Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E54C1DC96C011EBA0A8D92BC4F9AE02.roa
File: 6E54C1DC96C011EBA0A8D92BC4F9AE02.roa (raw, json)
Hash identifier: zHPfMNXB432VGZ7YvMvkzufNA35eDby+v7koSxrC/08=
Subject key identifier: EE:30:56:DF:86:6A:E4:2E:D4:3D:66:86:9B:7C:6A:9C:A4:C5:93:43
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 89F5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E54C1DC96C011EBA0A8D92BC4F9AE02.roa
Signing time: Thu 30 May 2024 16:01:00 +0000
ROA not before: Thu 30 May 2024 16:01:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134937
IP address blocks: 45.127.104.0/24 maxlen: 24
45.127.105.0/24 maxlen: 24
45.127.106.0/24 maxlen: 24
45.127.107.0/24 maxlen: 24
103.51.24.0/23 maxlen: 24
103.51.26.0/24 maxlen: 24
103.51.27.0/24 maxlen: 24
103.97.96.0/22 maxlen: 24
103.133.8.0/22 maxlen: 24
103.133.48.0/22 maxlen: 24
103.148.168.0/23 maxlen: 24
103.157.176.0/24 maxlen: 24
103.157.177.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35317 (0x89f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:01:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a2bc-797d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:a1:2b:74:d6:f4:3b:1e:36:da:e8:13:42:
7c:4c:6e:04:08:b8:56:a2:90:1b:64:ff:5a:da:4b:
27:ed:18:34:c5:f4:75:83:14:2f:4e:50:df:51:08:
a5:2d:cf:e8:ff:6d:53:70:97:b4:82:eb:a3:e3:9d:
49:e7:ae:49:a2:02:71:87:a1:ae:a1:cc:72:59:29:
88:83:74:27:eb:3a:38:ee:dd:2f:49:30:ec:21:94:
00:f2:6f:d4:71:4f:ea:88:b3:b5:c4:49:bf:0b:32:
00:fb:b3:43:51:97:01:f1:3e:fa:12:ff:09:32:e7:
6b:09:62:e0:71:60:12:2b:85:aa:7b:93:4b:b7:fd:
db:dc:4c:e4:fd:79:d9:4a:98:62:52:52:cc:d6:cc:
d5:4e:7f:db:eb:d7:97:82:ed:ba:d7:9a:e6:fd:ac:
71:42:05:3f:10:b4:0f:ab:84:50:39:08:05:24:b0:
c5:c7:f3:5d:03:86:2a:d6:02:d0:7c:06:0d:2d:60:
2e:7d:29:45:4d:20:b1:a4:5a:99:54:1a:44:b9:1c:
0f:14:ba:1b:36:35:6e:89:8f:a7:30:b0:70:5e:78:
75:f4:3d:e1:ae:2b:c4:7c:62:ba:af:ee:b2:65:e5:
b6:50:c6:91:e8:11:c7:f7:f7:e1:9e:fc:58:53:ed:
8d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:30:56:DF:86:6A:E4:2E:D4:3D:66:86:9B:7C:6A:9C:A4:C5:93:43
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6E54C1DC96C011EBA0A8D92BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.127.104.0/22
103.51.24.0/22
103.97.96.0/22
103.133.8.0/22
103.133.48.0/22
103.148.168.0/23
103.157.176.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:c5:ec:6c:1c:4a:bb:6a:77:33:f3:6c:f2:b4:cf:4d:e4:ca:
0b:ce:0d:30:e1:6f:ff:e4:05:56:c0:01:ef:71:2e:62:95:6d:
38:ca:7b:7e:3e:95:95:58:00:be:1c:2a:d9:2f:0b:b0:e6:e6:
ec:ec:e5:3d:56:f5:ff:ae:fb:9e:b5:2b:3c:ea:2e:ac:11:fc:
af:16:56:9e:03:06:ba:0d:f4:55:e6:48:e0:4e:8d:48:94:a2:
90:68:c6:c6:93:61:5c:72:fd:08:05:0f:e8:68:9b:76:f6:a8:
73:fe:67:1b:8d:33:20:88:17:03:11:db:c4:af:c4:c1:bd:07:
ae:58:af:27:72:b3:8d:99:ca:90:91:22:05:c8:f8:d8:67:45:
22:ce:08:63:49:ae:d5:17:24:a5:bd:d8:44:e0:7c:81:6a:3b:
8d:6d:87:93:6b:af:d2:36:77:3e:21:fe:be:34:db:a4:66:9e:
97:45:3b:b5:e1:84:eb:e5:4f:18:f4:09:16:f7:d1:2f:cc:cf:
c2:95:1a:e0:da:28:95:97:db:ef:aa:d9:ef:c3:05:68:83:1a:
3b:7b:e6:7f:d4:53:39:79:4c:90:70:f5:b5:a9:7b:fb:ab:bb:
83:07:b7:a5:d7:af:5d:2f:bd:9e:c4:88:83:af:00:e8:66:a6:
22:a7:46:61
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAIn1MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MDEwMFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGEyYmMtNzk3ZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL3+oSt01vQ7Hjba6BNCfExuBAi4VqKQG2T/WtpLJ+0YNMX0dYMUL05Q31EI
pS3P6P9tU3CXtILro+OdSeeuSaICcYehrqHMclkpiIN0J+s6OO7dL0kw7CGUAPJv
1HFP6oiztcRJvwsyAPuzQ1GXAfE++hL/CTLnawli4HFgEiuFqnuTS7f929xM5P15
2UqYYlJSzNbM1U5/2+vXl4Ltutea5v2scUIFPxC0D6uEUDkIBSSwxcfzXQOGKtYC
0HwGDS1gLn0pRU0gsaRamVQaRLkcDxS6GzY1bomPpzCwcF54dfQ94a4rxHxiuq/u
smXltlDGkegRx/f34Z78WFPtjZ0CAwEAAaOCArkwggK1MB0GA1UdDgQWBBTuMFbf
hmrkLtQ9ZoabfGqcpMWTQzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzZFNTRDMURD
OTZDMDExRUJBMEE4RDkyQkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMEMGCCsGAQUFBwEHAQH/
BDQwMjAwBAIAATAqAwQCLX9oAwQCZzMYAwQCZ2FgAwQCZ4UIAwQCZ4UwAwQBZ5So
AwQBZ52wMA0GCSqGSIb3DQEBCwUAA4IBAQBrxexsHEq7ancz82zytM9N5MoLzg0w
4W//5AVWwAHvcS5ilW04ynt+PpWVWAC+HCrZLwuw5ubs7OU9VvX/rvuetSs86i6s
EfyvFlaeAwa6DfRV5kjgTo1IlKKQaMbGk2Fccv0IBQ/oaJt29qhz/mcbjTMgiBcD
EdvEr8TBvQeuWK8ncrONmcqQkSIFyPjYZ0UizghjSa7VFySlvdhE4HyBajuNbYeT
a6/SNnc+If6+NNukZp6XRTu14YTr5U8Y9AkW99EvzM/ClRrg2iiVl9vvqtnvwwVo
gxo7e+Z/1FM5eUyQcPW1qXv7q7uDB7el169dL72exIiDrwDoZqYip0Zh
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:25 2025 by rpki-client