Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7ACF5B885DF611EFA4DE9432C4F9AE02.roa
File: 7ACF5B885DF611EFA4DE9432C4F9AE02.roa (raw, json)
Hash identifier: 7C6ih+N4OGDN2bb8Cvbnxza/w+NjNIl46imxGsjOVIg=
Subject key identifier: 42:12:05:C7:7F:4C:08:D4:F2:81:6B:74:72:F1:34:5B:E6:7B:86:14
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 96F8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7ACF5B885DF611EFA4DE9432C4F9AE02.roa
Signing time: Mon 19 Aug 2024 06:48:26 +0000
ROA not before: Mon 19 Aug 2024 06:48:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 136677
IP address blocks: 103.86.95.0/24 maxlen: 24
103.94.104.0/24 maxlen: 24
103.94.106.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38648 (0x96f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 19 06:48:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66c2eab9-e2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d7:2c:bd:c2:1a:8a:8e:bd:13:2c:44:ec:82:
01:ef:53:c0:aa:15:a0:f2:f3:d9:3b:34:d2:7d:83:
94:8c:ff:41:14:7b:6a:9e:0f:30:bd:65:67:0b:f3:
16:d3:1c:bc:8c:63:da:8d:ff:d2:b8:39:7c:61:87:
bb:15:22:c7:70:27:61:1a:60:66:b8:36:ce:8d:0e:
36:18:90:20:64:08:90:1b:27:ab:23:3c:17:c2:8c:
c0:71:50:e5:b4:8a:77:7a:5d:79:df:76:69:66:e8:
f1:3c:39:3b:54:8b:0a:b1:bc:bf:ff:89:ca:d1:d8:
b4:97:91:b5:bd:e4:61:23:2a:a1:9e:f8:24:a4:d5:
4e:32:70:b6:ae:78:56:5a:82:6c:e8:62:d1:ad:ac:
ff:54:25:ad:2e:93:c9:ec:86:4d:fd:82:a5:92:98:
25:5f:10:a2:9c:3a:c1:a6:34:4e:2c:6f:22:cc:d9:
f4:95:90:84:a7:34:e4:67:84:10:59:d1:3f:4f:c2:
9f:57:78:37:af:93:cf:69:a4:88:21:6c:1d:f3:e5:
54:2e:c7:f9:33:d7:2e:c1:a9:da:d8:d3:e2:99:74:
16:1c:71:c0:ed:fb:aa:16:62:f1:2e:a1:b6:d6:34:
cf:e3:35:11:10:76:32:8a:00:8e:3a:e9:87:5b:84:
07:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:12:05:C7:7F:4C:08:D4:F2:81:6B:74:72:F1:34:5B:E6:7B:86:14
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7ACF5B885DF611EFA4DE9432C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.95.0/24
103.94.104.0/24
103.94.106.0/23
Signature Algorithm: sha256WithRSAEncryption
52:31:ea:3e:20:bb:df:40:0b:53:e2:98:0b:2c:ea:c8:f6:4f:
4d:4e:17:e0:6a:65:91:45:8d:4e:63:17:89:bd:25:11:0b:65:
da:c7:0b:84:29:e9:24:fa:ab:64:00:db:5b:e7:c0:3f:62:78:
b7:62:eb:13:33:d6:58:33:78:9f:d1:ee:39:94:20:12:6c:87:
b6:b6:44:11:e4:2e:5f:26:63:f9:a1:38:5d:30:28:0b:65:d4:
09:0a:9d:06:46:ec:5a:03:e3:d6:98:20:05:93:eb:ab:64:3c:
00:3c:c9:28:b2:6f:0e:82:0d:5b:a3:bd:40:8e:06:08:28:88:
02:3a:e1:85:05:39:e5:46:6c:cd:09:36:39:c9:dc:4c:3c:38:
5e:6f:b9:29:ed:3e:e9:ea:b8:27:e1:d7:89:b3:6d:01:50:db:
8d:78:19:8e:cc:0e:25:88:e0:1f:4b:9f:6b:a4:f7:1b:d3:20:
d0:ef:ab:80:8e:82:e8:49:0d:62:c5:d8:93:ae:5c:ad:d0:0c:
f3:db:2a:91:7e:95:77:a4:d2:5d:c3:4f:51:e6:7c:a3:70:55:
83:71:a7:ab:cf:6e:d9:ac:fc:ab:bd:b9:f5:a3:92:b7:6e:8c:
62:4b:c5:f3:8b:67:d8:df:b4:8a:56:4a:81:cf:ea:90:2b:86:
81:2c:b8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:15:01 2025 by rpki-client