Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FE8B3D6F09411EDB2F9B443C4F9AE02.roa
File: 4FE8B3D6F09411EDB2F9B443C4F9AE02.roa (raw, json)
Hash identifier: xXROb+6o93DhRgo8TovkNBKGRIFHGUBDjMcSUYcR82A=
Subject key identifier: 06:BC:C1:F4:1C:3B:F0:C5:91:22:EF:80:D5:6B:A0:32:A7:A1:AB:43
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8A6A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FE8B3D6F09411EDB2F9B443C4F9AE02.roa
Signing time: Thu 30 May 2024 16:02:54 +0000
ROA not before: Thu 30 May 2024 16:02:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135735
IP address blocks: 103.67.188.0/22 maxlen: 24
103.76.10.0/24 maxlen: 24
103.76.11.0/24 maxlen: 24
103.120.239.0/24 maxlen: 24
103.132.171.0/24 maxlen: 24
2400:8f20::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35434 (0x8a6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:02:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a32d-06ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:0e:31:fa:a6:8f:7a:04:f5:1f:5a:3d:77:
a2:d1:0e:08:9a:e6:53:fe:0a:f4:ae:0d:ab:78:67:
10:81:bd:ae:9f:a1:b1:49:df:39:6d:1a:88:0f:5e:
41:30:20:bd:96:7c:c1:cd:fd:45:8b:26:11:0c:92:
b5:26:32:87:5c:f7:21:7e:ad:45:57:b3:f2:e5:56:
a1:80:4c:d8:35:85:69:eb:4a:ae:1d:62:42:34:7d:
00:be:32:67:51:ce:a3:68:4a:7f:d6:23:4b:f9:d7:
ab:cf:f9:a3:d3:48:5b:97:e6:ed:18:f5:b9:54:5c:
99:00:19:92:df:4e:01:99:47:fd:e4:c1:57:db:01:
b1:d9:a6:eb:a6:a8:70:9d:1f:03:85:97:28:96:71:
0c:49:10:66:9a:70:9f:fd:d4:50:a4:e8:ce:46:46:
ca:44:5b:1d:5e:a1:c2:53:55:f3:43:b3:9f:0d:46:
5d:9f:be:e0:95:d5:4c:25:13:6a:af:39:60:05:5e:
76:4a:30:62:99:38:0f:13:6f:f8:4c:ce:b9:e8:4f:
7d:b8:f8:70:3e:13:28:aa:b0:84:45:d2:7d:0e:d0:
55:86:1c:eb:b6:3e:2c:74:87:9f:6c:d5:bf:a8:dd:
9f:53:74:49:80:ca:ef:8d:d5:a3:a8:62:b0:dc:9f:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BC:C1:F4:1C:3B:F0:C5:91:22:EF:80:D5:6B:A0:32:A7:A1:AB:43
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4FE8B3D6F09411EDB2F9B443C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.188.0/22
103.76.10.0/23
103.120.239.0/24
103.132.171.0/24
IPv6:
2400:8f20::/32
Signature Algorithm: sha256WithRSAEncryption
9c:fc:34:8f:d6:c0:78:4f:e4:3e:22:74:08:67:2d:08:88:10:
f5:65:99:a1:d5:d6:48:03:d3:eb:be:24:ac:56:00:1c:aa:54:
9a:9a:6d:46:68:fa:cd:7c:e1:e3:6b:97:ad:96:c2:95:14:39:
45:fe:c8:0b:14:62:02:5d:b9:c2:63:a2:b5:12:22:98:75:c1:
90:98:81:d2:96:7e:8f:fc:63:d7:64:a5:9a:87:44:b0:94:b1:
5d:1a:b4:11:ef:30:66:1f:65:89:a2:2b:c0:69:71:51:2c:50:
6a:07:0d:8c:33:20:4e:cf:17:d4:a1:a8:ee:38:c4:6f:70:27:
82:a5:36:f9:92:f7:2c:74:36:52:47:52:52:f7:36:b7:18:32:
e1:02:28:fc:6f:40:00:a6:09:0e:b1:5e:5d:b0:ab:29:74:96:
b7:60:6c:b8:be:2e:ef:cb:80:55:76:45:aa:46:59:7c:61:1b:
b0:0b:50:7e:a7:70:f1:33:9e:75:4c:d0:7c:9b:9a:7c:77:f9:
2f:ff:d3:42:f9:65:52:6c:0a:bf:f2:10:90:23:06:e3:b2:ea:
cc:16:68:91:8b:73:34:ab:40:5d:ad:31:d3:e1:6d:34:cf:d3:
ff:11:c7:55:a6:63:5a:17:8a:e0:4e:d3:31:b9:66:be:7b:c6:
f0:5f:ec:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:18 2025 by rpki-client