Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58233FF6123911EDAFF2A981C4F9AE02.roa
File: 58233FF6123911EDAFF2A981C4F9AE02.roa (raw, json)
Hash identifier: 90+/qzclBcTHpbrMLVuBDdTSFVdf6fF4odLNYjid/CY=
Subject key identifier: 33:26:A1:9F:37:71:42:B7:BA:3C:5B:64:53:83:41:66:5B:41:75:6C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5AA0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58233FF6123911EDAFF2A981C4F9AE02.roa
Signing time: Tue 02 Aug 2022 08:01:42 +0000
ROA not before: Tue 02 Aug 2022 08:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9498
IP address blocks: 45.121.44.0/22 maxlen: 24
103.61.132.0/22 maxlen: 24
103.68.220.0/23 maxlen: 24
103.209.96.0/23 maxlen: 24
192.12.109.0/24 maxlen: 24
202.53.87.0/24 maxlen: 24
202.58.102.0/23 maxlen: 24
202.65.141.0/24 maxlen: 24
202.65.142.0/24 maxlen: 24
202.140.63.0/24 maxlen: 24
2405:a700::/32 maxlen: 32
2405:a700:14::/48 maxlen: 48
2405:a700:15::/48 maxlen: 48
2405:a700:1b::/48 maxlen: 48
2405:a700:1c::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23200 (0x5aa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 2 08:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62e8d9e6-a10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:89:38:2a:1e:45:4d:23:9c:7d:e4:7f:01:99:
28:d7:74:9e:be:9c:9b:78:10:ce:85:1d:d8:ce:b5:
c7:fa:79:c6:1c:7b:c7:2f:d2:24:75:8f:7d:bd:87:
0e:b9:1f:fc:66:41:6f:39:c7:e1:1e:e1:37:4a:b7:
4a:3c:a4:6e:f1:3c:6d:f5:de:76:e6:1d:ad:9c:97:
5a:00:fe:ad:c3:95:18:9f:4e:20:9d:c8:df:04:08:
22:83:03:24:74:a0:66:36:d8:58:5c:29:55:de:8a:
23:c1:9f:50:d2:fb:5e:89:db:c8:44:2f:e3:00:ca:
18:0b:17:d6:e0:96:5e:d4:cc:c7:8d:df:e8:72:db:
19:00:c5:49:d7:45:be:bb:ef:e1:ce:cf:e7:1d:75:
df:f0:ad:21:fd:04:5c:f2:7d:79:3c:be:3b:6a:5f:
5d:5d:69:a4:23:30:17:73:e0:75:e2:92:99:f8:93:
7b:e0:e2:35:7a:77:ff:f3:5d:fc:ed:67:73:0b:ea:
d3:10:6d:2c:18:e0:d7:df:27:6e:9f:cf:73:9e:d1:
1a:3f:35:25:df:6e:6a:23:94:dc:7f:56:9f:0d:90:
f8:a9:43:e6:40:8e:03:e2:04:46:e3:b0:ce:5f:ff:
51:b8:6c:3f:b2:c4:d2:29:91:ea:ae:76:3d:62:a0:
42:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:26:A1:9F:37:71:42:B7:BA:3C:5B:64:53:83:41:66:5B:41:75:6C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/58233FF6123911EDAFF2A981C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.121.44.0/22
103.61.132.0/22
103.68.220.0/23
103.209.96.0/23
192.12.109.0/24
202.53.87.0/24
202.58.102.0/23
202.65.141.0-202.65.142.255
202.140.63.0/24
IPv6:
2405:a700::/32
Signature Algorithm: sha256WithRSAEncryption
1f:36:ad:c6:4b:70:e5:cc:9b:aa:fc:c0:ce:37:3b:46:1c:08:
c7:c7:33:00:4d:8c:cc:49:41:ae:e1:3c:ce:cf:6f:11:9d:3c:
72:24:99:0b:71:f1:05:f2:70:96:6c:b9:a3:ff:73:cc:0e:7c:
78:b1:c3:4b:de:e8:7f:fb:70:9d:0b:19:a3:fe:bf:ba:4f:42:
a5:45:e9:af:7a:56:a6:ee:67:d0:b1:cb:db:14:2b:ca:94:f3:
c6:52:4a:f9:13:b7:53:9c:11:a8:d1:00:ce:3a:af:b6:67:32:
01:6a:3f:45:44:65:89:5b:3d:06:d8:22:1f:aa:9b:e1:90:8f:
a9:0c:9a:a5:60:bb:0f:19:27:66:20:a8:b8:d1:98:17:63:2f:
06:48:d8:c5:87:d0:1d:f6:72:a7:91:ea:9a:60:ce:bb:ec:e7:
8f:c3:e6:bf:fa:0b:91:95:40:94:3c:ea:1d:a2:5e:40:48:7f:
ae:43:a0:b4:4a:ba:bc:ef:04:29:44:72:08:74:bc:2e:ff:8b:
bb:ed:a8:77:dd:5e:8c:a3:ac:9b:b0:af:d6:82:dd:60:44:0c:
89:5a:a2:39:1d:5b:ac:e9:7f:e3:f9:42:60:c8:54:ff:b3:15:
af:85:76:a2:7c:11:d8:a6:40:58:d1:9d:d2:16:91:de:dd:09:
85:72:21:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:50 2025 by rpki-client