Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E6CC2DA745F11ED890CA515C4F9AE02.roa
File: 7E6CC2DA745F11ED890CA515C4F9AE02.roa (raw, json)
Hash identifier: eWSXZs+ivy45cODspSyZg7gCh4q8KXFfE4cNmtWJiPs=
Subject key identifier: FA:E6:97:0F:46:9F:8B:0E:F9:B5:EE:B4:BC:85:53:5C:FE:CB:DD:87
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 62DD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E6CC2DA745F11ED890CA515C4F9AE02.roa
Signing time: Tue 10 Jan 2023 06:11:50 +0000
ROA not before: Tue 10 Jan 2023 06:11:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137085
IP address blocks: 27.123.240.0/23 maxlen: 24
43.225.248.0/22 maxlen: 24
103.37.98.0/23 maxlen: 24
103.79.167.0/24 maxlen: 24
103.91.72.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.91.75.0/24 maxlen: 24
103.91.76.0/24 maxlen: 24
103.91.77.0/24 maxlen: 24
103.91.78.0/24 maxlen: 24
103.91.79.0/24 maxlen: 24
103.93.39.0/24 maxlen: 24
103.101.112.0/22 maxlen: 24
103.120.152.0/23 maxlen: 24
103.138.9.0/24 maxlen: 24
103.158.41.0/24 maxlen: 24
103.160.222.0/24 maxlen: 24
103.174.28.0/24 maxlen: 24
103.174.29.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.178.117.0/24 maxlen: 24
103.204.70.0/24 maxlen: 24
103.206.51.0/24 maxlen: 24
103.206.96.0/24 maxlen: 24
103.206.97.0/24 maxlen: 24
103.232.232.0/22 maxlen: 24
202.4.169.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25309 (0x62dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 10 06:11:50 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63bd01a6-d9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5b:9b:8e:48:46:55:26:96:15:c8:0c:39:55:
dd:d8:ae:d5:7e:3c:c9:2b:87:47:5e:5a:09:a3:fe:
a1:1d:a5:64:a7:e3:3e:c5:4c:9b:af:6e:17:32:eb:
4a:48:61:f3:e6:60:2e:db:d8:8e:a3:36:0a:c0:fb:
0c:90:0a:e2:69:b7:7f:ef:0d:79:a8:e6:cd:89:c2:
0f:39:2f:7f:f7:1b:bc:b0:11:db:6e:d8:17:c6:74:
9f:bd:b3:29:a2:7d:8d:eb:4c:44:e3:f2:70:a2:5d:
b6:bc:6d:17:17:0e:a3:db:8f:2d:d5:4d:5b:de:d1:
ea:68:b6:f8:2e:ab:5f:f7:68:d4:70:bb:e6:66:b7:
d8:dd:1e:3f:cc:8e:c2:70:b5:32:97:d2:96:4b:86:
7e:1e:6b:3f:66:f5:19:ac:ad:f3:19:d0:e4:e1:21:
9a:4c:11:2b:25:a6:cd:46:89:dc:73:10:86:d4:6c:
d5:70:67:7a:37:5d:4d:d0:60:2a:82:55:df:66:f4:
76:34:25:79:a0:ca:1e:16:c2:02:b0:5a:20:ae:5a:
2d:37:74:4e:ec:9d:b8:af:c6:e5:1a:ca:e3:4e:54:
85:e1:37:73:37:87:6a:60:d4:28:39:97:9f:fa:e7:
7d:02:33:eb:4a:4e:c0:f3:d3:06:24:95:1c:2d:51:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E6:97:0F:46:9F:8B:0E:F9:B5:EE:B4:BC:85:53:5C:FE:CB:DD:87
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7E6CC2DA745F11ED890CA515C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/23
43.225.248.0/22
103.37.98.0/23
103.79.167.0/24
103.91.72.0/21
103.93.39.0/24
103.101.112.0/22
103.120.152.0/23
103.138.9.0/24
103.158.41.0/24
103.160.222.0/24
103.174.28.0/23
103.175.77.0/24
103.178.117.0/24
103.204.70.0/24
103.206.51.0/24
103.206.96.0/23
103.232.232.0/22
202.4.169.0/24
Signature Algorithm: sha256WithRSAEncryption
96:2c:42:22:d9:c7:a8:f5:c4:a1:b9:f6:1e:4a:0f:ec:2a:4e:
b0:09:81:09:49:e5:8a:53:58:88:45:b3:4f:0f:1f:5c:76:a9:
9d:0d:89:31:53:6a:dd:f3:49:c0:3b:c2:be:98:6e:56:ac:22:
ac:42:3d:91:9f:d9:50:61:ea:d8:7a:40:e7:87:78:d3:98:d8:
6d:e0:be:4e:f5:b4:24:26:64:f3:b9:74:76:56:59:a0:d5:8c:
58:2b:92:ee:d4:1d:2b:10:df:53:2c:6d:7e:72:c2:6b:3c:b4:
f2:28:3a:09:42:73:80:a4:36:d4:ca:8b:f6:ed:fb:7b:30:cd:
10:69:53:fc:3a:7e:5e:ee:82:68:31:ff:8d:97:f1:b0:a8:d3:
a0:31:e5:47:1c:01:32:30:f1:d3:40:b9:a7:bc:65:e8:74:b1:
3f:8a:47:5f:71:cd:67:ab:b7:c1:bc:f0:c8:08:c1:6b:88:64:
97:3f:c5:1b:45:e9:02:99:5f:d6:10:fb:95:4d:00:34:7b:df:
3a:0c:54:4b:f9:eb:b8:88:39:db:4b:4b:af:0d:87:52:3c:89:
f2:cb:08:8b:f5:d8:f9:84:11:ae:d6:c2:9b:d0:ca:db:3e:25:
be:70:07:2e:af:e2:d6:d8:29:1c:3e:cf:22:af:bb:eb:87:32:
08:8d:32:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:49 2025 by rpki-client