Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74B9B558F8DE11EFBE747065C4F9AE02.roa
File: 74B9B558F8DE11EFBE747065C4F9AE02.roa (raw, json)
Hash identifier: +USks6Vb9Sq89fAwJfKO9hmZYW23rs9sUYbJMCBNFYw=
Subject key identifier: 03:17:83:88:15:D8:05:B3:07:88:08:93:07:7E:EE:3E:D0:6F:47:0F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A90D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74B9B558F8DE11EFBE747065C4F9AE02.roa
Signing time: Tue 04 Mar 2025 09:53:00 +0000
ROA not before: Tue 04 Mar 2025 09:53:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140171
IP address blocks: 103.29.63.0/24 maxlen: 24
103.38.182.0/23 maxlen: 24
103.53.30.0/24 maxlen: 24
103.53.31.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
103.72.218.0/24 maxlen: 24
103.72.219.0/24 maxlen: 24
103.77.14.0/24 maxlen: 24
103.80.152.0/24 maxlen: 24
103.80.153.0/24 maxlen: 24
103.80.154.0/23 maxlen: 24
103.134.132.0/24 maxlen: 24
103.144.192.0/24 maxlen: 24
103.156.200.0/23 maxlen: 24
103.159.162.0/24 maxlen: 24
103.160.186.0/24 maxlen: 24
103.160.187.0/24 maxlen: 24
103.161.32.0/24 maxlen: 24
103.161.33.0/24 maxlen: 24
103.161.59.0/24 maxlen: 24
103.163.42.0/23 maxlen: 24
103.163.158.0/24 maxlen: 24
103.168.23.0/24 maxlen: 24
103.169.154.0/24 maxlen: 24
103.169.155.0/24 maxlen: 24
103.169.167.0/24 maxlen: 24
103.170.190.0/23 maxlen: 24
103.175.0.0/23 maxlen: 24
103.187.166.0/23 maxlen: 24
103.190.100.0/23 maxlen: 24
103.191.202.0/23 maxlen: 23
103.209.62.0/24 maxlen: 24
103.209.63.0/24 maxlen: 24
103.209.174.0/23 maxlen: 24
202.61.108.0/24 maxlen: 24
2001:df0:cf80::/48 maxlen: 48
2001:df1:1fc0::/48 maxlen: 48
2001:df1:2040::/48 maxlen: 48
2001:df1:20c0::/48 maxlen: 48
2001:df1:2240::/48 maxlen: 48
2001:df1:22c0::/48 maxlen: 48
2001:df1:2740::/48 maxlen: 48
2001:df1:8740::/48 maxlen: 48
2001:df2:240::/47 maxlen: 49
2001:df4:3ac0::/48 maxlen: 48
2001:df4:5640::/48 maxlen: 48
2401:c5a0::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43277 (0xa90d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 4 09:53:00 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67c6cd7c-51e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fc:68:3f:68:a2:ff:50:ed:bc:96:78:9c:fd:
07:21:f3:db:c0:44:c8:30:5c:dc:8a:aa:f4:cf:00:
0d:92:b5:7b:07:14:c8:e6:d7:21:17:e0:62:ee:8d:
2e:e6:af:ba:b4:38:f8:d1:d1:69:ab:19:b4:91:f0:
8c:82:b0:e3:9e:cf:fe:23:2a:76:20:55:6b:59:ea:
5b:3b:20:e8:b9:ae:a7:45:77:d5:4c:d5:19:11:40:
95:57:86:a9:5f:14:ea:92:64:da:19:44:c5:72:1a:
57:31:94:b1:53:85:d3:fa:af:a2:8c:26:7f:62:3a:
4c:2f:c7:b3:3c:29:b6:57:26:46:01:4b:71:ad:8f:
e1:f9:07:77:ba:05:e4:ce:06:ab:91:69:fb:b5:ae:
0c:26:f5:5b:d3:4f:27:c8:ef:d5:51:2b:09:fe:9f:
44:52:d1:36:d9:e5:48:8b:0c:4a:17:aa:c8:d3:39:
35:a0:a2:2d:5d:81:8b:d9:4e:bf:1b:fc:6a:5b:86:
5e:a6:37:f3:6f:70:76:6f:76:05:d4:4e:67:36:2f:
7f:e6:fa:42:17:71:df:29:e0:41:a9:74:53:29:b9:
65:38:69:76:b8:8b:d8:92:df:a2:d6:17:fe:80:f6:
5c:e8:0c:34:8b:36:93:ac:d9:9f:d6:ad:49:8e:6f:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:17:83:88:15:D8:05:B3:07:88:08:93:07:7E:EE:3E:D0:6F:47:0F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/74B9B558F8DE11EFBE747065C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.29.63.0/24
103.38.182.0/23
103.53.30.0/23
103.56.84.0/24
103.72.218.0/23
103.77.14.0/24
103.80.152.0/22
103.134.132.0/24
103.144.192.0/24
103.156.200.0/23
103.159.162.0/24
103.160.186.0/23
103.161.32.0/23
103.161.59.0/24
103.163.42.0/23
103.163.158.0/24
103.168.23.0/24
103.169.154.0/23
103.169.167.0/24
103.170.190.0/23
103.175.0.0/23
103.187.166.0/23
103.190.100.0/23
103.191.202.0/23
103.209.62.0/23
103.209.174.0/23
202.61.108.0/24
IPv6:
2001:df0:cf80::/48
2001:df1:1fc0::/48
2001:df1:2040::/48
2001:df1:20c0::/48
2001:df1:2240::/48
2001:df1:22c0::/48
2001:df1:2740::/48
2001:df1:8740::/48
2001:df2:240::/47
2001:df4:3ac0::/48
2001:df4:5640::/48
2401:c5a0::/32
Signature Algorithm: sha256WithRSAEncryption
03:0c:26:0b:32:54:a9:69:f5:52:5d:d7:76:b9:91:bf:46:b7:
b4:bc:2d:39:aa:87:94:b4:34:99:c7:d8:b6:ea:e1:24:22:f7:
43:48:77:2d:f8:2b:37:f9:73:10:5a:8b:33:fb:83:79:ea:e6:
28:8e:57:40:8c:11:d0:a6:6a:d9:48:ed:52:0a:b9:fd:ea:cc:
51:3d:2d:8c:4e:85:d2:13:25:ec:73:62:e5:ad:a0:84:7f:f9:
a0:53:81:39:21:0f:3d:24:98:77:24:c2:31:43:93:cf:9d:f3:
4d:fa:85:8a:47:a2:66:b1:ce:f3:90:80:01:a4:d4:8b:02:ce:
a4:15:b3:1e:e0:0b:82:f9:44:96:1f:ce:00:e1:35:84:27:f4:
67:c0:f6:60:2f:2f:40:9e:4c:2f:ae:47:51:86:70:aa:4e:c8:
77:63:f8:af:a6:0c:2b:ba:b0:9e:77:3e:3f:fc:e0:f7:95:4a:
46:7f:53:91:33:09:aa:c7:e6:9d:69:19:96:23:f1:4b:69:05:
a2:ab:98:28:5b:ab:c1:88:c2:a2:12:2b:8f:9b:26:97:10:31:
bf:f8:3b:02:ef:5b:b4:cf:95:c2:85:c2:45:c5:bd:4b:97:3b:
a0:67:32:11:8e:99:82:b1:b4:73:d8:75:3a:04:95:3e:0b:74:
d5:5a:02:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:51 2025 by rpki-client