Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A45EE942F36311EB82270C5EC4F9AE02.roa
File: A45EE942F36311EB82270C5EC4F9AE02.roa (raw, json)
Hash identifier: CYtXGuR0TR5OC0bYu+msOgDqmR6Xe/OJ37ahRXJb4W8=
Subject key identifier: 9E:B1:EF:5B:F1:F3:91:EB:5F:B7:46:F7:DA:37:04:1A:7C:F1:F2:8E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5789
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A45EE942F36311EB82270C5EC4F9AE02.roa
Signing time: Fri 17 Jun 2022 10:51:48 +0000
ROA not before: Fri 17 Jun 2022 10:51:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137085
IP address blocks: 43.225.248.0/22 maxlen: 24
103.91.72.0/24 maxlen: 24
103.91.75.0/24 maxlen: 24
103.91.76.0/24 maxlen: 24
103.91.77.0/24 maxlen: 24
103.91.78.0/24 maxlen: 24
103.91.79.0/24 maxlen: 24
103.101.112.0/22 maxlen: 24
103.120.152.0/23 maxlen: 24
103.138.9.0/24 maxlen: 24
103.151.166.0/23 maxlen: 24
103.158.41.0/24 maxlen: 24
103.161.32.0/24 maxlen: 24
103.174.28.0/24 maxlen: 24
103.174.29.0/24 maxlen: 24
103.178.117.0/24 maxlen: 24
103.204.70.0/24 maxlen: 24
103.206.51.0/24 maxlen: 24
103.206.96.0/24 maxlen: 24
103.206.97.0/24 maxlen: 24
103.232.232.0/22 maxlen: 24
202.4.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22409 (0x5789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 17 10:51:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62ac5cc3-7548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:49:94:e7:94:bc:12:d5:0c:4e:fc:ff:91:
43:d2:a5:4f:90:d4:da:c0:67:96:67:77:af:1c:d3:
14:7a:83:18:d7:f6:1e:76:3b:2c:1f:53:29:34:b8:
d3:98:88:ad:48:26:a2:79:88:9e:d4:53:77:e9:84:
26:54:3e:6d:b4:6f:6c:15:d9:f7:42:1c:9c:a5:69:
1e:1e:98:5e:ab:08:d5:2b:71:28:f4:00:04:92:a0:
99:89:c2:6f:15:4a:8b:84:79:be:8e:be:d1:53:25:
10:a2:d1:3d:c4:91:d7:65:fe:07:a7:0b:1c:4b:14:
81:41:34:16:49:ea:e4:30:97:ea:d6:40:66:19:6a:
90:e1:e8:24:e1:cc:10:33:a5:ce:98:1b:00:d6:ea:
9f:0a:98:76:2b:c0:79:b6:4d:b2:b9:22:a9:4d:a2:
3c:16:7d:98:59:f0:4a:50:20:28:c5:f2:44:3a:23:
0e:bc:53:fe:55:8c:2e:47:4a:f1:4b:b8:75:ed:e3:
ef:b7:97:39:3d:bb:09:14:a1:15:07:51:b4:56:fb:
77:eb:39:7d:0e:a6:3b:9f:99:8a:65:4d:19:a4:c5:
58:a8:c9:61:2c:3d:b8:64:9b:19:0c:7d:45:09:6b:
87:4e:31:c3:31:4b:b0:f3:17:5a:8e:f2:2f:47:3b:
5f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B1:EF:5B:F1:F3:91:EB:5F:B7:46:F7:DA:37:04:1A:7C:F1:F2:8E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A45EE942F36311EB82270C5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.248.0/22
103.91.72.0/24
103.91.75.0-103.91.79.255
103.101.112.0/22
103.120.152.0/23
103.138.9.0/24
103.151.166.0/23
103.158.41.0/24
103.161.32.0/24
103.174.28.0/23
103.178.117.0/24
103.204.70.0/24
103.206.51.0/24
103.206.96.0/23
103.232.232.0/22
202.4.169.0/24
Signature Algorithm: sha256WithRSAEncryption
56:11:76:cc:1c:a6:57:5a:68:d0:ff:0a:77:98:e0:cb:67:49:
de:04:c5:b3:b9:8a:02:c0:73:13:00:46:26:89:cb:ff:ea:c6:
6c:0d:4a:39:df:75:88:03:9b:60:86:8c:a5:20:3b:4a:c5:2b:
03:67:91:35:f6:ba:e4:47:d9:f5:33:e2:3a:3b:c8:97:ed:b2:
39:1d:15:cb:f6:c6:79:13:bb:a8:69:e6:51:db:94:78:3f:d6:
5d:8a:ed:6b:22:1a:f6:08:ef:3d:77:b6:3f:5f:84:40:fa:0e:
25:77:04:33:88:9f:da:bf:23:4c:45:0a:24:b1:e1:08:96:2b:
a8:ae:8e:16:e6:e3:1e:15:8b:15:f2:40:ef:e8:eb:54:de:41:
6c:4c:30:c6:ea:83:64:69:ee:8b:cd:dc:14:b2:05:eb:09:01:
6c:ba:34:b5:eb:75:1f:56:84:3c:9c:20:e0:75:ed:ef:a4:93:
00:a2:f0:fa:89:18:fd:cf:05:87:e8:7e:94:fb:ff:ea:1b:66:
73:0b:e0:82:70:08:88:9b:7e:77:44:8d:6c:c6:6d:04:5f:cf:
a1:67:0d:7c:56:e3:4e:91:0c:68:80:9d:8a:80:52:85:dd:f9:
43:d6:85:35:62:b3:a5:fc:23:8b:47:79:82:23:67:b9:11:b9:
94:0f:84:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:49 2025 by rpki-client