Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8749E320037411EEB6D5D751C4F9AE02.roa
File: 8749E320037411EEB6D5D751C4F9AE02.roa (raw, json)
Hash identifier: GcwFp6MdKfdqJzuR/jR2NHe89VRHKIjn7aCV66sK7zw=
Subject key identifier: 6C:53:FA:CC:F4:E8:CB:AE:AE:AC:5A:08:EF:2D:45:C6:AE:9D:89:F7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 734C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8749E320037411EEB6D5D751C4F9AE02.roa
Signing time: Mon 05 Jun 2023 07:42:32 +0000
ROA not before: Mon 05 Jun 2023 07:42:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140113
IP address blocks: 103.66.80.0/22 maxlen: 22
103.66.80.0/24 maxlen: 24
103.66.81.0/24 maxlen: 24
103.66.82.0/24 maxlen: 24
103.66.83.0/24 maxlen: 24
103.151.16.0/23 maxlen: 24
103.165.72.0/24 maxlen: 24
103.165.73.0/24 maxlen: 24
2400:3ce0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29516 (0x734c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 5 07:42:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=647d91e7-056d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:54:87:f0:01:8c:96:a5:36:cf:7e:75:a1:3e:
64:a4:d1:cf:bb:4c:f5:87:32:90:86:68:f4:11:eb:
3b:fd:93:a5:6a:16:c2:80:dd:ae:85:1c:11:8f:8f:
4c:cf:7f:cf:67:dd:d5:52:37:97:24:60:16:09:7c:
58:c4:74:e7:ef:a1:29:8e:5d:54:e6:e9:e4:9e:b7:
78:e5:4e:de:30:21:b0:55:2f:23:99:58:27:b5:de:
2b:85:e1:38:53:42:87:e0:53:3d:7d:e3:76:13:97:
72:15:51:5c:3a:35:41:ac:89:e0:1f:58:4c:30:94:
66:d6:67:f2:50:62:35:96:6e:bd:f7:03:d9:63:74:
af:f3:3a:d7:57:70:08:52:16:3f:46:21:32:2b:ca:
29:b7:49:7c:20:33:79:e2:0d:4e:ce:9c:17:4a:85:
74:d6:ad:0f:2a:03:b2:f9:b7:2d:52:63:ad:59:58:
d0:1c:0d:bf:35:00:75:08:bf:ca:36:12:2d:da:af:
ca:e3:56:76:53:91:26:ce:5e:c2:ee:f4:d2:f1:b6:
3c:cc:44:3f:3e:f0:79:06:2a:cf:f6:04:c1:b5:df:
77:f9:94:fb:4e:f0:55:69:38:67:38:2c:ee:5d:59:
6c:6b:4e:43:52:32:13:9b:9e:ab:78:cf:33:4c:3c:
7c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:53:FA:CC:F4:E8:CB:AE:AE:AC:5A:08:EF:2D:45:C6:AE:9D:89:F7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8749E320037411EEB6D5D751C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.66.80.0/22
103.151.16.0/23
103.165.72.0/23
IPv6:
2400:3ce0::/32
Signature Algorithm: sha256WithRSAEncryption
90:a2:fb:81:b6:61:2e:ae:8b:8e:c9:1d:5e:86:bb:f0:01:ca:
78:7e:80:57:1e:07:1f:ae:c4:d5:64:35:2d:85:ef:71:5a:08:
4e:76:3b:60:c9:88:44:25:68:8e:2d:a3:9a:21:4d:77:af:ef:
35:6a:76:8d:fc:f6:ba:3e:38:6d:03:d9:1a:b7:73:55:75:77:
f4:43:8c:c9:73:d2:a2:f0:be:e8:95:73:a7:8c:23:5f:25:9f:
e7:68:26:b9:97:e2:ab:d2:38:41:f8:4b:be:86:f4:7d:7b:5d:
b1:a6:2d:87:1c:50:12:12:88:5a:75:be:c8:e0:5a:f9:1f:a9:
c0:dc:3d:a0:0f:3b:09:4a:68:28:ad:d9:11:b8:31:57:d5:e7:
96:f3:6b:fb:04:e5:e8:e7:df:73:f1:6e:8f:f4:99:d9:18:07:
b1:e7:f0:b3:83:f1:01:d3:2e:c1:a3:8e:ad:b9:93:52:c8:1d:
8e:c8:bc:d8:50:a7:ed:a9:ae:ce:02:cb:e6:38:88:b9:3a:fb:
63:22:e7:34:c9:60:3a:63:30:5b:eb:0c:9f:b1:28:52:2e:a3:
ef:ea:83:25:2b:ec:05:cb:f6:17:f8:1c:26:32:29:0e:fd:a8:
03:10:40:77:20:60:29:83:8f:af:9b:e0:84:44:cd:2b:10:ad:
5a:ff:57:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:11 2025 by rpki-client