Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53807B02F7F211EF8AB39128C4F9AE02.roa
File: 53807B02F7F211EF8AB39128C4F9AE02.roa (raw, json)
Hash identifier: edLMk83yfuuHbJScqBlmmKWZbe8xm+DlcVOQgGSYGDo=
Subject key identifier: D5:63:30:45:4A:29:33:FF:2F:CE:CE:87:89:4F:97:24:1B:7F:64:D9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A8C1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53807B02F7F211EF8AB39128C4F9AE02.roa
Signing time: Mon 03 Mar 2025 09:19:43 +0000
ROA not before: Mon 03 Mar 2025 09:19:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135825
IP address blocks: 103.171.119.0/24 maxlen: 24
163.61.98.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43201 (0xa8c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 3 09:19:43 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c5742f-853a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:38:16:75:3d:c5:f7:8b:52:18:5c:04:c5:
ce:97:0f:32:19:76:0e:6d:58:ff:3a:18:9a:04:2d:
7b:51:fb:3d:7a:57:3d:0a:52:9d:50:5e:6d:ac:a4:
84:64:b9:95:80:c4:0b:1a:58:2f:17:4c:9b:44:d9:
0c:fe:3d:6c:e7:72:db:60:64:a0:a2:df:b9:90:df:
e0:de:fd:1c:b6:48:48:84:6f:4b:dd:fc:27:c5:34:
a5:f0:e4:5d:50:14:49:0c:08:9c:2e:1d:23:1a:8a:
c8:28:5c:fc:aa:77:67:ba:2d:e9:bc:bf:92:81:70:
e3:89:97:91:84:c0:97:67:c9:a7:60:cc:94:49:0b:
be:e5:b0:2e:b6:1f:37:03:ee:05:28:d9:57:60:f4:
1e:80:87:5c:72:e4:95:29:d4:60:b4:bb:10:57:69:
d7:07:0c:6c:50:fe:ad:3e:2b:21:60:0b:64:ab:76:
48:04:52:cd:44:37:e2:ff:3f:fe:d7:fd:d6:6b:96:
24:63:3f:c3:97:26:fd:af:54:d3:54:bb:62:5e:04:
c9:2f:8d:ce:8e:ac:39:d4:6a:1f:36:b1:e9:b4:1b:
9e:fd:a2:11:67:09:35:36:c2:ea:0b:de:b1:e7:ee:
ab:1e:05:2a:08:6b:94:b7:d1:c8:17:8c:bf:9f:0d:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:63:30:45:4A:29:33:FF:2F:CE:CE:87:89:4F:97:24:1B:7F:64:D9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53807B02F7F211EF8AB39128C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.119.0/24
163.61.98.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:67:13:b2:98:fe:61:52:e9:8b:3b:5f:a5:ff:bd:02:68:17:
cf:52:c7:b9:58:a7:0b:aa:60:4b:d9:fe:de:c4:e9:89:5f:2b:
a9:b1:c9:98:7d:24:52:4d:7f:71:81:2c:24:f0:a9:a6:d3:d1:
af:f9:d9:98:be:f0:cb:4f:13:28:33:1a:5a:b1:b1:f3:93:70:
84:6b:62:b2:1f:01:04:9f:d5:f7:f9:1e:1f:55:45:0c:71:b8:
3e:5e:2e:92:af:2a:b8:19:70:93:49:1b:fe:12:49:55:d3:a8:
25:6b:2b:6c:f1:78:92:62:04:be:74:0f:23:24:a0:61:e8:1e:
07:2e:06:c5:07:9f:5c:15:ac:78:3a:c3:a5:8c:f8:02:de:80:
c0:18:27:6c:ef:2d:30:e1:30:b4:a5:64:f6:83:a5:5f:34:05:
7a:b8:75:c8:cb:84:9b:b8:67:dc:b9:28:59:23:4a:21:ba:f5:
3b:d7:e1:c9:d2:6d:ba:01:92:f0:cb:66:50:7e:2a:7b:86:3f:
ae:2a:7d:2c:26:e3:bb:77:24:a2:05:67:41:d0:73:ad:14:3b:
c9:df:9f:ef:76:88:ac:6f:b1:bb:6e:1c:d2:a4:58:67:08:9d:
e8:5e:65:36:da:6a:e7:8e:6a:86:ce:47:f5:f4:cb:b6:84:79:
98:52:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:14:58 2025 by rpki-client