Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E65B038B8FB11E9AB5F3B1BC4F9AE02.roa
File: 9E65B038B8FB11E9AB5F3B1BC4F9AE02.roa (raw, json)
Hash identifier: npoTRvc1Xy1F7BBJHqhwxUry+jDXAR4nHqE7qabGDaU=
Subject key identifier: AE:31:D5:5B:4A:21:FD:68:32:0B:56:F8:92:C8:72:AB:57:6A:B1:6B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 90E4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E65B038B8FB11E9AB5F3B1BC4F9AE02.roa
Signing time: Thu 30 May 2024 16:29:51 +0000
ROA not before: Thu 30 May 2024 16:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45528
IP address blocks: 1.22.36.0/24 maxlen: 24
1.23.62.0/24 maxlen: 24
103.159.239.0/24 maxlen: 24
113.193.25.0/24 maxlen: 24
113.193.48.0/24 maxlen: 24
113.193.128.0/24 maxlen: 24
202.56.117.0/24 maxlen: 24
202.56.118.0/24 maxlen: 24
202.56.119.0/24 maxlen: 24
202.56.120.0/24 maxlen: 24
202.56.121.0/24 maxlen: 24
202.56.123.0/24 maxlen: 24
202.56.124.0/24 maxlen: 24
202.56.126.0/24 maxlen: 24
202.56.127.0/24 maxlen: 24
203.76.128.0/24 maxlen: 24
203.76.129.0/24 maxlen: 24
203.76.130.0/24 maxlen: 24
203.76.131.0/24 maxlen: 24
203.76.132.0/24 maxlen: 24
203.76.133.0/24 maxlen: 24
203.76.134.0/24 maxlen: 24
203.76.135.0/24 maxlen: 24
203.76.136.0/24 maxlen: 24
203.76.137.0/24 maxlen: 24
203.76.138.0/24 maxlen: 24
203.76.140.0/24 maxlen: 24
203.76.142.0/24 maxlen: 24
203.90.64.0/24 maxlen: 24
203.90.65.0/24 maxlen: 24
203.90.66.0/24 maxlen: 24
203.90.68.0/24 maxlen: 24
203.90.69.0/24 maxlen: 24
203.90.76.0/24 maxlen: 24
203.90.77.0/24 maxlen: 24
203.90.78.0/24 maxlen: 24
203.90.79.0/24 maxlen: 24
203.90.80.0/24 maxlen: 24
203.90.82.0/24 maxlen: 24
203.90.85.0/24 maxlen: 24
203.90.86.0/24 maxlen: 24
203.90.87.0/24 maxlen: 24
203.90.88.0/24 maxlen: 24
203.90.89.0/24 maxlen: 24
203.90.90.0/24 maxlen: 24
203.90.91.0/24 maxlen: 24
203.90.92.0/24 maxlen: 24
203.90.94.0/24 maxlen: 24
203.90.95.0/24 maxlen: 24
203.90.96.0/24 maxlen: 24
203.90.97.0/24 maxlen: 24
203.90.98.0/24 maxlen: 24
203.90.99.0/24 maxlen: 24
203.90.100.0/24 maxlen: 24
203.90.101.0/24 maxlen: 24
203.90.102.0/24 maxlen: 24
203.90.103.0/24 maxlen: 24
203.90.104.0/24 maxlen: 24
203.90.105.0/24 maxlen: 24
203.90.109.0/24 maxlen: 24
203.90.110.0/24 maxlen: 24
203.90.111.0/24 maxlen: 24
203.90.112.0/24 maxlen: 24
203.90.113.0/24 maxlen: 24
203.90.114.0/24 maxlen: 24
203.90.115.0/24 maxlen: 24
203.90.116.0/24 maxlen: 24
203.90.117.0/24 maxlen: 24
203.90.118.0/24 maxlen: 24
203.90.119.0/24 maxlen: 24
203.90.120.0/24 maxlen: 24
203.90.123.0/24 maxlen: 24
203.90.124.0/24 maxlen: 24
203.90.125.0/24 maxlen: 24
203.90.127.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37092 (0x90e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a97f-f3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:15:9d:ef:2f:30:a9:c0:a2:e2:d3:31:10:e4:
99:af:36:53:08:1c:d9:8e:18:ef:e9:8b:22:8d:31:
ec:15:55:13:9f:d0:aa:37:05:88:ee:10:86:02:51:
05:60:69:b0:3f:34:4b:dd:97:aa:88:6e:6f:9c:65:
09:2e:99:9b:26:cb:cc:5e:cc:4a:9c:92:04:30:52:
7e:8e:59:ef:b2:26:64:a9:b4:7f:71:d9:35:c9:39:
a6:da:04:d5:26:27:59:b1:b3:0f:6d:02:f2:3f:f8:
95:c0:84:02:c3:70:05:6f:28:64:53:2c:77:a4:5b:
03:39:34:64:87:48:f1:13:0f:81:1b:d5:6f:af:ed:
3f:e3:1e:1b:b6:ba:c8:00:06:22:67:c8:ec:15:00:
9e:a9:f4:b1:b7:a0:7e:31:81:2b:36:11:7a:aa:68:
69:c9:2a:99:22:fe:da:2f:53:5b:cb:03:20:91:c0:
3d:72:ec:30:a2:5b:71:c2:53:8f:6f:9b:ac:17:4d:
87:d2:c2:48:58:ce:34:5a:dc:a1:c0:9b:88:db:8f:
2a:2c:cd:65:4e:72:46:02:48:84:02:58:aa:4e:26:
ee:25:ee:84:69:c0:a1:38:cb:a2:a6:94:a3:49:1d:
16:db:bc:b8:07:7a:6a:0b:78:08:9d:a8:97:f3:67:
60:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:31:D5:5B:4A:21:FD:68:32:0B:56:F8:92:C8:72:AB:57:6A:B1:6B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9E65B038B8FB11E9AB5F3B1BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.22.36.0/24
1.23.62.0/24
103.159.239.0/24
113.193.25.0/24
113.193.48.0/24
113.193.128.0/24
202.56.117.0-202.56.121.255
202.56.123.0-202.56.124.255
202.56.126.0/23
203.76.128.0-203.76.138.255
203.76.140.0/24
203.76.142.0/24
203.90.64.0-203.90.66.255
203.90.68.0/23
203.90.76.0-203.90.80.255
203.90.82.0/24
203.90.85.0-203.90.92.255
203.90.94.0-203.90.105.255
203.90.109.0-203.90.120.255
203.90.123.0-203.90.125.255
203.90.127.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c4:83:85:66:5b:d6:77:db:60:1f:31:3c:20:39:6b:98:b3:
b5:39:fa:02:19:8c:4d:06:e8:de:ee:eb:e9:54:40:f2:8f:b3:
b5:35:3a:fb:5d:1f:5e:0c:89:d7:26:ab:74:d2:79:22:4e:70:
92:de:47:d1:ca:98:a0:f7:50:fe:05:4f:5a:55:7a:e3:d7:15:
16:85:84:e7:03:38:49:42:e2:53:0c:33:0e:d0:90:a2:a8:00:
a0:e7:70:0c:29:31:be:c6:b8:0d:8d:96:d7:a4:7f:f9:ab:0d:
37:e3:6a:4e:e9:2f:33:e4:49:70:d4:5f:b4:36:7c:7c:c6:86:
93:d8:05:d8:80:a8:54:f0:82:9f:dd:d2:e7:6f:a7:3a:9d:60:
68:c4:8d:14:0c:a8:ef:8b:16:47:e5:e7:aa:49:81:12:6b:f5:
2e:12:e2:87:65:21:de:d9:c0:3c:ad:23:c8:f6:9e:c6:22:1d:
84:f8:bc:9c:51:e9:d6:45:fc:02:8c:b5:48:62:9f:32:13:09:
07:63:14:b8:eb:bc:fa:1c:14:de:0d:0c:8b:5b:09:b7:09:c0:
1a:de:57:b1:e2:e4:a2:1d:9b:58:04:19:a2:d0:77:e3:0c:57:
6c:ef:2f:63:ac:28:e8:86:cb:34:f8:bd:76:f7:8a:33:de:de:
32:fd:0e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:50 2025 by rpki-client