Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72370748876C11EEB28E0164C4F9AE02.roa
File: 72370748876C11EEB28E0164C4F9AE02.roa (raw, json)
Hash identifier: /gqal8QfEsnFMu9gMdWwUS6IPaezPC2e1+1BbLnTnO0=
Subject key identifier: D1:58:AE:4A:C4:AE:8A:82:5E:C8:67:36:E7:41:C9:DA:F7:46:F7:CA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7E15
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72370748876C11EEB28E0164C4F9AE02.roa
Signing time: Mon 20 Nov 2023 06:17:14 +0000
ROA not before: Mon 20 Nov 2023 06:17:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150030
IP address blocks: 103.178.160.0/23 maxlen: 24
103.178.166.0/23 maxlen: 24
103.178.202.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32277 (0x7e15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 20 06:17:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655af9ea-bdb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6d:d9:a6:20:f5:fb:75:ce:6f:24:d4:73:6d:
f6:a2:66:52:44:dc:29:b6:15:43:54:25:44:ac:34:
8e:8e:17:e4:b5:bc:ab:d7:ea:13:2a:43:ab:fb:75:
50:13:51:7a:07:a3:36:68:bd:1c:82:44:59:fb:7e:
10:c5:a8:73:96:19:c4:e2:e8:f4:83:5a:26:fc:a1:
61:0d:29:cd:3c:58:3b:bd:28:15:54:34:c6:09:9e:
7c:35:2e:f1:8f:1b:d7:1c:55:60:b5:c4:7d:81:f6:
21:f5:96:29:1a:98:e5:53:a6:e0:ac:73:d0:15:59:
b6:c5:b9:c6:1c:f0:4b:08:2d:f7:fd:59:44:a9:a0:
8d:08:d7:a5:d1:dc:f6:10:30:15:96:39:37:35:12:
a7:9e:52:37:dc:db:a8:6f:62:5f:98:d3:6d:11:9f:
00:6f:23:a5:ca:fc:4c:7c:64:f6:d1:4e:f2:ed:da:
c2:1a:9b:e8:d1:50:f8:28:04:6f:b0:e9:a8:aa:db:
3d:18:13:c3:a4:c4:42:33:f9:c6:cc:d8:81:0a:02:
6d:76:86:55:ba:2e:b2:37:50:31:2b:02:bd:c7:93:
b6:60:b0:1c:95:a4:b0:01:cc:ce:b8:f3:a7:92:77:
fb:5e:fa:cb:e7:40:c4:21:e9:1b:b4:e5:e4:7b:bd:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:58:AE:4A:C4:AE:8A:82:5E:C8:67:36:E7:41:C9:DA:F7:46:F7:CA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/72370748876C11EEB28E0164C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.160.0/23
103.178.166.0/23
103.178.202.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:bd:bc:ec:c5:8d:2b:c7:00:1a:88:d8:4c:08:ef:6d:85:86:
b6:ac:c3:b4:c1:40:61:5f:4a:8d:db:1b:7d:89:f4:3d:f8:3f:
36:07:fe:15:d3:12:2b:0f:a1:fc:35:a7:cc:2e:20:61:d3:ed:
64:a5:a9:8a:d8:c9:03:cb:35:f1:ab:24:c6:ab:8e:4d:be:18:
b5:2d:4a:8b:82:21:a3:b9:39:a1:af:04:e8:ff:65:61:4f:2e:
9c:de:b6:ff:a8:a7:b1:78:e0:4c:c5:e5:09:8b:56:02:50:b6:
fc:78:80:45:6a:c8:f4:d1:bf:58:19:2e:e5:f4:0a:d2:1e:7f:
3c:2b:c0:ec:5b:00:a4:35:bb:b8:47:70:ab:6d:90:52:e6:51:
a6:9d:80:a8:f9:6c:7a:85:5a:f3:45:e8:11:75:f1:c7:91:10:
5c:6a:d6:7e:95:1c:74:29:6e:66:8b:95:6f:30:f5:ee:9f:26:
85:91:34:05:68:a2:63:d4:90:9a:1b:c6:5d:a3:86:1b:40:c9:
d2:b7:ab:bc:0a:68:df:31:d7:a4:11:64:d1:37:b1:8e:4f:45:
fa:d1:49:96:e6:0d:ba:30:be:a2:9e:07:f8:6c:0e:a3:a9:85:
d8:1f:06:0b:c7:99:1e:40:07:44:33:a8:db:b4:c6:85:d6:14:
d8:47:64:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:12 2025 by rpki-client