Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5ABB2B4ABDCF11EA8755D90DC4F9AE02.roa
File: 5ABB2B4ABDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier: MbiueDaV4M5yzr+cB4eeHvw2JDEBJm2K0KsThPUJ42o=
Subject key identifier: F4:3D:BD:B8:51:1E:D7:55:00:B1:3A:06:ED:C2:91:E0:79:5D:C3:64
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4991
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5ABB2B4ABDCF11EA8755D90DC4F9AE02.roa
Signing time: Sat 05 Mar 2022 06:41:41 +0000
ROA not before: Sat 05 Mar 2022 06:41:41 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 138716
IP address blocks: 103.137.2.0/24 maxlen: 24
103.137.192.0/23 maxlen: 24
103.156.206.0/23 maxlen: 24
103.160.132.0/23 maxlen: 24
103.161.26.0/23 maxlen: 24
103.162.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18833 (0x4991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 5 06:41:41 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=62230625-4498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:79:7b:49:88:3a:79:59:4a:5a:12:27:c2:
fb:bf:3c:55:0c:af:6a:35:9b:cf:03:cc:d6:c5:94:
4f:71:cc:8d:54:db:f9:92:be:51:28:6d:95:7c:8d:
e7:98:d6:dd:a0:43:d1:86:8f:d0:f2:d2:6a:72:51:
18:5b:ba:82:0b:0e:d3:3c:32:c0:66:12:70:1c:87:
8a:2c:a6:5f:1d:d6:d3:02:ea:78:ce:13:59:1b:57:
2c:2c:1c:90:41:ed:ef:7a:23:25:09:c3:48:fa:2f:
b5:a4:bc:c1:65:18:5f:6c:67:33:3c:29:04:ff:75:
99:5a:45:3f:9b:01:ba:d8:0f:b8:42:2e:a0:15:c8:
aa:dd:c9:79:f5:c3:b0:10:2e:5f:a5:36:1f:7a:dd:
f0:7b:2f:25:cb:3b:aa:85:af:1b:09:87:06:c9:5e:
39:e4:3d:13:43:43:76:0b:8c:18:0c:b8:71:7f:d1:
fc:1c:1b:af:aa:53:69:d6:7f:fd:70:e8:87:7b:f2:
37:02:5f:02:05:d9:a9:15:70:0c:d7:80:a1:22:6a:
9c:cb:ea:be:86:a1:49:6b:6d:35:9e:8e:1a:71:4e:
88:35:3f:58:ed:e8:23:ce:c6:1c:0b:3d:e2:54:cc:
36:1f:2b:3d:4a:a0:ae:16:15:de:e7:fc:3a:91:a2:
fd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3D:BD:B8:51:1E:D7:55:00:B1:3A:06:ED:C2:91:E0:79:5D:C3:64
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5ABB2B4ABDCF11EA8755D90DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.2.0/24
103.137.192.0/23
103.156.206.0/23
103.160.132.0/23
103.161.26.0/23
103.162.159.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3c:94:10:7f:c0:9b:6d:2d:79:41:6d:ef:af:a4:be:e7:be:
c3:13:bc:19:44:f1:b9:c6:c7:69:65:50:c8:d5:c0:f6:23:9f:
9d:e6:c5:68:0f:78:fc:cd:56:ad:f1:60:fa:6d:80:dc:9d:2c:
ca:16:fe:d9:40:95:f3:07:73:ca:9b:03:99:7b:98:46:61:86:
63:48:a8:66:f1:3a:cd:e0:f5:44:74:d6:6f:de:c4:63:1c:39:
b3:23:c9:60:f2:b3:e6:a2:8d:66:67:93:8f:39:2c:4c:5d:ff:
88:5c:d3:ea:58:79:b0:d2:e3:42:d5:d2:a2:54:1f:cb:3f:0c:
ec:98:ec:9e:43:f9:d2:5e:e5:6c:3e:cc:83:86:6a:9a:b7:51:
62:96:b3:91:b4:f2:9b:1b:9d:da:ca:bc:02:40:b1:8f:f3:2a:
03:b0:90:3f:31:a1:56:84:b4:aa:3a:e8:9c:6d:a3:a8:01:a2:
45:c7:4e:3b:e5:df:a7:86:15:dc:b3:29:18:f9:9b:da:3b:61:
33:76:04:9a:d8:63:39:ef:24:93:8e:53:94:f8:38:3f:2d:9f:
47:89:7e:ae:a1:ce:01:55:e4:b0:1e:7d:ed:4b:1d:21:44:12:
99:72:8d:c3:0f:30:ea:19:3f:91:41:30:1b:36:57:c7:d8:90:
24:e1:c1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:48 2025 by rpki-client