Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68185DF0505B11EDB7C39884C4F9AE02.roa
File: 68185DF0505B11EDB7C39884C4F9AE02.roa (raw, json)
Hash identifier: k/T4AXK0iI1bTalyv3hYCXuLeZYRiTghrU5YgbalQ6A=
Subject key identifier: 58:DC:FD:25:99:A6:F4:F7:81:3E:5C:7F:A2:8F:3B:4A:37:E2:33:97
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8CC1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68185DF0505B11EDB7C39884C4F9AE02.roa
Signing time: Thu 30 May 2024 16:12:41 +0000
ROA not before: Thu 30 May 2024 16:12:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140133
IP address blocks: 103.84.106.0/23 maxlen: 24
103.154.2.0/23 maxlen: 24
103.170.90.0/23 maxlen: 24
2001:df0:b340::/48 maxlen: 48
2001:df3:9240::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36033 (0x8cc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:12:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a579-8811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:92:b7:f8:8d:3e:20:f7:c4:b4:e2:e9:e8:
a8:9c:6f:43:79:52:ec:95:c6:17:90:f1:0e:0f:82:
e4:9c:c7:1c:17:79:45:ab:2a:0e:59:fc:e6:93:6b:
68:c5:f6:80:e9:32:24:a6:4a:c1:7f:48:b7:dc:98:
f1:1c:88:55:c1:19:68:80:1f:d9:ac:2e:28:81:ac:
ce:fb:5b:2f:06:eb:e9:b9:21:4a:ab:7c:cc:d5:44:
d8:43:1a:4e:03:e8:33:6c:e9:13:d1:f1:56:7f:23:
0b:13:08:d8:a5:4a:f7:e2:8f:d0:c3:24:14:57:66:
f9:52:6b:66:64:17:40:16:71:48:92:2b:de:f9:33:
a2:10:78:f6:19:2b:11:64:78:6d:86:1f:04:a3:ac:
1c:2f:18:a6:03:c3:1f:49:36:84:2c:9a:28:04:f9:
3a:ba:08:b9:5e:7f:61:07:6b:17:a8:22:c8:c8:e4:
20:94:0a:50:9e:bb:03:f1:3c:d7:37:b7:a5:ec:7a:
47:9f:1c:9c:46:36:08:08:b6:f0:1e:ca:20:b6:5e:
20:f4:71:1d:a1:83:46:bf:f4:8f:81:63:4f:88:82:
e8:1b:9a:f4:82:6e:72:72:89:c5:b1:4b:c0:ea:61:
f1:8a:26:4c:c7:76:2e:da:b1:15:f3:47:99:8c:7a:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DC:FD:25:99:A6:F4:F7:81:3E:5C:7F:A2:8F:3B:4A:37:E2:33:97
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68185DF0505B11EDB7C39884C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.106.0/23
103.154.2.0/23
103.170.90.0/23
IPv6:
2001:df0:b340::/48
2001:df3:9240::/48
Signature Algorithm: sha256WithRSAEncryption
00:e2:30:4d:3f:a4:62:0d:fa:07:44:e6:e4:8b:5c:ae:95:80:
95:cb:bd:e0:81:93:df:29:fb:fa:3b:e4:a6:de:f8:c7:be:70:
c5:21:50:96:a3:7a:a5:99:ca:e2:17:a1:e5:9b:09:7f:c2:bd:
02:88:27:a8:ad:81:16:8e:15:f4:ac:c5:b3:1a:58:33:ab:2b:
a7:f0:65:70:ee:9c:d6:f9:61:53:a7:64:37:73:6f:bc:a2:62:
75:3c:b8:b7:0a:d7:00:d3:a0:c4:47:67:4a:66:57:1f:ed:0f:
9c:b0:56:58:44:ac:16:71:cb:3e:d4:4d:8c:4e:b9:88:a3:81:
e6:38:47:b4:be:09:12:8a:ef:1d:b3:48:8f:89:26:cc:35:b3:
4b:60:8f:77:75:ec:84:9e:36:d1:36:89:53:f3:3d:c3:ae:96:
8f:d8:a3:b4:72:1d:ae:b6:f9:cd:93:36:e1:81:d7:f1:0d:d1:
00:99:6a:b8:46:37:0b:85:7d:59:bf:23:ec:82:40:c6:74:5b:
36:10:82:7f:ba:b4:db:29:c1:fc:d9:de:48:f3:c7:9f:09:fb:
f9:a1:5c:e1:e9:65:6f:9f:14:ae:da:7b:95:82:ca:93:fa:92:
13:11:6d:ee:df:30:4f:94:4e:48:96:ff:06:e1:ba:67:a7:56:
76:f6:7b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:45 2025 by rpki-client