Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF4A900CC38211EFBAAF912DC4F9AE02.roa
File: AF4A900CC38211EFBAAF912DC4F9AE02.roa (raw, json)
Hash identifier: lw9kOOp1arYs6Br3WQ3LngZ9Evt+Rx/LDnO49Tbi1K8=
Subject key identifier: 28:6F:54:B6:2F:ED:77:56:74:AE:69:43:AA:4A:39:8A:FC:E4:4E:E5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A054
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF4A900CC38211EFBAAF912DC4F9AE02.roa
Signing time: Thu 26 Dec 2024 12:12:33 +0000
ROA not before: Thu 26 Dec 2024 12:12:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.85.16.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.87.28.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.129.206.0/24 maxlen: 24
103.142.64.0/23 maxlen: 24
103.155.237.0/24 maxlen: 24
103.156.122.0/23 maxlen: 24
103.166.119.0/24 maxlen: 24
103.171.236.0/23 maxlen: 24
103.173.240.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.195.196.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41044 (0xa054)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 26 12:12:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=676d4830-dc37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:aa:bb:ed:e0:97:cb:03:7e:4f:41:c5:0d:cc:
3e:88:c6:61:a9:d4:09:d9:6b:14:99:33:e9:43:bb:
85:f6:9c:03:7a:01:3c:ee:ba:fb:14:1a:91:07:d0:
09:83:05:62:55:3b:6d:00:fb:90:fd:f2:0e:13:6c:
67:77:8d:72:26:da:06:a4:ff:98:1e:ea:40:21:d8:
16:d0:49:e9:53:93:6f:af:08:9b:af:cf:0a:bb:eb:
06:01:5c:03:13:4b:f9:39:8f:eb:4c:30:ee:e9:a0:
21:94:ec:56:78:eb:c1:68:e3:55:dd:20:8e:0f:0b:
44:74:b6:2b:6c:ae:d2:21:3c:c5:1d:f8:7d:69:49:
f5:71:1f:c7:04:93:f4:23:b3:d7:28:4b:52:f9:b8:
45:90:bd:97:08:00:3c:c8:d5:f4:97:1d:01:d8:8a:
58:08:cc:bb:3f:93:66:d7:16:2b:ca:d0:10:5f:ef:
e1:79:28:94:28:48:3f:77:ed:d0:a4:84:57:34:91:
e5:98:54:50:4c:76:65:fb:4d:d3:2a:a9:9a:76:16:
7d:c6:d9:01:f5:78:07:d5:3c:f6:0e:ba:e7:49:ec:
ac:1f:b7:98:cc:6d:0d:d5:f9:72:98:45:64:da:1b:
16:09:1f:f4:c3:2c:c6:9b:58:bf:e2:86:d1:e5:24:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6F:54:B6:2F:ED:77:56:74:AE:69:43:AA:4A:39:8A:FC:E4:4E:E5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AF4A900CC38211EFBAAF912DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.231.116.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.27.168.0/24
103.27.170.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.85.16.0/22
103.86.20.0/22
103.87.28.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.129.206.0/24
103.142.64.0/23
103.155.237.0/24
103.156.122.0/23
103.166.119.0/24
103.171.236.0/23
103.173.240.0/23
103.180.216.0/23
103.192.72.0/22
103.195.196.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.226.224.0/22
103.228.172.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
0c:29:26:91:8d:5b:9e:bc:09:9d:11:92:97:b8:5d:bf:11:06:
b9:68:09:39:9b:52:60:76:b5:72:f1:db:96:29:e0:86:68:42:
01:f0:8c:89:1a:70:47:71:e8:15:de:68:a6:b5:30:bb:a5:85:
c9:d8:af:41:b9:b5:8d:4f:16:ba:e8:3d:0d:d1:d9:cd:fd:48:
95:88:12:63:7d:ab:5f:73:1d:4c:27:c7:52:c0:ea:b8:2f:32:
ae:3b:6c:c3:d7:0b:2b:fd:a0:c0:d8:c2:ac:57:fb:69:c1:10:
6a:e9:f8:8d:f4:3e:27:93:bc:e0:31:f4:18:d7:d1:b6:1a:6e:
0e:ca:12:03:c3:26:10:5a:16:9f:8e:7b:ea:f3:38:1f:c3:ed:
58:5c:12:19:3d:8c:05:d4:c2:d8:ed:3c:0f:4f:cf:81:73:72:
53:55:5e:ba:6c:95:9c:8a:c6:aa:af:33:ca:81:4f:18:71:a5:
18:78:97:0e:30:a1:cf:21:b8:7f:72:7d:a0:13:c0:19:d9:9c:
9c:ec:ab:62:f8:34:e2:20:22:45:26:75:c4:ed:5b:6e:41:30:
5e:90:f5:ed:74:f9:e5:88:ee:a0:5e:bd:13:40:98:22:2c:02:
36:c7:f8:ac:9c:36:00:b1:37:05:0a:8c:ce:31:7d:82:e3:f4:
bd:eb:8d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:36 2025 by rpki-client