41:
d8:8f:1c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:11 2025 by rpki-client