Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D4657BC2D3F11EF837A1870C4F9AE02.roa
File: 4D4657BC2D3F11EF837A1870C4F9AE02.roa (raw, json)
Hash identifier: xKfURB8zCJDxmncgb3F5OiW69vGlg5Tj8aNR/C+nZDk=
Subject key identifier: 58:DC:E4:C8:AE:00:F0:A7:59:E6:7A:B2:F0:5B:17:0F:D1:EC:57:DB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9ED7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D4657BC2D3F11EF837A1870C4F9AE02.roa
Signing time: Wed 11 Dec 2024 11:18:11 +0000
ROA not before: Wed 11 Dec 2024 11:18:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59191
IP address blocks: 45.120.56.0/22 maxlen: 24
103.115.236.0/23 maxlen: 24
103.118.164.0/22 maxlen: 24
103.139.224.0/23 maxlen: 24
103.157.112.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.173.252.0/23 maxlen: 24
103.183.104.0/23 maxlen: 24
103.218.132.0/22 maxlen: 24
113.30.168.0/22 maxlen: 24
2400:6220::/32 maxlen: 36
2407:f440::/32 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40663 (0x9ed7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 11 11:18:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=675974f3-6835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:67:7c:b7:54:9a:4a:23:68:89:72:18:8c:
2a:86:aa:d9:bf:8d:36:01:96:63:94:4d:f6:d3:b0:
fc:71:4d:83:1b:ee:e1:52:1d:8c:e5:85:d2:88:91:
a2:88:cf:96:04:b2:14:72:1e:ab:56:a7:ba:8d:89:
49:65:fc:10:86:3c:81:ed:2b:4d:42:b6:e2:c7:a4:
ba:63:cf:cc:ea:a7:f2:41:4f:b8:f9:2b:e1:c5:ce:
be:06:91:9a:84:96:b5:87:ba:cf:19:b4:97:26:27:
9f:9c:12:4b:1f:07:ba:03:cf:d1:19:b4:a4:c0:7f:
94:30:6b:e4:fb:5d:49:e6:87:f0:d8:72:66:b0:9c:
4a:f8:a0:19:59:72:d1:f0:2c:e5:8a:e0:66:e3:b3:
2d:fe:07:83:87:9f:71:bf:b7:ec:cc:85:89:96:cc:
65:e9:af:f6:2b:6b:2d:d5:dc:85:06:bf:57:d6:56:
b3:75:02:c1:06:a0:83:7c:fd:cf:b5:a3:6b:04:fa:
f9:b7:e6:15:f0:bc:a4:18:54:a1:d9:b6:60:90:28:
4c:08:1e:4e:51:c5:ce:89:e0:b7:a9:81:4a:25:e8:
85:87:d2:cb:7d:31:e7:17:a3:08:1b:d1:51:ca:61:
72:43:ba:6c:d3:e6:e9:20:fa:8e:fe:d7:86:9f:60:
51:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DC:E4:C8:AE:00:F0:A7:59:E6:7A:B2:F0:5B:17:0F:D1:EC:57:DB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4D4657BC2D3F11EF837A1870C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.120.56.0/22
103.115.236.0/23
103.118.164.0/22
103.139.224.0/23
103.157.112.0/23
103.173.41.0/24
103.173.252.0/23
103.183.104.0/23
103.218.132.0/22
113.30.168.0/22
IPv6:
2400:6220::/32
2407:f440::/32
Signature Algorithm: sha256WithRSAEncryption
75:60:80:ec:9d:d6:8f:e6:7b:2b:15:38:04:1f:7e:65:a2:d2:
b7:49:4a:ca:5a:23:9b:1a:c0:87:ef:ab:e7:31:1b:f8:7f:b4:
e2:80:db:65:67:35:e4:ff:ec:63:ce:ba:1f:85:ea:b6:73:ce:
c8:63:53:89:ad:84:a3:77:f0:97:54:f1:7c:0e:66:4b:33:dd:
fa:e9:49:0d:aa:3b:3b:04:38:f3:80:96:77:96:04:07:3c:06:
ee:79:45:f3:76:13:82:13:ac:45:54:18:c9:c5:3f:4d:d3:b5:
f9:d4:a5:1a:52:17:18:17:6d:19:c4:a7:b9:25:be:11:3f:f3:
dd:ff:eb:a4:3c:b6:40:1a:92:38:cc:00:37:2b:bd:77:26:56:
69:81:dd:4e:f3:42:63:16:cb:6a:2d:3a:4e:4a:24:cc:94:a1:
a3:79:1c:08:f7:f1:8d:0f:e9:32:e2:57:95:e6:3f:9b:34:fc:
5f:b2:25:2a:d9:1b:4e:0c:d1:95:3f:2e:e6:1c:60:9a:f2:43:
fe:ac:37:69:fa:30:d9:3a:7d:ef:d4:67:89:f1:73:6a:85:c2:
53:2a:84:16:ca:39:e4:51:91:79:c1:b4:c1:54:61:7d:8b:bf:
40:b2:97:77:80:05:9d:2d:b1:85:9c:e5:da:18:89:a6:86:2b:
72:bd:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:51 2025 by rpki-client