Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/88FFDED0B11311EDAD264D50C4F9AE02.roa
File: 88FFDED0B11311EDAD264D50C4F9AE02.roa (raw, json)
Hash identifier: HgpAjBXQ4olJp4Q2oIYDEbPHhyQo2OIFJAM9OA9WA5Y=
Subject key identifier: 6F:AB:2D:C6:10:E0:80:BD:68:3F:3E:1B:15:BA:E1:D9:BE:CA:9A:B3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A17E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/88FFDED0B11311EDAD264D50C4F9AE02.roa
Signing time: Sat 04 Jan 2025 14:37:11 +0000
ROA not before: Sat 04 Jan 2025 14:37:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140641
IP address blocks: 103.93.94.0/24 maxlen: 24
103.95.50.0/23 maxlen: 24
103.97.104.0/24 maxlen: 24
103.97.105.0/24 maxlen: 24
103.97.106.0/24 maxlen: 24
103.97.107.0/24 maxlen: 24
103.119.170.0/23 maxlen: 24
103.140.72.0/24 maxlen: 24
103.152.79.0/24 maxlen: 24
103.171.45.0/24 maxlen: 24
103.182.64.0/23 maxlen: 24
103.251.150.0/24 maxlen: 24
103.253.70.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41342 (0xa17e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 4 14:37:11 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67794796-8fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3b:e3:41:35:22:54:70:cd:66:2c:a9:fa:7e:
70:fd:51:61:19:4b:45:6d:2a:a5:0e:70:08:7a:a1:
0e:1e:ec:48:5e:b5:17:f5:ec:c7:50:ba:d5:59:80:
68:f8:09:52:75:9b:69:c3:f8:9a:33:8b:cb:f6:6e:
3c:0a:12:03:69:cf:81:1b:8f:87:dd:f5:b4:3f:5a:
82:6b:34:d8:2d:23:47:e3:96:2e:16:b5:a3:21:b9:
e4:54:57:b9:6b:84:92:0a:11:b3:72:c3:f8:b0:b0:
a6:94:4e:96:2c:e5:af:01:83:cd:e3:01:a3:45:dd:
14:49:5d:4e:26:fe:db:77:f4:6b:0e:b8:15:74:5e:
a7:b1:3b:9e:1b:a2:61:b0:53:54:dc:04:24:a8:c1:
97:7d:b3:55:a5:f4:6d:6c:9e:46:2b:10:be:8b:51:
16:b1:dc:08:22:97:82:83:bd:78:b0:7a:47:3c:9f:
b7:60:93:b7:91:0c:68:56:44:e1:e9:0f:6e:72:ce:
ef:c8:c6:21:28:66:de:1f:0d:f5:5f:1e:7a:c1:13:
d6:05:3e:69:8c:39:e6:23:d6:05:13:9e:17:fc:5e:
e1:75:0d:9b:a7:6c:f7:0e:77:1f:42:89:81:bc:51:
9e:70:b4:84:a7:a6:f6:5c:7a:ba:66:bd:b6:94:a1:
17:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AB:2D:C6:10:E0:80:BD:68:3F:3E:1B:15:BA:E1:D9:BE:CA:9A:B3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/88FFDED0B11311EDAD264D50C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.93.94.0/24
103.95.50.0/23
103.97.104.0/22
103.119.170.0/23
103.140.72.0/24
103.152.79.0/24
103.171.45.0/24
103.182.64.0/23
103.251.150.0/24
103.253.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:80:8f:b0:2c:13:7e:0b:37:c4:25:3a:46:71:79:7a:ab:f9:
b4:78:e4:30:88:39:97:e9:18:93:8c:5b:ab:b6:59:b5:39:5d:
5d:d0:2a:a1:d1:b5:5d:89:85:0b:40:fd:e1:52:81:58:01:25:
f6:8e:c0:f7:27:f1:3b:93:1d:44:99:96:74:e9:ac:e0:5d:16:
87:62:90:71:c6:37:e5:28:34:be:d8:f8:3e:2d:5f:fb:90:1b:
d8:df:79:08:92:a4:7e:3b:30:69:b9:ae:71:5f:dd:60:c3:14:
f5:29:13:6f:41:11:67:b3:9e:66:b3:ea:b8:7b:57:f0:54:db:
c9:9d:ea:8f:7d:59:00:74:58:f3:61:22:91:2e:2a:5d:c3:b3:
c1:9b:53:05:ef:32:3b:08:29:96:fd:0b:91:87:e0:c5:9d:51:
90:6b:3e:3f:e1:85:52:7f:90:9f:45:13:a0:50:e6:fd:12:2e:
4e:28:69:d8:d7:db:25:18:e3:e1:b6:aa:db:1f:b1:d9:07:68:
ea:b9:2f:87:48:30:79:66:17:46:1e:e7:a7:23:f8:b8:e9:50:
57:55:b2:2f:74:9c:2a:b8:52:f5:1e:c2:4b:d3:61:a8:cf:63:
8b:99:6a:d0:a8:3f:05:f5:c3:13:75:c7:f1:a9:ed:2b:70:cb:
d4:93:01:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:07 2025 by rpki-client