Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/648F74B4CBF311EFA5B72050C4F9AE02.roa
File: 648F74B4CBF311EFA5B72050C4F9AE02.roa (raw, json)
Hash identifier: wmES8j6/GItnOy2zv0MoFVsBF7gdrezDLWF3lJ766uM=
Subject key identifier: 63:6D:0F:94:9D:42:39:9F:80:C6:84:38:29:B2:51:D1:D0:01:CE:58
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A1CB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/648F74B4CBF311EFA5B72050C4F9AE02.roa
Signing time: Wed 08 Jan 2025 13:07:35 +0000
ROA not before: Wed 08 Jan 2025 13:07:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.124.38.0/23 maxlen: 24
103.142.64.0/23 maxlen: 24
103.153.208.0/23 maxlen: 24
103.155.194.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.254.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.195.196.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.206.220.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41419 (0xa1cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 8 13:07:35 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=677e7897-3c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:25:ea:e4:36:81:ae:79:86:19:fe:a8:9e:03:
9a:e4:ad:63:9c:12:be:72:7f:db:9f:80:fa:d6:d5:
2a:ce:01:d6:df:ee:7c:46:f3:30:42:eb:1e:c4:84:
31:d2:58:85:b5:24:a7:6f:37:95:6b:54:01:23:51:
56:c4:cf:df:b7:a2:45:e3:e2:e0:8c:88:af:b7:8d:
8b:23:c6:b0:03:f4:9f:3d:b8:ee:08:fb:3b:f4:c1:
1c:6e:85:25:1b:b7:2b:72:1a:ac:69:89:be:22:b8:
e6:46:d1:74:05:2f:63:f7:81:62:73:27:b6:74:7f:
6f:4b:15:e9:32:50:e4:a9:c4:d2:2b:98:3b:76:64:
5c:48:da:fa:80:61:28:77:06:31:3c:0c:ef:f4:45:
62:17:09:11:f0:ae:47:d1:96:e2:a2:df:3f:3b:04:
e2:3f:eb:47:a5:eb:88:84:b1:16:56:01:16:3f:8a:
59:d5:aa:47:d2:cb:4c:91:3f:7a:a8:40:83:ca:c0:
8d:03:fa:ca:90:1a:73:6f:aa:11:d5:c0:2a:7a:f1:
29:39:61:61:ec:c8:94:16:f2:45:04:12:7d:f1:68:
f9:14:9b:2a:b6:70:6f:ef:5f:98:19:2b:62:81:95:
60:ad:6b:6f:8d:b2:91:41:ff:b8:3f:fd:5a:19:5f:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6D:0F:94:9D:42:39:9F:80:C6:84:38:29:B2:51:D1:D0:01:CE:58
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/648F74B4CBF311EFA5B72050C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.231.116.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.27.168.0/24
103.27.170.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.124.38.0/23
103.142.64.0/23
103.153.208.0/23
103.155.194.0/23
103.171.236.0/23
103.173.14.0/23
103.173.41.0/24
103.174.254.0/23
103.180.216.0/23
103.192.72.0/22
103.195.196.0/22
103.200.48.0/22
103.206.64.0/22
103.206.220.0/22
103.212.132.0/22
103.226.224.0/22
103.228.172.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
a9:23:9c:b8:2b:93:ab:f5:d7:4f:cc:97:fb:3c:d9:15:9a:e4:
77:16:5b:19:41:71:69:83:a1:1a:29:a9:e6:6b:1b:4f:5a:cb:
27:01:6a:94:21:27:d6:49:0f:d9:a0:70:2e:b5:cf:9b:1c:b5:
7a:f7:b7:10:2f:c4:72:0b:c9:49:48:02:2f:64:a7:4b:ff:be:
82:ed:ca:0f:ff:83:06:de:1f:0a:0a:b5:81:55:7a:92:e0:77:
c1:59:0f:8d:dc:49:7d:98:e6:4c:d7:03:f1:96:49:77:df:52:
35:13:ee:94:f3:0f:df:1f:b6:a3:49:7b:1d:2d:b7:2b:ea:43:
c5:7f:54:b9:d0:d1:41:14:02:35:de:61:82:1f:b7:05:80:d5:
09:75:c1:23:41:db:82:9a:f2:35:a9:0d:7c:85:a1:df:13:6a:
d2:ff:f2:8c:53:2a:5b:32:f8:59:4d:b7:1d:7c:6c:91:cc:ff:
03:e5:54:f7:f6:e6:0f:88:af:13:18:4f:1e:f6:dc:cd:b4:df:
28:05:c0:11:65:e7:e3:94:f5:b3:4d:45:31:52:05:0e:74:f6:
75:d0:6b:23:a2:dc:a6:6e:f5:c6:c2:07:1d:58:77:b4:50:82:
e9:b0:b1:1e:ce:c8:2b:24:f3:d9:d5:ae:6a:74:1e:a6:77:36:
dc:6b:1e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:24:37 2025 by rpki-client