Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4ECD1A5E9C5F11EB8D550436C4F9AE02.roa
File: 4ECD1A5E9C5F11EB8D550436C4F9AE02.roa (raw, json)
Hash identifier: MpWbLECXdt9nu9HdPoqg0z6GhJR59w1gpSR9zK8Zm6Y=
Subject key identifier: 87:25:26:46:30:DE:06:44:D1:1B:EC:4C:90:90:BE:E5:B3:EA:37:13
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8DB7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4ECD1A5E9C5F11EB8D550436C4F9AE02.roa
Signing time: Thu 30 May 2024 16:16:45 +0000
ROA not before: Thu 30 May 2024 16:16:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141818
IP address blocks: 103.139.223.0/24 maxlen: 24
103.164.242.0/23 maxlen: 24
2001:df6:ff80::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36279 (0x8db7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:16:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a66d-12c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:93:0e:62:c2:ea:48:93:5c:fb:c7:f8:57:
1a:86:e0:10:f3:ab:55:f2:55:24:4e:79:14:93:e5:
32:5a:d5:d4:7a:03:f7:1e:90:d1:af:a5:17:90:1c:
a4:ef:57:61:a5:77:a4:79:3e:40:e0:20:17:76:fa:
91:87:4c:ec:2b:e9:98:cf:82:14:1a:33:78:af:d8:
09:53:a6:48:b1:38:18:6c:f4:d7:77:51:83:6a:47:
4b:cb:c1:0c:0e:8b:f9:44:72:48:7b:16:53:b6:75:
d9:65:62:e1:4d:2c:1d:83:e6:94:0f:e5:ba:04:5d:
f0:3a:15:26:3e:b2:a3:10:53:c3:59:bb:47:cb:d7:
00:e3:9f:a7:69:20:0c:f4:72:b4:76:53:d7:78:1b:
ef:f7:17:0e:7b:92:de:6b:b8:11:50:d4:04:4e:b7:
ed:5f:bd:5e:68:0f:58:9d:36:bc:f5:cb:d9:68:5a:
4d:e8:c7:7e:0b:db:95:95:8b:db:c4:5a:51:59:2f:
c9:de:91:2f:80:bd:82:92:47:6e:53:f7:ba:b9:40:
76:3f:31:2b:1f:c2:7a:ee:db:9c:3e:fd:9f:60:e3:
c1:53:21:dc:43:69:fe:78:ac:55:50:cd:7a:f2:f5:
f8:e9:d4:98:af:ab:7b:aa:18:91:79:04:56:b1:8b:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:25:26:46:30:DE:06:44:D1:1B:EC:4C:90:90:BE:E5:B3:EA:37:13
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4ECD1A5E9C5F11EB8D550436C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.139.223.0/24
103.164.242.0/23
IPv6:
2001:df6:ff80::/48
Signature Algorithm: sha256WithRSAEncryption
35:15:10:b2:da:05:a2:9c:5b:bf:85:bc:15:f5:58:59:27:df:
ee:ff:e7:14:87:5b:31:f9:fa:a0:39:34:2f:c6:0d:97:07:e1:
7b:c9:fb:9f:65:8c:8a:26:67:aa:17:05:07:30:29:31:54:8f:
77:ce:1b:6f:0f:05:17:44:a2:f7:b7:f7:ca:8b:4b:05:b5:b1:
7a:ae:18:4f:43:7b:73:e6:5b:8e:29:a5:08:ae:c0:83:70:66:
b3:11:65:c2:d9:fb:9a:b1:de:3d:fe:26:6f:62:f0:24:d2:b4:
cc:10:9d:fd:0c:4f:03:09:79:32:ea:c2:13:2d:5c:54:d3:67:
ad:e9:1e:04:9f:da:a1:c8:d2:f0:66:69:58:1e:ee:63:24:07:
76:10:c2:40:c8:ec:85:2b:00:65:47:a0:30:d6:7a:f1:5f:de:
d7:d8:8d:09:04:db:a5:2c:1a:41:3d:f7:71:96:81:fb:73:f3:
f2:6b:c0:97:3d:6f:5e:f8:f8:b6:32:2d:a5:37:01:32:70:bc:
6d:dc:90:69:0e:12:be:1b:de:8c:be:b4:b7:96:5d:df:2f:dc:
d2:8d:25:06:73:f8:e7:a1:10:ab:fe:ba:a6:9e:d6:87:6e:2e:
2e:a4:0d:fa:be:dc:c4:90:ea:7c:16:29:c3:0f:8d:ee:f8:2f:
6e:45:ba:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:52 2025 by rpki-client