Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/962737DA170B11EE83DD6D79C4F9AE02.roa
File: 962737DA170B11EE83DD6D79C4F9AE02.roa (raw, json)
Hash identifier: g5baepmIEObqPv97b3JW/15YWJvPn3pSnhU8PdQ5GZ0=
Subject key identifier: A8:77:18:D9:BF:09:8C:83:35:D2:8B:22:AC:7C:D4:84:7F:1D:6E:D4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 74F3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/962737DA170B11EE83DD6D79C4F9AE02.roa
Signing time: Tue 04 Jul 2023 08:01:39 +0000
ROA not before: Tue 04 Jul 2023 08:01:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137085
IP address blocks: 27.123.240.0/23 maxlen: 24
43.225.248.0/22 maxlen: 24
103.37.98.0/23 maxlen: 24
103.52.32.0/24 maxlen: 24
103.68.140.0/23 maxlen: 24
103.72.196.0/24 maxlen: 24
103.91.72.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.91.75.0/24 maxlen: 24
103.91.76.0/22 maxlen: 24
103.93.39.0/24 maxlen: 24
103.101.112.0/22 maxlen: 24
103.113.110.0/23 maxlen: 24
103.120.152.0/24 maxlen: 24
103.120.153.0/24 maxlen: 24
103.138.9.0/24 maxlen: 24
103.154.8.0/23 maxlen: 24
103.158.41.0/24 maxlen: 24
103.160.25.0/24 maxlen: 24
103.160.222.0/24 maxlen: 24
103.173.238.0/23 maxlen: 24
103.174.28.0/24 maxlen: 24
103.174.29.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.178.117.0/24 maxlen: 24
103.181.119.0/24 maxlen: 24
103.184.41.0/24 maxlen: 24
103.204.70.0/24 maxlen: 24
103.206.51.0/24 maxlen: 24
103.206.96.0/23 maxlen: 24
103.225.70.0/24 maxlen: 24
103.232.232.0/22 maxlen: 24
202.4.169.0/24 maxlen: 24
2001:df1:d240::/48 maxlen: 48
2001:df2:3ac0::/48 maxlen: 48
2001:df2:3f40::/48 maxlen: 48
2001:df2:9640::/48 maxlen: 48
2400:d660::/32 maxlen: 32
2405:e100:1e::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29939 (0x74f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 4 08:01:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64a3d1e2-6feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:ac:d0:cc:97:45:8d:32:ab:87:b5:c3:72:
8c:53:c5:0b:07:4c:7f:50:5b:92:ca:c6:c9:81:8c:
2f:3d:f1:23:75:bb:6d:3d:3a:4b:1f:1a:cf:14:fb:
0d:e0:a4:41:1f:e6:c4:f5:e3:d7:2c:1d:f5:e6:b5:
ae:90:71:ea:4c:24:ee:b2:6e:7c:cf:55:d0:d6:0c:
0d:4c:91:31:89:7a:23:f8:50:1d:c6:c9:b2:2a:b8:
e5:99:6a:60:f4:a3:5b:87:33:0c:2c:33:dd:2f:84:
73:57:82:09:84:36:7d:78:7c:8f:fa:6a:6a:f6:38:
9a:c6:57:95:c1:ef:82:8d:cf:67:9f:ed:41:85:fa:
6e:f3:8a:87:e8:7e:d9:d9:f6:45:fc:f8:96:c8:f8:
a3:d1:64:5f:ef:b8:e8:ac:59:b1:69:2f:96:de:a0:
23:7d:89:5e:86:cc:82:b4:49:fb:36:5f:a5:97:cd:
c1:aa:26:87:48:87:99:44:f0:17:34:cc:9c:a1:e0:
db:a7:3a:29:2a:19:de:5a:e1:16:fc:ca:3f:45:cd:
37:99:9f:fb:11:e3:a8:95:5d:5f:86:b8:a2:88:4d:
ae:c5:67:21:ad:64:32:08:d8:b5:28:84:6e:6d:94:
20:39:44:13:d9:ec:01:48:a1:3e:d3:96:8b:ff:b0:
c9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:77:18:D9:BF:09:8C:83:35:D2:8B:22:AC:7C:D4:84:7F:1D:6E:D4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/962737DA170B11EE83DD6D79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/23
43.225.248.0/22
103.37.98.0/23
103.52.32.0/24
103.68.140.0/23
103.72.196.0/24
103.91.72.0/21
103.93.39.0/24
103.101.112.0/22
103.113.110.0/23
103.120.152.0/23
103.138.9.0/24
103.154.8.0/23
103.158.41.0/24
103.160.25.0/24
103.160.222.0/24
103.173.238.0/23
103.174.28.0/23
103.175.77.0/24
103.178.117.0/24
103.181.119.0/24
103.184.41.0/24
103.204.70.0/24
103.206.51.0/24
103.206.96.0/23
103.225.70.0/24
103.232.232.0/22
202.4.169.0/24
IPv6:
2001:df1:d240::/48
2001:df2:3ac0::/48
2001:df2:3f40::/48
2001:df2:9640::/48
2400:d660::/32
2405:e100:1e::/48
Signature Algorithm: sha256WithRSAEncryption
ae:c0:7d:88:e0:89:58:15:f3:52:70:38:ae:48:0c:05:f8:45:
02:93:cd:b4:7d:6f:dc:e3:07:90:ca:14:5d:22:b2:f0:a4:f9:
39:80:88:61:67:93:5c:55:e9:67:b6:c7:17:15:00:65:09:40:
0e:8a:02:0f:9a:d8:3b:79:62:17:af:18:3b:a1:81:08:1b:4e:
d5:a3:08:79:74:12:85:f0:6b:a8:c5:02:6c:06:7a:f0:98:b7:
c3:92:bb:ee:74:6c:c0:4c:a0:27:d7:8b:15:14:d3:ba:17:10:
72:6b:da:4a:d3:96:11:49:e7:35:01:fc:20:99:aa:96:ea:af:
65:d9:7a:a4:79:0f:57:d0:6d:2d:9e:10:26:12:2c:e0:d6:27:
74:54:db:05:3e:ae:b6:4d:36:40:1d:e6:41:6b:31:31:17:bf:
ea:b6:cc:51:7b:ef:04:99:73:e7:41:77:ba:d8:20:e2:db:ce:
79:df:07:5b:5a:be:aa:ef:f9:ab:bb:bb:fa:90:15:13:e2:83:
37:70:cc:9a:1d:b1:01:5d:b8:de:45:3c:6e:08:67:39:fc:69:
68:62:e9:ad:22:53:f7:83:da:b6:c0:d8:5e:68:53:b7:78:7a:
82:fb:59:44:ae:62:e2:00:b3:7f:14:6e:ea:77:9e:6b:3e:a6:
90:db:4d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:55 2025 by rpki-client