Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BCD6CA4C5A011EEB7C96015C4F9AE02.roa
File: 6BCD6CA4C5A011EEB7C96015C4F9AE02.roa (raw, json)
Hash identifier: TQsnDDuXEgkQNdzLyVtfjDAQ4sAPr6pKck1ZM/XCf9E=
Subject key identifier: 96:74:9B:28:C8:2B:77:57:BA:B3:98:C1:18:DB:2D:59:91:6D:F5:D7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 828E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BCD6CA4C5A011EEB7C96015C4F9AE02.roa
Signing time: Wed 07 Feb 2024 10:05:29 +0000
ROA not before: Wed 07 Feb 2024 10:05:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135718
IP address blocks: 36.255.156.0/24 maxlen: 24
36.255.157.0/24 maxlen: 24
36.255.158.0/24 maxlen: 24
36.255.159.0/24 maxlen: 24
103.66.112.0/24 maxlen: 24
103.66.113.0/24 maxlen: 24
103.66.114.0/24 maxlen: 24
103.66.115.0/24 maxlen: 24
103.92.120.0/22 maxlen: 24
103.101.56.0/23 maxlen: 24
103.113.35.0/24 maxlen: 24
103.119.245.0/24 maxlen: 24
103.119.246.0/24 maxlen: 24
103.138.105.0/24 maxlen: 24
103.145.8.0/23 maxlen: 24
103.148.164.0/24 maxlen: 24
103.159.201.0/24 maxlen: 24
103.165.87.0/24 maxlen: 24
103.172.10.0/24 maxlen: 24
103.174.144.0/23 maxlen: 24
103.182.110.0/23 maxlen: 23
103.190.238.0/24 maxlen: 24
103.204.188.0/24 maxlen: 24
103.204.189.0/24 maxlen: 24
103.204.190.0/24 maxlen: 24
103.204.191.0/24 maxlen: 24
2001:df5:f680::/48 maxlen: 48
2402:6a40::/48 maxlen: 48
2402:6a40:1::/48 maxlen: 48
2402:6a40:2::/48 maxlen: 48
2402:6a40:3::/48 maxlen: 48
2402:6a40:4::/48 maxlen: 48
2402:6a40:5::/48 maxlen: 48
2402:6a40:6::/48 maxlen: 48
2402:6a40:7::/48 maxlen: 48
2402:6a40:8::/48 maxlen: 48
2402:6a40:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33422 (0x828e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 7 10:05:29 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65c355e9-66e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:33:46:9d:05:78:cb:40:3f:95:42:14:ec:
f1:f4:0d:96:07:3f:49:ec:48:0e:25:c0:b5:d5:d1:
e2:d4:50:66:64:fc:2e:c1:b7:f8:62:db:78:88:d1:
b5:86:ca:3d:c6:1f:4f:42:80:84:ef:a3:31:a2:bf:
c3:08:1a:53:3f:1c:a9:69:98:ca:1a:bd:18:30:0f:
72:95:9a:ca:8f:86:61:29:43:69:df:68:66:8f:dd:
f2:d7:24:ec:f1:70:29:95:26:ac:41:7b:a4:a6:84:
70:bc:b8:62:3f:ce:21:37:ef:1a:a0:ea:62:ed:31:
ef:c9:cf:d1:51:38:7c:e7:99:41:60:c5:d8:fc:e8:
d2:ba:03:86:9e:f3:8c:f7:41:d7:87:92:b9:76:1d:
17:97:57:b5:13:53:04:a5:a1:40:61:92:33:e2:62:
47:0b:92:c1:04:6d:c9:d5:15:d5:b6:64:e9:39:5c:
46:de:ca:44:95:7b:1c:1a:7f:36:7e:0f:30:da:19:
67:27:cb:b5:d8:b4:9c:fd:eb:66:14:fa:50:23:3c:
e6:36:bf:7d:9e:e7:85:25:e8:af:12:da:0e:b2:e4:
88:a7:77:ac:fb:ed:a5:91:7d:28:ce:3a:ff:1c:28:
9d:e9:49:6b:28:5b:c1:56:64:15:c6:99:6f:bb:e6:
66:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:74:9B:28:C8:2B:77:57:BA:B3:98:C1:18:DB:2D:59:91:6D:F5:D7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6BCD6CA4C5A011EEB7C96015C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.156.0/22
103.66.112.0/22
103.92.120.0/22
103.101.56.0/23
103.113.35.0/24
103.119.245.0-103.119.246.255
103.138.105.0/24
103.145.8.0/23
103.148.164.0/24
103.159.201.0/24
103.165.87.0/24
103.172.10.0/24
103.174.144.0/23
103.182.110.0/23
103.190.238.0/24
103.204.188.0/22
IPv6:
2001:df5:f680::/48
2402:6a40::-2402:6a40:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4d:c1:7d:f7:70:36:aa:df:2b:99:c7:61:05:1f:71:dc:39:1c:
9b:3e:ca:48:3d:c5:03:d7:cb:72:d7:76:38:d7:18:f5:2d:be:
5f:16:a5:58:5f:e2:d3:7f:33:ef:d9:36:7c:7f:c7:ed:9c:be:
1f:0d:45:c1:ad:ec:6e:43:37:06:71:4d:fe:0b:d4:26:8e:13:
45:c6:1b:ab:5e:7a:47:0f:75:31:0e:1c:19:fe:b6:85:b9:94:
ee:fd:23:67:dd:3b:ab:9f:78:c8:89:19:a2:b3:0b:88:ab:85:
5a:08:db:00:c3:14:06:8c:ad:55:88:43:c9:b5:50:ec:60:fa:
0d:74:72:9f:8e:9c:e4:8d:e0:96:fc:ba:cb:44:d6:d4:00:4e:
d8:e7:fc:7b:4d:ae:10:4a:b2:ae:a1:73:5f:2e:a2:6b:00:10:
94:16:da:77:0d:4d:d8:b3:57:b7:7f:b4:44:82:ae:67:d6:ed:
35:e9:b2:bf:80:2b:a1:57:23:81:16:d5:4a:3a:38:94:53:3f:
b0:7f:87:7b:fc:21:cf:f9:98:62:3a:98:69:45:8a:be:94:1a:
53:3f:0a:12:a5:9e:f1:8a:56:c2:d5:0a:5e:c5:8f:55:5a:3d:
79:81:47:70:c5:89:a3:8d:6e:0b:1b:91:6a:fb:6f:4c:54:94:
d1:65:e9:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:09 2025 by rpki-client