Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A02471A8B64011EC9CA1463AC4F9AE02.roa
File: A02471A8B64011EC9CA1463AC4F9AE02.roa (raw, json)
Hash identifier: Z6NmPSSMlm2oxRZNZL/PkSiyU3xRuLuD2ZEPYMLRBIg=
Subject key identifier: 49:04:22:48:20:CA:E7:84:EC:EC:28:E7:DD:3A:44:08:28:A1:44:5A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4BB5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A02471A8B64011EC9CA1463AC4F9AE02.roa
Signing time: Thu 07 Apr 2022 07:02:02 +0000
ROA not before: Thu 07 Apr 2022 07:02:02 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 45235
IP address blocks: 43.231.52.0/22 maxlen: 24
45.248.28.0/22 maxlen: 24
45.250.212.0/22 maxlen: 24
103.8.40.0/22 maxlen: 24
103.48.64.0/22 maxlen: 24
103.50.144.0/22 maxlen: 24
103.98.36.0/22 maxlen: 24
103.216.176.0/22 maxlen: 24
103.219.132.0/22 maxlen: 24
119.42.152.0/21 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19381 (0x4bb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Apr 7 07:02:02 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=624e8c6a-8e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:2e:f1:f8:33:cf:f2:c5:42:9e:ba:0b:cd:
d5:24:78:55:0f:48:58:93:e2:ca:c2:e6:d2:20:bc:
47:d8:48:87:36:66:f2:b9:89:0b:49:48:43:75:f4:
bd:cb:bb:58:75:12:68:d2:02:75:d5:3b:ed:5d:72:
99:6f:72:b1:af:f0:98:f3:7d:32:7e:f1:90:cf:bd:
19:2b:24:e8:51:e4:fb:ae:83:1d:d4:4a:4f:e3:03:
32:d8:f1:4d:9d:78:51:4d:63:31:40:e2:25:b6:0f:
ad:56:06:81:38:c0:0a:92:52:a7:02:5a:b8:57:86:
5b:32:55:9e:f6:70:f2:fc:9e:09:cf:88:c0:ad:16:
a0:1d:ed:4d:d1:e9:05:d6:3e:46:0d:6b:1f:cf:02:
0b:cd:66:cc:58:d3:16:7b:b0:08:6a:c0:fa:eb:a8:
f6:cb:de:17:2d:4b:3d:b1:53:7a:b0:09:1f:34:bc:
5c:8a:bf:30:31:c5:0a:a3:3d:84:8c:e8:47:94:6e:
b4:98:36:52:49:e7:62:72:fe:a4:59:5e:9f:f0:d1:
e8:08:d0:bd:bf:b0:c7:66:92:b9:b9:64:fb:3a:77:
a8:36:54:5b:6e:e4:f3:69:f0:e6:f4:83:e2:97:d3:
38:1a:67:8f:6d:c8:e7:e0:b9:02:ed:2c:ba:8b:3f:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:04:22:48:20:CA:E7:84:EC:EC:28:E7:DD:3A:44:08:28:A1:44:5A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A02471A8B64011EC9CA1463AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.52.0/22
45.248.28.0/22
45.250.212.0/22
103.8.40.0/22
103.48.64.0/22
103.50.144.0/22
103.98.36.0/22
103.216.176.0/22
103.219.132.0/22
119.42.152.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:24:8a:c8:ee:06:14:0d:84:83:f2:63:78:40:83:7e:af:0a:
55:19:cd:44:16:15:c9:7e:79:79:dc:b8:6a:b9:59:48:1d:e5:
8b:64:64:db:65:19:69:f7:9b:b2:7c:d6:8a:a6:08:9b:bf:76:
4d:76:9f:9f:f7:af:47:e5:ab:2e:26:de:c5:51:8a:ed:de:6f:
a4:51:f5:ef:f0:95:6a:e3:14:ac:b6:fb:4b:f4:42:24:32:60:
f7:4b:23:2e:3a:26:cf:39:b3:3b:74:a7:99:a8:57:cd:e9:4a:
55:4a:28:35:5e:24:7d:f2:72:b7:e5:31:22:29:2a:b5:0d:77:
48:92:46:88:ed:b4:2c:72:a3:d5:80:8d:ca:7f:0f:5e:60:8c:
c1:34:88:e1:e0:51:e8:f1:0f:50:ea:9f:ee:89:6f:ae:a2:41:
b9:e9:e6:7c:e4:38:e3:3f:b9:5c:73:7b:9a:eb:21:68:bc:d3:
ba:d1:8b:d4:67:12:ca:2e:8c:df:a1:9b:c8:b8:06:79:1f:8b:
2b:67:d9:c4:bd:97:10:65:93:b3:ef:aa:1a:f1:53:71:8d:6a:
06:45:6b:da:26:9a:fc:2c:ba:25:89:bf:91:4f:08:a3:89:ea:
63:74:dc:fd:69:b1:fb:12:47:32:1c:54:d3:b1:b0:3d:fb:28:
6b:42:36:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:19 2025 by rpki-client