Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8300DBF0401B11EE8CBAFB71C4F9AE02.roa
File: 8300DBF0401B11EE8CBAFB71C4F9AE02.roa (raw, json)
Hash identifier: iwzf2h27nTh2MD6n3IEorKk54pNkamW+Yxmwpu798oY=
Subject key identifier: AA:AE:A0:26:0A:03:7C:12:1E:19:2B:2D:A2:7F:1A:28:43:14:C3:AA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8C00
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8300DBF0401B11EE8CBAFB71C4F9AE02.roa
Signing time: Thu 30 May 2024 16:09:31 +0000
ROA not before: Thu 30 May 2024 16:09:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138260
IP address blocks: 103.124.172.0/24 maxlen: 24
103.124.173.0/24 maxlen: 24
103.124.174.0/24 maxlen: 24
103.124.175.0/24 maxlen: 24
2401:2a20::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35840 (0x8c00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:09:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a4bb-24db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c4:78:c8:a7:ca:c8:e9:12:a8:55:62:64:ae:
db:39:66:46:e6:73:66:59:82:73:0e:9d:12:83:57:
7c:ce:6a:76:f0:c7:dd:60:d6:d3:0c:e8:c7:74:bc:
cc:2b:a2:6c:d9:9a:db:df:20:69:67:6f:3c:55:a6:
d3:c0:95:65:84:41:83:f9:b1:97:e2:b2:05:97:cc:
18:6d:4c:9c:c4:5d:b1:84:48:47:a0:a8:15:df:fb:
4c:16:69:c1:c7:6c:24:c9:7e:5d:2e:48:d0:43:a5:
16:1e:c9:d9:55:3f:6f:2d:e4:e8:dc:e4:a1:8c:ca:
54:d8:3d:6c:c9:af:e2:bc:09:f0:14:4f:34:90:f9:
02:36:cb:61:3a:63:aa:e5:1c:3e:d8:82:e4:bd:58:
a4:b3:a3:fe:f8:0d:47:56:ef:6d:af:f6:a2:33:75:
ac:98:37:65:2d:12:21:d1:92:90:da:18:0e:92:0b:
ac:ec:18:7c:47:fc:d7:eb:91:7e:b9:a6:9d:dc:26:
93:d2:70:b2:80:49:68:c3:96:2b:59:9e:f6:fd:24:
42:fb:65:84:e8:fc:45:e8:88:0b:00:17:31:ad:ab:
32:25:6a:aa:b4:9d:cc:27:6a:d2:b2:b2:d6:da:fe:
45:2f:32:23:a8:b8:fd:ca:69:11:dc:81:34:b9:7a:
af:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AE:A0:26:0A:03:7C:12:1E:19:2B:2D:A2:7F:1A:28:43:14:C3:AA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8300DBF0401B11EE8CBAFB71C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.124.172.0/22
IPv6:
2401:2a20::/32
Signature Algorithm: sha256WithRSAEncryption
0b:91:8d:0c:bc:65:62:d2:7f:95:62:ba:2b:59:95:24:81:36:
79:6e:bb:93:49:9c:7f:b5:f9:4e:cf:6d:67:d4:d7:23:ab:ff:
aa:a3:67:c2:5a:01:77:1f:7f:99:6c:c4:19:ba:42:52:f1:86:
24:76:e2:87:d0:42:09:70:53:90:cd:0d:9d:bc:ab:e0:5c:53:
33:20:d7:e5:31:59:e3:b1:6e:84:4f:42:3f:3b:ee:1a:fb:e8:
d9:19:a5:8a:71:42:a6:41:84:c1:37:8f:77:a3:13:dd:56:cf:
0f:31:0a:bf:3c:35:32:99:b2:53:55:4c:11:78:fe:0c:f7:48:
d7:4b:e8:49:07:f3:09:e5:76:45:47:51:22:c5:8e:eb:7f:51:
17:4e:56:78:16:04:1d:6f:00:54:b7:6e:d1:b9:79:83:91:9a:
3a:5e:93:23:da:ec:78:cf:29:b8:f8:d9:7c:31:43:8c:66:3b:
e0:f9:2f:38:a0:23:81:4e:05:62:d6:fd:41:f7:86:dd:a3:08:
15:b0:51:48:4d:f2:60:42:dd:4d:65:c8:06:a5:01:55:48:51:
df:c5:a5:46:fd:e5:b2:2a:1d:4b:7e:bb:51:ba:29:3b:fe:d1:
1a:3f:3d:3c:76:26:59:0b:de:28:5d:a4:5a:99:f2:e1:f9:62:
6a:54:f9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:32:16 2025 by rpki-client