Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45DAE918509811EE9BB84638C4F9AE02.roa
File: 45DAE918509811EE9BB84638C4F9AE02.roa (raw, json)
Hash identifier: HBCfz2msZ4mZmdHzfN2SfBhEYWCHLi871h6b+sGg/C8=
Subject key identifier: 0C:2F:66:B9:85:3C:23:88:FF:42:13:9E:24:F7:D1:DE:A6:70:5D:24
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 79F7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45DAE918509811EE9BB84638C4F9AE02.roa
Signing time: Mon 11 Sep 2023 11:42:23 +0000
ROA not before: Mon 11 Sep 2023 11:42:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140125
IP address blocks: 103.168.0.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.181.152.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31223 (0x79f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Sep 11 11:42:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64fefd1f-8428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3c:42:17:db:25:50:6f:9f:a6:cc:e5:a4:7a:
28:e0:b7:9f:10:8c:b3:76:9a:93:b7:02:9a:e9:54:
4e:64:a3:05:f4:c4:8f:f3:43:54:f6:e1:1f:15:86:
a9:0b:90:0d:f1:c9:44:7c:64:e1:82:ab:f6:51:a7:
eb:29:86:9c:c4:4f:36:1d:64:c3:ce:7f:0b:72:33:
a7:11:42:51:d6:52:02:42:79:c4:b8:6f:c3:25:4f:
5d:ca:c1:c4:be:c2:ec:05:21:7e:5b:cb:25:59:be:
4e:c3:f2:68:f7:8f:ca:8d:b3:77:e2:49:69:9e:2f:
e4:3f:f0:bf:8a:42:1d:dd:53:6f:f3:2d:f4:9b:ea:
8b:6b:d3:e5:63:89:db:a0:30:23:ab:18:4d:45:84:
ac:bb:17:02:78:30:b3:45:6f:56:06:fd:30:15:3f:
23:f3:4e:a1:72:c3:ad:f9:f7:c9:72:53:9a:9d:04:
91:56:38:b5:ef:52:29:5d:6e:5e:de:e1:6e:f2:11:
03:6a:da:d1:05:84:f9:17:7d:c8:a4:84:f2:70:18:
98:88:cc:48:cc:4b:04:b0:87:b0:41:7a:64:4e:a5:
89:30:98:26:5f:d4:32:e9:bc:6f:ad:97:11:b0:fb:
41:35:34:b9:f1:c7:b2:c0:c4:27:ae:6f:3e:fc:e3:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2F:66:B9:85:3C:23:88:FF:42:13:9E:24:F7:D1:DE:A6:70:5D:24
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/45DAE918509811EE9BB84638C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.0.0/23
103.173.14.0/23
103.179.94.0/23
103.181.152.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:ac:36:4c:66:9c:42:47:ce:36:5d:fc:a5:e8:95:bb:91:19:
68:a5:3c:40:9c:6e:f9:90:5b:c2:b4:52:cf:6e:c0:29:73:97:
ba:46:a0:2b:ed:83:15:dc:ff:18:17:a6:fe:59:0f:ee:51:23:
8c:67:e3:d8:b0:4c:c0:86:79:2e:bc:ab:ec:b1:74:bf:2c:e8:
2c:ea:9a:b1:75:89:7a:28:49:aa:92:f4:89:c9:9e:e2:b3:fc:
4b:57:a5:49:3c:7d:7e:85:33:5b:82:bb:28:7b:cb:5e:fd:28:
fe:36:cd:6a:7b:55:c1:03:a4:c1:55:c4:22:af:8c:78:e7:62:
eb:3f:a7:83:cc:5e:35:41:01:f6:89:f9:fc:c7:00:6f:49:93:
93:26:22:97:e6:6e:a5:e3:b9:93:9c:e7:7f:39:ca:a6:c1:90:
09:05:e9:c0:4a:15:62:a1:24:45:d5:9a:84:33:eb:4c:ab:c6:
3b:49:bd:ae:5c:37:9f:a2:53:6a:fe:f3:b4:b4:6c:49:1f:a3:
e3:a2:01:ab:e2:c2:a8:7c:32:41:d6:36:61:05:d1:40:16:c2:
82:34:9c:e8:be:1b:cb:cc:29:ae:fb:0a:a9:27:ba:c1:66:71:
9e:53:b1:0d:56:b4:c5:40:15:94:fc:dc:c3:f8:46:23:27:d6:
99:bd:a8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:14 2025 by rpki-client