Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/662A9562CF1B11EF93AF3964C4F9AE02.roa
File: 662A9562CF1B11EF93AF3964C4F9AE02.roa (raw, json)
Hash identifier: 05biToJRCkXmkELI7evMo7EIsAjVc7EaGW0mqB9hM6M=
Subject key identifier: 18:E4:16:CD:D9:4B:D6:16:B0:FB:C6:4B:12:49:19:40:AF:00:F9:7E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A1F8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/662A9562CF1B11EF93AF3964C4F9AE02.roa
Signing time: Fri 10 Jan 2025 06:23:26 +0000
ROA not before: Fri 10 Jan 2025 06:23:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142527
IP address blocks: 103.161.10.0/23 maxlen: 24
103.171.46.0/23 maxlen: 24
103.203.211.0/24 maxlen: 24
2400:b560::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41464 (0xa1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 10 06:23:26 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6780bcdd-0953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:df:39:e9:8e:91:3e:dc:61:88:49:ee:81:e1:
6f:23:ce:24:7a:bd:ad:93:5c:de:f5:af:10:4f:58:
16:d0:75:92:ad:96:29:27:46:8c:b9:9b:e1:90:77:
a7:a7:6d:fa:9d:f8:48:bc:4e:a9:7a:32:81:03:6d:
50:b9:d9:0c:e3:71:a1:da:50:3f:3e:5b:45:aa:b2:
5a:18:5d:3c:f1:fb:c6:e7:aa:73:7d:d2:48:ff:db:
1b:f9:42:2f:dd:1e:01:a7:be:28:96:74:c8:3e:77:
32:0f:f1:df:09:92:6a:78:b0:3b:49:b4:b8:04:6e:
f0:c2:66:c3:7e:fb:2e:4b:20:da:9a:73:43:b5:12:
69:60:01:2a:21:c9:f1:74:03:98:1b:04:aa:bb:3b:
81:86:1c:43:22:39:37:6b:37:74:e8:01:ac:8c:60:
03:96:b2:32:44:98:81:bc:00:a5:0b:fd:0c:05:46:
10:17:b3:3e:4b:dd:3a:21:c2:92:73:ec:92:b6:14:
3e:93:34:41:2d:b5:09:3f:17:33:8f:63:f6:f8:11:
68:df:5d:7a:4f:99:4e:03:d1:e3:6a:7a:c8:3f:6e:
98:14:18:80:95:fd:a7:a7:a5:1f:67:0b:c5:1a:de:
84:bd:ab:69:da:de:49:a6:24:02:31:a9:36:2e:b7:
c4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E4:16:CD:D9:4B:D6:16:B0:FB:C6:4B:12:49:19:40:AF:00:F9:7E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/662A9562CF1B11EF93AF3964C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.10.0/23
103.171.46.0/23
103.203.211.0/24
IPv6:
2400:b560::/32
Signature Algorithm: sha256WithRSAEncryption
a7:66:f2:cd:17:42:a2:8b:23:90:df:07:d0:83:1a:b9:ff:7e:
ce:ea:cd:18:2c:5e:f4:77:07:3a:2b:05:4d:bf:7a:0e:5f:ca:
6c:51:1c:99:fc:3f:52:7c:93:4e:15:f6:b0:b9:87:5a:91:9b:
e5:b4:b6:53:cd:23:bc:fd:92:53:7e:d1:5a:00:73:10:72:4c:
99:90:e0:bc:ba:9b:74:2e:d1:c8:41:0f:a6:13:84:0f:cb:46:
87:a6:8d:4e:9b:fd:63:35:90:5a:25:39:86:0e:a8:11:24:37:
39:6b:ff:3b:4d:08:b3:75:34:d5:bd:c4:94:49:46:69:c7:a3:
e0:26:50:30:9f:aa:86:b0:8f:80:9b:47:cb:79:2d:a3:d6:36:
9b:7e:99:5c:1a:0f:a6:17:5a:54:a8:0b:dd:df:5e:a0:1d:a3:
99:9f:ab:b2:04:80:57:dd:e9:44:79:e7:d6:2c:13:42:25:6a:
54:71:6e:3b:19:9a:d5:c8:8f:01:1c:98:9a:7d:42:b2:ac:4f:
3f:34:fc:09:0c:0f:4f:16:9c:86:0f:e2:50:5f:1b:b1:58:25:
03:8b:b9:25:bb:3a:c3:55:b4:f8:a2:42:d6:c8:46:ff:f3:73:
c2:e6:87:39:16:92:ca:7e:30:02:e1:0b:65:56:93:e8:6d:46:
9a:2d:b4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:33 2025 by rpki-client