Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6F8EF264373D11EEA0A0A439C4F9AE02.roa
File: 6F8EF264373D11EEA0A0A439C4F9AE02.roa (raw, json)
Hash identifier: xAsbOyWZmsFThLRdoliARjDaeb0YZSHFquP3wZO+6tM=
Subject key identifier: 02:0F:FD:A5:AC:51:E5:8E:06:15:27:89:8C:81:77:8A:D6:DD:57:94
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 89EE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6F8EF264373D11EEA0A0A439C4F9AE02.roa
Signing time: Thu 30 May 2024 16:00:54 +0000
ROA not before: Thu 30 May 2024 16:00:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134924
IP address blocks: 103.141.166.0/23 maxlen: 24
103.158.174.0/24 maxlen: 24
103.173.124.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35310 (0x89ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:00:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a2b5-1f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:ab:da:eb:0a:9b:0e:af:f7:e8:6a:a4:0d:
ff:4d:ba:d4:dd:60:28:7f:8f:34:55:c3:7b:67:b7:
9f:15:9c:c3:26:3f:40:73:b4:5b:98:a6:a8:b7:f4:
6f:d4:98:6e:c9:20:ae:25:4e:57:c0:c2:d6:b1:1c:
83:68:c1:52:a7:31:b5:b4:8d:d0:9e:40:d5:07:a4:
87:7f:1d:05:08:bd:b3:3a:08:e5:e0:3d:0c:8d:9c:
c6:03:2b:26:59:b5:86:d3:c8:16:07:c7:d9:ba:64:
a0:fb:b6:4b:00:4b:1d:a5:e4:ed:59:7a:43:15:33:
9f:ff:64:b1:61:22:0f:c6:d0:c7:05:45:d8:e8:c6:
27:93:ac:b3:99:46:d7:f3:e7:51:57:fb:f9:20:ec:
51:5f:44:37:b2:78:3d:09:2e:48:05:6d:83:b3:9a:
25:3f:ad:c3:0a:38:03:93:73:98:8e:4e:80:75:d1:
9d:b5:cb:b9:3b:28:21:25:8c:5e:c3:c2:cc:a8:df:
ba:85:8e:2d:cd:b8:85:d5:3c:30:67:8a:e3:4e:99:
1f:30:2f:11:53:ff:94:a4:3a:87:14:0c:1c:ac:25:
43:87:dc:a7:2d:d6:6d:45:0b:a0:08:a5:0e:26:44:
9f:c4:4f:1a:bf:c2:c4:d3:dc:28:91:f2:20:c6:10:
12:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0F:FD:A5:AC:51:E5:8E:06:15:27:89:8C:81:77:8A:D6:DD:57:94
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6F8EF264373D11EEA0A0A439C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.166.0/23
103.158.174.0/24
103.173.124.0/23
Signature Algorithm: sha256WithRSAEncryption
89:f6:21:84:0e:e8:e9:55:b6:a5:fd:04:27:ad:8c:dd:bf:25:
3f:45:78:23:89:43:4e:76:bd:21:04:40:77:4f:06:b1:b0:fe:
48:a4:08:aa:bf:d2:71:bf:20:5b:42:99:12:6f:89:7e:dc:69:
92:c3:da:d6:87:7b:39:2b:07:b1:ef:70:04:c4:42:1e:53:f6:
47:5c:c2:be:76:c8:ee:9c:ef:2f:62:c3:79:fc:c8:9f:30:1e:
72:23:64:b1:c6:58:58:3e:f5:7a:dc:a9:f7:5b:ff:11:77:1e:
6c:a4:ef:13:eb:29:4b:bd:5b:43:98:06:bc:77:22:53:1a:03:
a6:f2:e5:b8:d1:c1:a9:43:6b:42:e1:92:f8:79:a6:6c:b4:b4:
f8:a1:19:78:ad:58:97:2b:d2:be:f0:16:66:00:e5:73:34:6f:
52:57:8c:b8:28:1e:03:50:5d:ed:a5:7a:01:80:fa:e5:40:4f:
e2:e9:1c:a8:6f:b5:d1:e8:08:9a:56:4f:eb:7a:cd:02:cd:83:
68:18:d6:80:4e:f0:82:3a:40:e6:bd:5e:33:b4:70:00:c7:cd:
38:ac:68:05:0e:e1:c9:08:81:eb:b5:08:80:09:db:27:23:c6:
69:c9:74:ee:13:c5:b6:9a:40:fd:8c:cb:12:33:d1:e0:75:0f:
2a:cc:02:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:53 2025 by rpki-client