Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/849897D0203111EB93E5E643C4F9AE02.roa
File: 849897D0203111EB93E5E643C4F9AE02.roa (raw, json)
Hash identifier: NN9Evh4gGyyokXubRXvB0BGKlt4+vLK/pyGol4EsJMQ=
Subject key identifier: B5:7B:1F:10:A0:E9:DC:55:52:41:CC:02:EB:3C:16:BE:A6:68:E1:C9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 60A7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/849897D0203111EB93E5E643C4F9AE02.roa
Signing time: Fri 25 Nov 2022 08:21:34 +0000
ROA not before: Fri 25 Nov 2022 08:21:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138718
IP address blocks: 103.113.104.0/22 maxlen: 24
103.186.48.0/23 maxlen: 24
2001:df5:3880::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24743 (0x60a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 25 08:21:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63807b0d-bba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:91:68:fd:af:ca:65:dc:54:21:4e:d6:29:
6e:cc:48:5b:7b:ed:7a:a7:97:fb:41:35:67:9b:79:
4c:fd:de:64:f2:92:af:de:b3:20:74:44:c6:e1:12:
9c:21:c7:b9:be:a6:e2:44:43:46:0e:c7:de:6b:eb:
01:8d:e3:4e:48:36:fa:fb:3f:90:10:e1:72:5a:b8:
60:fb:50:02:7c:6a:f2:cb:dc:5b:6e:68:8a:f2:bc:
f9:38:05:10:98:52:a7:67:48:e5:0c:84:06:ea:54:
dc:b0:47:91:34:b9:91:1e:6f:c2:dd:f0:45:d8:61:
87:9a:5f:12:de:f4:f3:65:6b:01:79:0b:8b:eb:4d:
71:51:a6:2c:ce:fc:f2:fb:8d:61:bf:bc:9a:66:7a:
eb:fd:3d:36:c0:87:98:8c:71:aa:22:6e:64:d7:d1:
13:c9:a5:5a:0a:d5:01:1c:ef:fc:43:f1:04:9f:d1:
63:24:21:27:ab:06:45:14:08:16:81:a4:eb:24:5f:
ce:a3:7e:41:c1:1d:dc:fc:32:0c:1b:90:ca:c4:d1:
70:d2:4e:d3:23:3f:d5:c2:8b:e9:25:a3:6a:95:71:
49:49:67:1b:7f:d9:48:45:84:ac:77:e4:f3:a7:49:
ff:f2:9f:9a:96:51:73:f9:23:8d:85:c9:9f:9b:1c:
c4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7B:1F:10:A0:E9:DC:55:52:41:CC:02:EB:3C:16:BE:A6:68:E1:C9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/849897D0203111EB93E5E643C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.113.104.0/22
103.186.48.0/23
IPv6:
2001:df5:3880::/48
Signature Algorithm: sha256WithRSAEncryption
8c:8a:e4:21:0c:66:40:31:13:97:9f:57:ce:13:ef:2c:c9:f7:
a1:05:a9:d3:ec:7f:6f:0b:6c:07:94:ab:9e:70:0b:cc:02:42:
18:95:27:72:af:7e:d4:9a:5d:dc:16:96:23:94:61:dd:2a:e6:
88:c5:02:53:e7:76:dd:c4:3e:36:72:00:56:ec:a0:cb:de:be:
01:19:b4:c8:14:52:09:e1:39:37:c6:12:24:1a:aa:78:d5:72:
80:f0:4e:d1:24:6f:52:cd:44:34:be:f2:d0:f0:85:a1:e3:41:
f1:11:6c:5f:f2:cd:64:5b:9f:51:c2:f7:96:0f:05:43:56:7a:
fb:e4:76:f8:32:c5:e5:09:a5:14:2c:e6:8e:b2:8e:f5:d8:44:
0c:6d:d8:4b:60:fa:d4:17:0e:15:af:28:38:65:bc:93:fe:f5:
fa:1d:cf:c5:92:6a:01:15:ea:6b:f6:ab:6d:4f:8f:8e:b5:ee:
82:65:d9:4f:e2:b2:8e:6f:c2:e4:2e:9c:11:04:f5:3a:0c:73:
b5:82:57:5d:59:14:58:6d:75:4f:81:e9:f5:34:2d:fd:95:0f:
d7:50:ee:b7:f4:fc:bc:b9:4c:b1:e4:eb:0b:55:28:a3:14:d9:
7a:61:97:a5:9a:cf:cc:4b:16:22:0b:d3:5d:2d:be:a8:f9:d3:
1e:78:e5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:26 2025 by rpki-client