Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74282672D90C11EDBA00DC2EC4F9AE02.roa
File: 74282672D90C11EDBA00DC2EC4F9AE02.roa (raw, json)
Hash identifier: Bte9CegHdDqke/QYP+2/zjIRWv6ycP/kLeKbRRbVBGg=
Subject key identifier: 6B:32:57:BE:9C:FE:61:19:A1:07:5D:F4:95:5E:26:95:D5:49:63:3C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7496
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74282672D90C11EDBA00DC2EC4F9AE02.roa
Signing time: Tue 27 Jun 2023 11:01:49 +0000
ROA not before: Tue 27 Jun 2023 11:01:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137085
IP address blocks: 27.123.240.0/23 maxlen: 24
43.225.248.0/22 maxlen: 24
103.37.98.0/23 maxlen: 24
103.52.32.0/24 maxlen: 24
103.68.140.0/23 maxlen: 24
103.72.196.0/24 maxlen: 24
103.79.167.0/24 maxlen: 24
103.91.72.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.91.75.0/24 maxlen: 24
103.91.76.0/22 maxlen: 24
103.93.39.0/24 maxlen: 24
103.101.112.0/22 maxlen: 24
103.113.110.0/23 maxlen: 24
103.120.152.0/24 maxlen: 24
103.120.153.0/24 maxlen: 24
103.138.9.0/24 maxlen: 24
103.154.8.0/23 maxlen: 24
103.158.41.0/24 maxlen: 24
103.160.25.0/24 maxlen: 24
103.160.222.0/24 maxlen: 24
103.173.238.0/23 maxlen: 24
103.174.28.0/24 maxlen: 24
103.174.29.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.178.117.0/24 maxlen: 24
103.181.119.0/24 maxlen: 24
103.184.41.0/24 maxlen: 24
103.204.70.0/24 maxlen: 24
103.206.51.0/24 maxlen: 24
103.206.96.0/23 maxlen: 24
103.232.232.0/22 maxlen: 24
202.4.169.0/24 maxlen: 24
2001:df1:d240::/48 maxlen: 48
2001:df2:3ac0::/48 maxlen: 48
2001:df2:3f40::/48 maxlen: 48
2400:d660::/32 maxlen: 32
2405:e100:1e::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29846 (0x7496)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 27 11:01:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=649ac19d-e56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:e2:09:60:d6:65:47:2e:75:5a:6a:0d:de:
45:7d:fb:87:92:c1:81:3b:1f:06:71:9a:b4:5c:ab:
11:17:40:ff:5c:8d:ee:ca:43:d4:32:97:a1:1b:60:
58:51:b3:42:2f:c4:19:1c:c9:13:83:a8:45:1e:80:
e4:02:48:cc:cd:8d:98:ca:15:ae:8a:c8:88:06:18:
45:f6:08:dc:2a:3b:33:46:42:67:39:47:5b:d5:48:
43:82:08:dd:e8:a7:28:7e:3f:77:67:f0:93:4f:23:
67:89:30:ec:a0:16:98:94:42:92:b2:d9:c3:09:cf:
8b:74:9b:0f:7f:f0:b4:35:d6:52:e0:d2:19:cb:fb:
45:14:3d:55:f9:42:4d:ff:57:27:fd:de:07:32:45:
0e:8f:43:76:50:a0:b4:c7:bf:a7:05:9e:df:fd:6d:
6d:c5:01:d7:76:2a:40:87:b7:1d:d2:17:76:65:ec:
af:1d:90:cf:a3:58:4f:e2:16:dc:56:8f:d9:22:70:
21:0d:b1:4b:10:ba:ea:5c:ae:32:e5:60:40:6c:3e:
de:aa:d7:f7:d9:89:e6:9c:2f:d2:9f:47:f1:2f:c1:
ce:c5:df:0f:08:22:be:38:86:84:32:75:a3:ef:35:
75:ab:b6:46:8c:ff:21:c8:26:62:3f:19:7a:7f:02:
2f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:32:57:BE:9C:FE:61:19:A1:07:5D:F4:95:5E:26:95:D5:49:63:3C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74282672D90C11EDBA00DC2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/23
43.225.248.0/22
103.37.98.0/23
103.52.32.0/24
103.68.140.0/23
103.72.196.0/24
103.79.167.0/24
103.91.72.0/21
103.93.39.0/24
103.101.112.0/22
103.113.110.0/23
103.120.152.0/23
103.138.9.0/24
103.154.8.0/23
103.158.41.0/24
103.160.25.0/24
103.160.222.0/24
103.173.238.0/23
103.174.28.0/23
103.175.77.0/24
103.178.117.0/24
103.181.119.0/24
103.184.41.0/24
103.204.70.0/24
103.206.51.0/24
103.206.96.0/23
103.232.232.0/22
202.4.169.0/24
IPv6:
2001:df1:d240::/48
2001:df2:3ac0::/48
2001:df2:3f40::/48
2400:d660::/32
2405:e100:1e::/48
Signature Algorithm: sha256WithRSAEncryption
8a:3a:5c:2b:3b:06:57:a6:1b:3a:ea:f6:68:2b:1c:e9:8c:aa:
ad:58:be:1e:9c:72:64:d5:45:64:0f:7f:c3:b8:da:29:7c:56:
88:bc:d8:dd:fa:7e:40:26:51:93:2e:ca:16:0e:a3:fa:f6:a0:
07:5f:0b:dc:60:e3:d5:cb:9d:93:c2:f8:4a:8c:f0:ce:64:fd:
c0:3b:9e:3b:d5:54:d2:19:3d:c8:57:e0:9a:e4:47:e1:35:27:
87:75:95:af:d1:eb:93:f6:7c:e4:4c:1b:2b:65:4b:d5:40:b7:
86:a7:9e:41:79:47:15:76:7a:e7:e2:0b:d8:28:c3:e6:19:3d:
2a:ad:e7:b5:90:4e:37:d7:62:d5:23:ec:8a:08:38:6c:7c:1a:
a9:a9:d3:37:cc:4a:e7:a5:0c:5b:da:c0:c7:48:8b:65:15:9c:
78:3e:bd:f7:c7:74:cd:94:10:33:d4:f7:57:1c:eb:26:fa:98:
df:58:6e:fe:de:8e:d5:41:8e:e4:6a:78:cb:45:d7:fd:1a:53:
d1:8a:f8:60:7f:c7:ab:92:35:a6:6a:dd:fb:3d:4d:11:65:41:
57:ac:bb:6a:3a:64:40:7a:1f:38:f0:e4:f0:55:36:9f:3a:53:
2e:57:53:02:40:99:ce:1e:08:f4:4b:6e:18:40:da:8d:ce:75:
ea:93:0e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:57 2025 by rpki-client