Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67DAC6A837A811EFA9A3E57EC4F9AE02.roa
File: 67DAC6A837A811EFA9A3E57EC4F9AE02.roa (raw, json)
Hash identifier: raQAStgyzq5yqnYqbT8cuyc2hBgLFcEbrE3g4OIzaro=
Subject key identifier: EA:C7:AC:00:55:6F:11:E9:58:C3:FA:56:C4:9B:0D:0D:39:84:4A:2C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 936C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67DAC6A837A811EFA9A3E57EC4F9AE02.roa
Signing time: Mon 01 Jul 2024 12:49:51 +0000
ROA not before: Mon 01 Jul 2024 12:49:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137085
IP address blocks: 27.123.240.0/23 maxlen: 24
43.225.248.0/22 maxlen: 24
43.228.164.0/23 maxlen: 24
103.37.98.0/23 maxlen: 24
103.49.56.0/22 maxlen: 24
103.68.140.0/23 maxlen: 24
103.69.239.0/24 maxlen: 24
103.72.196.0/24 maxlen: 24
103.91.72.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.91.75.0/24 maxlen: 24
103.91.76.0/22 maxlen: 24
103.92.107.0/24 maxlen: 24
103.93.39.0/24 maxlen: 24
103.101.112.0/22 maxlen: 24
103.113.110.0/23 maxlen: 24
103.115.128.0/24 maxlen: 24
103.115.129.0/24 maxlen: 24
103.115.130.0/24 maxlen: 24
103.115.131.0/24 maxlen: 24
103.120.152.0/24 maxlen: 24
103.120.153.0/24 maxlen: 24
103.124.174.0/24 maxlen: 24
103.138.9.0/24 maxlen: 24
103.154.8.0/23 maxlen: 24
103.158.41.0/24 maxlen: 24
103.159.104.0/23 maxlen: 24
103.160.25.0/24 maxlen: 24
103.160.222.0/24 maxlen: 24
103.163.14.0/24 maxlen: 24
103.163.15.0/24 maxlen: 24
103.170.48.0/23 maxlen: 24
103.173.238.0/23 maxlen: 24
103.174.28.0/24 maxlen: 24
103.174.29.0/24 maxlen: 24
103.178.117.0/24 maxlen: 24
103.181.119.0/24 maxlen: 24
103.184.41.0/24 maxlen: 24
103.184.205.0/24 maxlen: 24
103.204.70.0/24 maxlen: 24
103.206.51.0/24 maxlen: 24
103.206.96.0/23 maxlen: 24
103.216.141.0/24 maxlen: 24
103.225.70.0/24 maxlen: 24
103.232.232.0/22 maxlen: 24
202.4.169.0/24 maxlen: 24
2001:df1:d240::/48 maxlen: 48
2001:df1:ed40::/48 maxlen: 48
2001:df2:3ac0::/48 maxlen: 48
2001:df2:3f40::/48 maxlen: 48
2001:df2:9640::/48 maxlen: 48
2001:df3:1340::/48 maxlen: 48
2400:d660::/32 maxlen: 32
2405:e100:1d::/48 maxlen: 48
2405:e100:1e::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37740 (0x936c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 1 12:49:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6682a5ef-d4f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:cb:8f:b5:b5:0f:cd:f4:fc:e3:5e:dc:f8:
03:1c:ef:f9:ba:39:9d:26:33:bd:3d:ce:38:de:2b:
c0:60:f3:27:aa:69:b9:8c:7b:fa:08:31:2e:01:0b:
58:60:9d:96:7c:0b:1b:ce:38:8c:81:2d:3b:e7:cc:
e8:70:66:1f:85:12:7e:26:e6:35:60:e6:47:d2:20:
8d:3e:ee:17:7c:63:d5:28:89:7f:65:34:c7:d6:a8:
74:ee:44:23:3a:95:6b:89:4a:0c:70:c3:04:71:e1:
84:bc:1f:cc:6d:d2:e4:36:13:e8:af:f5:65:e4:a7:
8c:99:d1:b5:a6:f4:52:a7:63:a8:7f:dd:b8:f9:cb:
a5:95:f8:72:32:cd:90:7e:99:1d:83:20:99:4f:44:
c1:69:1c:f3:bd:65:ef:3f:18:3c:49:4a:95:17:83:
1e:67:8b:d1:8a:7b:2f:8e:39:e6:aa:81:6e:94:93:
c5:1e:81:81:16:28:43:00:db:15:4a:44:cc:cb:3a:
7f:7d:e2:96:2d:1b:2f:5b:8b:21:bd:01:eb:5c:64:
75:6d:60:e3:37:73:cd:75:88:fa:5e:7c:5e:c1:bf:
31:e5:e5:ad:5e:b8:1a:06:c8:1e:16:11:ed:39:d9:
c6:e0:05:e0:ee:24:72:f1:60:74:27:96:1d:ce:81:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C7:AC:00:55:6F:11:E9:58:C3:FA:56:C4:9B:0D:0D:39:84:4A:2C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/67DAC6A837A811EFA9A3E57EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/23
43.225.248.0/22
43.228.164.0/23
103.37.98.0/23
103.49.56.0/22
103.68.140.0/23
103.69.239.0/24
103.72.196.0/24
103.91.72.0/21
103.92.107.0/24
103.93.39.0/24
103.101.112.0/22
103.113.110.0/23
103.115.128.0/22
103.120.152.0/23
103.124.174.0/24
103.138.9.0/24
103.154.8.0/23
103.158.41.0/24
103.159.104.0/23
103.160.25.0/24
103.160.222.0/24
103.163.14.0/23
103.170.48.0/23
103.173.238.0/23
103.174.28.0/23
103.178.117.0/24
103.181.119.0/24
103.184.41.0/24
103.184.205.0/24
103.204.70.0/24
103.206.51.0/24
103.206.96.0/23
103.216.141.0/24
103.225.70.0/24
103.232.232.0/22
202.4.169.0/24
IPv6:
2001:df1:d240::/48
2001:df1:ed40::/48
2001:df2:3ac0::/48
2001:df2:3f40::/48
2001:df2:9640::/48
2001:df3:1340::/48
2400:d660::/32
2405:e100:1d::-2405:e100:1e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
33:9d:d9:5b:2a:7f:6f:64:14:d3:51:4d:00:fc:f5:fc:64:2d:
e3:9c:4d:f3:b9:f6:7c:86:de:b3:7c:5d:0d:a9:82:b5:18:77:
89:98:24:40:18:cf:3b:06:b4:1e:ee:98:9c:fd:3c:11:c4:6d:
2f:3c:d6:2d:51:7f:5d:aa:c4:e4:76:7b:b1:16:ef:f3:e0:cf:
a9:12:68:27:ca:93:12:24:2f:63:f7:7d:c7:4d:b2:c7:e7:66:
67:e4:fc:ee:df:2e:96:50:8f:df:75:a6:4b:bc:83:95:ce:82:
41:4f:f0:29:59:a9:5d:f3:10:59:aa:f1:61:70:b5:8e:8a:27:
89:4b:2c:11:4d:c5:0b:9f:44:ce:f5:4a:8b:9b:c1:00:9f:87:
3c:e6:48:20:a8:9e:05:54:a0:19:7b:14:82:85:5a:03:d5:f9:
2d:8b:5d:36:78:a4:ec:9e:b2:1b:4b:51:3b:fc:1a:73:3c:d4:
55:92:25:a4:69:77:70:89:76:83:ae:27:68:82:e1:37:de:4d:
6a:44:96:58:28:56:77:ff:2c:87:1a:5c:14:24:a4:01:23:32:
18:c9:3b:e6:f1:c3:9f:f2:99:a8:0f:d5:7d:e3:cf:f6:39:73:
37:80:ac:f0:08:cd:41:e7:79:57:ee:7e:52:3e:86:6b:ec:bd:
f4:4d:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:17 2025 by rpki-client