Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7443505E719111EFB09F8313C4F9AE02.roa
File: 7443505E719111EFB09F8313C4F9AE02.roa (raw, json)
Hash identifier: JxHIn1GXIsdWhNtfNbC32Yt34LTF8OzowEdnOZ13Hdg=
Subject key identifier: 30:CC:A0:FF:3F:83:03:8F:63:97:D7:4C:B4:CD:36:D4:D9:8C:8C:F1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9884
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7443505E719111EFB09F8313C4F9AE02.roa
Signing time: Fri 13 Sep 2024 05:31:41 +0000
ROA not before: Fri 13 Sep 2024 05:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 132778
IP address blocks: 103.144.36.0/24 maxlen: 24
103.162.216.0/23 maxlen: 24
103.214.96.0/24 maxlen: 24
103.250.187.0/24 maxlen: 24
2001:df2:6a40::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39044 (0x9884)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Sep 13 05:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66e3ce3c-02b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:fd:e9:a4:07:79:07:5a:66:d5:6f:47:aa:
50:e3:e1:6e:8b:a1:98:16:84:c5:8f:7c:9f:82:fd:
51:42:c8:89:33:3e:af:6a:1b:4a:56:da:f1:cd:44:
8c:97:d3:0f:db:98:91:95:cb:d8:75:e7:7a:2d:71:
40:a0:3d:e5:1a:07:18:6c:a7:f8:79:dc:70:45:c9:
52:18:e5:4c:c3:14:dd:51:b4:b5:bf:7f:fd:09:d7:
31:2c:94:70:b9:9b:25:9e:0b:6a:df:a6:c0:80:31:
a8:d6:15:6b:b1:82:7a:5f:52:4e:fa:69:ec:04:5d:
38:88:a0:2f:82:b9:ad:6f:dc:91:b3:17:62:50:72:
fe:c5:c3:a0:30:67:1c:82:19:81:d8:81:e5:43:72:
4f:0b:3b:b9:51:13:0f:64:e0:12:22:35:c5:b4:b1:
7a:b8:50:08:90:f6:e9:4b:4a:1a:d8:3a:08:30:4b:
24:35:51:68:d7:f9:33:39:4c:a9:2d:6d:e3:a3:3d:
93:23:5c:22:ee:73:6e:55:13:02:3d:f7:94:a6:bb:
29:76:e3:3d:c2:25:b8:1f:cf:26:bb:4e:ea:40:89:
f8:d2:d7:db:bc:7d:37:56:07:3d:82:5d:dc:d9:0a:
b7:69:55:00:cb:8c:a3:e1:bd:3c:69:82:6a:56:17:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CC:A0:FF:3F:83:03:8F:63:97:D7:4C:B4:CD:36:D4:D9:8C:8C:F1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7443505E719111EFB09F8313C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.144.36.0/24
103.162.216.0/23
103.214.96.0/24
103.250.187.0/24
IPv6:
2001:df2:6a40::/48
Signature Algorithm: sha256WithRSAEncryption
0f:1f:59:d0:ce:7d:33:42:29:61:1f:f1:37:18:f6:35:61:66:
c8:67:f8:79:de:f2:6f:3d:7a:e6:f6:a1:f3:9b:2e:d9:0d:a8:
f3:78:3a:8e:80:61:a6:94:eb:46:84:25:d6:21:83:72:df:fb:
45:60:b7:67:ee:4b:77:b4:c0:71:58:cb:11:15:3f:7b:f2:f4:
df:f2:36:30:00:ff:79:b3:60:a4:f0:65:cf:fe:b3:05:5d:c3:
ae:1b:09:dd:04:eb:46:72:f6:a3:77:28:cb:ea:ff:63:c9:92:
50:2c:51:79:1e:bd:35:06:d2:dd:63:e8:43:8b:7f:bc:4b:90:
72:47:18:76:37:98:3b:a2:ec:f4:58:00:a2:1e:d4:fa:dc:cc:
df:df:91:a2:f5:66:6a:2e:bd:25:c1:ac:fe:68:1f:44:79:65:
32:aa:c7:52:3a:1c:a0:64:b1:2a:1a:12:44:66:e9:7c:37:aa:
e6:3e:23:80:6c:09:8e:7c:30:2f:f1:2e:51:11:df:c4:5e:5d:
1e:18:93:53:62:30:e8:35:69:0b:26:15:d8:15:11:c0:63:55:
72:28:07:3e:37:04:07:2e:5b:5a:c6:89:b1:7f:82:59:ba:b3:
59:7e:8f:5a:0b:d7:2b:25:29:02:11:53:c8:9d:ad:05:03:10:
b5:5a:b5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:53 2025 by rpki-client