Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7893E450619111EDB7A80521C4F9AE02.roa
File: 7893E450619111EDB7A80521C4F9AE02.roa (raw, json)
Hash identifier: 7IGF7TzRldvphOmPxYxQzMdnYNpYhgwh/aVsQbQ/IUA=
Subject key identifier: 39:90:DA:66:7B:97:07:75:95:C0:E6:0F:31:36:21:99:F4:F5:D2:8F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6008
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7893E450619111EDB7A80521C4F9AE02.roa
Signing time: Fri 11 Nov 2022 07:21:34 +0000
ROA not before: Fri 11 Nov 2022 07:21:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140125
IP address blocks: 103.168.0.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.181.64.0/23 maxlen: 24
103.181.152.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24584 (0x6008)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 11 07:21:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=636df7fe-7a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:f4:db:79:89:cd:1e:82:89:4c:85:9b:ee:
26:a2:26:c8:87:19:80:3d:62:76:29:68:cb:c2:d3:
62:94:0f:2c:70:bc:db:e4:35:72:d5:b6:63:c5:ab:
73:3c:57:3d:43:f9:9f:67:65:78:05:29:79:8a:96:
df:2c:b9:6d:fa:e7:bc:04:c4:a4:3a:b4:94:c2:eb:
a2:7d:2e:bc:d2:3a:f0:61:e9:fb:0a:9f:5a:7e:bf:
89:b1:a9:13:52:fe:ad:f6:32:8d:99:9d:40:41:c0:
5a:f7:3c:c3:a9:d0:c3:88:7e:fa:e7:dd:77:ce:76:
a4:25:8e:9a:58:6e:99:71:e0:07:eb:34:72:9c:9f:
b1:52:be:0a:7f:01:38:a6:78:85:e4:41:ee:5e:83:
af:9a:69:5a:46:60:07:79:48:8f:1c:6a:f7:df:61:
bc:78:8f:9a:bf:25:9c:bf:4c:c3:a7:e7:64:11:5f:
03:f9:31:8b:43:bb:d5:d4:9f:36:0d:72:35:c4:40:
63:af:23:fe:4c:3d:d8:ce:d7:c1:71:ae:8d:e9:94:
a0:d0:f0:dc:09:8a:ca:fe:9c:5e:a4:ce:ba:11:52:
76:0d:2c:ba:13:df:eb:2b:5a:1c:d8:d8:9a:08:b5:
6f:00:9f:31:47:d2:05:a3:2e:29:81:d2:fd:6e:98:
24:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:90:DA:66:7B:97:07:75:95:C0:E6:0F:31:36:21:99:F4:F5:D2:8F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7893E450619111EDB7A80521C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.0.0/23
103.173.14.0/23
103.179.94.0/23
103.179.118.0/23
103.181.64.0/23
103.181.152.0/23
Signature Algorithm: sha256WithRSAEncryption
41:b9:20:6d:58:6e:4e:ea:26:f3:6a:6b:7a:07:86:79:5a:b3:
bf:cc:4a:df:72:37:5f:f1:5f:17:68:2f:6e:92:66:01:54:d3:
49:c7:69:a1:12:6e:62:a0:5f:b1:e7:ea:3c:f8:29:d1:89:e5:
95:f0:b0:d6:85:57:d9:bd:ee:e3:42:b1:7a:aa:5b:6d:59:10:
f7:4c:ac:05:e3:81:df:45:b7:00:2e:d9:f8:da:69:d9:9a:dd:
80:83:4d:0e:0b:4f:98:43:8d:81:96:80:92:29:9f:e4:60:c6:
29:bc:01:2f:99:24:6e:28:96:54:8f:a0:4f:83:3f:9f:a7:11:
4a:6b:52:a7:51:2f:6d:c2:7a:ae:0a:74:6c:fd:91:ca:6e:35:
08:0b:d1:20:e1:f3:f8:32:d3:c8:5e:87:6b:5f:76:71:24:ee:
e3:40:aa:56:9d:09:e9:82:f8:be:4a:28:1b:b8:73:77:d1:0a:
66:32:c2:43:a3:e5:dd:3f:43:c3:6f:5e:5e:2e:2f:74:bf:f6:
a7:db:26:8b:98:37:8c:00:30:db:b1:da:a3:9e:1f:40:00:cb:
1e:04:16:d7:66:49:2d:cc:d2:35:d8:f7:d1:bd:b9:80:e8:c4:
bc:a0:49:a6:3a:22:2d:3a:2b:0c:29:51:26:e7:42:d9:58:04:
74:d7:a0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:54 2025 by rpki-client