Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53F8AA72988211EDA4195509C4F9AE02.roa
File: 53F8AA72988211EDA4195509C4F9AE02.roa (raw, json)
Hash identifier: FsA62Qf3PLJGIra40sQLn9ZQbmrjqY24u0Qi+ykbXzk=
Subject key identifier: 4D:13:52:59:E1:15:50:96:1E:82:FC:78:62:46:BC:E3:C3:07:8A:25
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 638B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53F8AA72988211EDA4195509C4F9AE02.roa
Signing time: Fri 20 Jan 2023 05:21:44 +0000
ROA not before: Fri 20 Jan 2023 05:21:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133997
IP address blocks: 103.17.110.0/23 maxlen: 23
103.17.111.0/24 maxlen: 24
103.176.128.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25483 (0x638b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 20 05:21:44 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63ca24e8-78b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:44:dd:b4:ce:6c:91:13:75:30:96:b1:b0:
a1:39:63:90:72:8d:89:08:99:c7:dc:32:73:86:52:
20:24:14:8f:61:06:79:fe:b2:d8:41:6b:5e:ad:3c:
5c:8e:de:ef:4b:9d:19:5f:ad:d7:20:ff:6d:f2:1b:
42:36:18:3c:a5:b1:48:8a:fb:40:02:60:e7:ce:55:
cf:1b:2d:e9:1b:83:df:45:de:f4:b9:09:6a:c1:93:
f3:a4:54:61:e1:8a:13:0c:18:75:bf:fa:56:c5:f2:
62:39:39:15:db:58:e3:7d:59:71:c1:76:1a:50:36:
ca:e1:29:de:cd:62:a4:98:c7:b8:d3:0a:c3:fa:82:
9b:15:f0:67:f7:f2:90:b7:90:84:66:0b:4b:f2:88:
a5:62:15:aa:71:dc:7c:30:27:d4:9a:44:49:30:c2:
84:92:b4:4a:90:e1:3d:a4:e7:b8:59:f0:55:d5:11:
5f:79:9a:88:d2:b0:07:e1:c7:62:ef:04:9c:62:62:
1b:94:de:d1:c4:a9:36:b6:26:4b:e2:97:97:75:1e:
de:95:67:18:af:54:3c:de:1b:5c:35:87:36:f0:a7:
18:6b:e5:5e:be:63:a5:b3:50:5b:a9:5f:88:50:47:
65:f9:40:aa:b3:c5:ff:c1:6a:2e:20:1f:21:cc:6e:
5d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:13:52:59:E1:15:50:96:1E:82:FC:78:62:46:BC:E3:C3:07:8A:25
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/53F8AA72988211EDA4195509C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.17.110.0/23
103.176.128.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:9d:9e:d0:7d:84:ad:60:a0:8a:68:20:6b:f4:ef:7f:f0:39:
91:85:64:0e:33:a1:a5:86:ed:f9:09:1c:47:67:d7:a3:fd:ff:
32:b6:8d:38:5e:94:1d:0b:a5:69:20:74:8d:14:03:8b:f2:ba:
3d:84:cf:7c:cd:07:01:f0:c1:1c:1d:41:7f:da:ad:97:72:5d:
08:8b:dc:db:8a:86:d6:d0:2c:74:5a:de:f1:f4:17:ea:33:4d:
f1:e5:8f:10:e0:cb:d3:7f:db:90:a1:c6:e6:e2:25:5a:3c:5e:
66:ae:7c:77:38:76:69:1d:89:94:67:e0:e3:6d:f4:5e:b0:63:
9a:73:9f:29:33:ff:dc:76:97:f3:9d:67:24:09:74:d1:3c:3b:
cf:cb:ab:50:19:2a:37:66:32:cf:00:1d:ad:1f:62:b6:9b:38:
e8:41:13:14:b5:fb:10:6c:99:36:5a:ee:f1:f1:b5:84:7a:8c:
64:b6:fa:62:a0:5e:aa:4d:bf:b0:3e:b5:63:98:e5:1b:5d:8e:
c0:30:0a:db:31:6b:06:bd:ce:69:5c:4b:df:d8:e5:29:ed:11:
68:a4:fc:7a:c6:06:d6:2c:bb:95:94:db:d4:44:59:98:07:d9:
3b:d7:34:7f:28:f0:bd:f9:2b:2b:fd:7f:e7:37:10:cb:4b:b6:
0b:93:16:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:57 2025 by rpki-client