Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F75E130BDCF11EA8755D90DC4F9AE02.roa
File: 4F75E130BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier: IlhHGOAJQOIr+mexPSQJj00zlLWWpMRvIPa+R2Bu4TU=
Subject key identifier: F3:71:E2:F8:9C:B1:1F:04:FD:FE:5A:F5:C0:58:E9:FB:5A:2E:62:EC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7EB1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F75E130BDCF11EA8755D90DC4F9AE02.roa
Signing time: Thu 23 Nov 2023 07:26:26 +0000
ROA not before: Thu 23 Nov 2023 07:26:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132757
IP address blocks: 45.251.232.0/22 maxlen: 24
103.141.92.0/23 maxlen: 24
103.166.109.0/24 maxlen: 24
103.220.208.0/22 maxlen: 24
103.240.26.0/23 maxlen: 24
2401:2ba0::/32 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32433 (0x7eb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 23 07:26:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655efea1-bfdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9e:75:3a:96:2d:b1:06:e8:35:4e:12:8d:bb:
69:fb:2d:84:e1:16:bc:fa:25:2d:0d:86:e9:0a:51:
14:6c:f4:53:63:00:61:6e:2b:2e:4b:f1:d1:e8:ca:
0e:94:86:f2:f5:e6:98:4f:9e:68:87:7e:0c:65:2d:
40:6e:d9:64:23:5c:60:6f:fd:1f:3b:e2:ee:55:d0:
47:14:31:54:36:d4:b7:4a:14:39:72:45:e1:32:2e:
83:30:09:f6:91:5b:f0:12:76:82:43:bc:79:a4:6c:
dd:42:6a:ec:80:41:9f:f5:ce:87:db:ea:cf:6a:be:
c4:a2:0c:fa:75:b1:66:89:39:23:05:22:ee:b5:a5:
06:98:9d:d8:33:37:2d:70:05:f6:30:cd:e2:10:c2:
49:53:ef:7b:70:36:2f:84:46:4c:dc:80:25:30:c8:
b0:c7:6b:ed:3f:1a:c8:26:15:6d:31:7f:31:85:2a:
7a:14:5f:23:91:ac:f8:e3:49:5e:cd:94:fe:10:4f:
ea:c3:87:b1:5a:d0:79:6e:5f:df:ec:43:46:f4:87:
ae:f0:fa:73:9a:4f:ef:31:45:56:fa:24:44:6e:ce:
71:dd:90:c9:41:fb:fe:5f:b7:44:2b:d0:40:db:24:
71:86:91:a4:7b:ed:2f:21:1f:81:7e:c6:20:6b:f4:
39:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:71:E2:F8:9C:B1:1F:04:FD:FE:5A:F5:C0:58:E9:FB:5A:2E:62:EC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F75E130BDCF11EA8755D90DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.251.232.0/22
103.141.92.0/23
103.166.109.0/24
103.220.208.0/22
103.240.26.0/23
IPv6:
2401:2ba0::/32
Signature Algorithm: sha256WithRSAEncryption
77:e9:05:3e:0a:60:35:45:cd:2c:77:b3:f2:46:82:f7:3c:8b:
4e:40:33:05:9f:88:91:ca:f2:8d:b7:05:de:c7:73:92:ff:e4:
bf:74:2e:66:69:26:02:e8:83:34:94:40:57:d5:07:c0:18:1d:
3e:14:db:e0:a4:d7:45:b3:40:3d:7e:60:ec:02:3a:30:8c:e6:
c8:f1:a0:22:a0:b5:5d:91:d3:59:93:60:0c:87:04:3e:8a:f9:
72:9c:e5:fa:76:9e:1b:99:61:63:73:03:d5:9c:3f:c0:d7:d1:
49:e1:a9:ce:ce:7f:64:c1:a1:0c:ec:da:c9:e2:f5:1a:f9:80:
03:0e:13:72:0e:65:89:85:1a:2d:b9:fc:ef:9f:fa:e1:9e:04:
84:e9:ab:5c:5d:31:46:22:70:c9:9c:32:84:d7:ed:42:6e:35:
c4:ab:17:36:da:23:73:3d:d3:fa:54:8a:84:db:3c:25:54:de:
30:4b:f9:49:e0:7d:9e:85:01:40:7b:37:99:63:2f:c8:db:71:
56:ef:5e:37:79:f0:51:55:5f:73:bb:97:70:83:8a:f5:22:11:
4a:f0:2f:df:7a:66:e1:d0:99:ed:e8:36:b3:ac:69:fc:47:ec:
f1:a5:64:7b:e5:78:cb:85:bd:47:d1:b6:dc:42:16:3b:57:f3:
91:37:9c:3a
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICfrEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMxMTIzMDcyNjI2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTVlZmVhMS1iZmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2J51OpYtsQboNU4Sjbtp+y2E4Ra8+iUtDYbpClEUbPRTYwBhbisuS/HR6MoO
lIby9eaYT55oh34MZS1AbtlkI1xgb/0fO+LuVdBHFDFUNtS3ShQ5ckXhMi6DMAn2
kVvwEnaCQ7x5pGzdQmrsgEGf9c6H2+rPar7Eogz6dbFmiTkjBSLutaUGmJ3YMzct
cAX2MM3iEMJJU+97cDYvhEZM3IAlMMiwx2vtPxrIJhVtMX8xhSp6FF8jkaz440le
zZT+EE/qw4exWtB5bl/f7ENG9Ieu8Ppzmk/vMUVW+iREbs5x3ZDJQfv+X7dEK9BA
2yRxhpGke+0vIR+BfsYga/Q5nwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFPNx4vic
sR8E/f5a9cBY6ftaLmLsMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNEY3NUUxMzBC
RENGMTFFQTg3NTVEOTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E
NzA1MCQEAgABMB4DBAIt++gDBAFnjVwDBABnpm0DBAJn3NADBAFn8BowDQQCAAIw
BwMFACQBK6AwDQYJKoZIhvcNAQELBQADggEBAHfpBT4KYDVFzSx3s/JGgvc8i05A
MwWfiJHK8o23Bd7Hc5L/5L90LmZpJgLogzSUQFfVB8AYHT4U2+Ck10WzQD1+YOwC
OjCM5sjxoCKgtV2R01mTYAyHBD6K+XKc5fp2nhuZYWNzA9WcP8DX0Unhqc7Of2TB
oQzs2sni9Rr5gAMOE3IOZYmFGi25/O+f+uGeBITpq1xdMUYicMmcMoTX7UJuNcSr
FzbaI3M90/pUioTbPCVU3jBL+UngfZ6FAUB7N5ljL8jbcVbvXjd58FFVX3O7l3CD
ivUiEUrwL996ZuHQme3oNrOsafxH7PGlZHvleMuFvUfRttxCFjtX85E3nDo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:53 2025 by rpki-client