Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B646B041FB711EE819E565FC4F9AE02.roa
File: 5B646B041FB711EE819E565FC4F9AE02.roa (raw, json)
Hash identifier: uTIgv4vGEfmy/siMOkDSfwNNLnnBE3Sv8hCJ37Y8F3Q=
Subject key identifier: 91:52:7E:A6:7B:24:1E:95:60:AD:CF:15:2E:C1:CA:1D:2E:42:DF:30
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7559
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B646B041FB711EE819E565FC4F9AE02.roa
Signing time: Tue 11 Jul 2023 06:51:27 +0000
ROA not before: Tue 11 Jul 2023 06:51:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135232
IP address blocks: 103.117.172.0/24 maxlen: 24
103.117.175.0/24 maxlen: 24
103.129.112.0/23 maxlen: 24
103.133.244.0/23 maxlen: 24
103.149.20.0/23 maxlen: 24
103.158.214.0/24 maxlen: 24
103.158.215.0/24 maxlen: 24
103.163.166.0/23 maxlen: 24
103.170.190.0/23 maxlen: 24
103.221.208.0/22 maxlen: 24
2405:ebc0::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30041 (0x7559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 11 06:51:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64acfbef-abcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:05:7c:e7:5f:ae:a1:36:2a:bd:af:3a:45:
49:35:5b:0b:88:41:01:6a:ff:03:b4:5a:40:cf:fc:
1d:d1:15:ab:35:71:a6:02:5f:7f:a6:ff:5f:17:54:
21:5e:be:e5:c5:de:b9:92:26:c1:e9:4b:4d:df:81:
1b:06:05:8d:06:58:56:0c:b4:2e:87:34:8f:0f:c3:
ec:cf:36:dc:1d:36:5b:98:b4:cd:3d:14:af:38:87:
90:9e:a5:e7:e8:b3:47:b0:d6:15:ef:e8:de:dd:7c:
28:60:52:b4:a2:89:3d:af:fc:25:b7:3f:2b:a6:10:
c3:0e:12:c2:d3:60:2d:fa:77:8b:a0:a6:c6:fb:bc:
f2:cc:5e:ab:ac:7d:45:38:2f:7a:7f:10:4a:9f:18:
14:83:0f:a1:69:dc:e5:a4:e9:54:29:4f:6a:7e:01:
6e:d1:9e:cc:dc:7a:7f:0c:09:b0:a4:99:df:88:6b:
d1:25:bd:53:26:88:45:57:34:a0:a9:c6:1f:3c:9a:
ac:12:34:4b:b4:25:b8:e6:75:18:37:4f:86:0a:56:
b9:cf:b4:17:32:6f:ba:85:68:7e:07:a9:94:67:d2:
af:0f:c1:26:05:e0:ed:9c:f4:b3:f1:cb:c1:ae:6c:
3b:d3:be:e0:e7:a9:f7:e9:f9:fe:f6:ff:7e:ee:c0:
3b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:52:7E:A6:7B:24:1E:95:60:AD:CF:15:2E:C1:CA:1D:2E:42:DF:30
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5B646B041FB711EE819E565FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.117.172.0/24
103.117.175.0/24
103.129.112.0/23
103.133.244.0/23
103.149.20.0/23
103.158.214.0/23
103.163.166.0/23
103.170.190.0/23
103.221.208.0/22
IPv6:
2405:ebc0::/32
Signature Algorithm: sha256WithRSAEncryption
90:ee:a9:c3:f9:fa:3f:89:73:b1:c5:74:ae:85:ae:34:29:f3:
68:6c:cc:e0:1e:79:35:d3:1d:3e:55:0c:c5:7c:51:81:b2:d3:
2b:ce:90:46:82:f6:2f:60:e3:85:05:f9:56:d7:7e:d3:2e:87:
df:9e:4d:56:8a:84:1a:32:5b:80:05:a8:94:97:0a:19:eb:ab:
94:10:a9:4d:3d:e4:6b:25:60:5d:fd:a7:35:33:47:51:13:b1:
be:7f:7a:6a:83:b1:31:d4:ec:e8:fc:b5:aa:4b:98:4d:0c:b8:
44:ec:bb:82:eb:9b:cf:12:c3:92:6c:97:20:cc:37:c1:8e:e7:
c0:40:b0:11:46:44:94:84:ea:6e:9d:a7:aa:c2:00:8f:45:cf:
b5:ae:5e:ae:63:7a:aa:35:6e:5e:04:0b:66:bf:93:c4:aa:50:
2f:34:2e:b7:d7:e6:44:d4:c5:e4:0a:16:43:0b:1c:55:ef:a6:
c3:59:91:5e:dd:af:a3:c0:24:bb:89:0e:32:60:9e:9a:c6:5b:
5a:ba:9c:04:61:f6:fb:f7:37:81:c6:01:cc:b0:cf:77:b3:dc:
87:10:89:6d:bb:8b:85:b2:7b:cd:cb:13:9c:ff:e2:2f:cd:04:
16:9c:8c:af:95:f8:76:fc:81:5b:22:b0:63:c4:3f:c0:2b:f7:
b5:a6:65:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:23 2025 by rpki-client