Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4E2BE56BEBC11EF99CCDE61C4F9AE02.roa
File: B4E2BE56BEBC11EF99CCDE61C4F9AE02.roa (raw, json)
Hash identifier: rVgN8tmwzembtVFyw+2/wwJb9nZ2xnoGuIPkmyNenMU=
Subject key identifier: 19:F1:56:07:B8:F0:76:9C:0E:D4:A3:4A:E6:7B:1D:9B:3C:DD:FA:77
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A011
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4E2BE56BEBC11EF99CCDE61C4F9AE02.roa
Signing time: Thu 26 Dec 2024 05:56:46 +0000
ROA not before: Thu 26 Dec 2024 05:56:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.85.16.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.87.28.0/22 maxlen: 24
103.88.124.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.111.128.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.142.64.0/23 maxlen: 24
103.155.108.0/23 maxlen: 24
103.170.220.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.195.196.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40977 (0xa011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 26 05:56:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=676cf01e-94a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:2b:b1:d9:11:56:4c:fe:d2:bd:f9:ca:b6:
5c:9c:67:3a:b1:d9:89:a0:c0:79:e4:bd:f5:38:38:
cd:e5:2b:03:be:d1:9d:e3:e6:35:bd:3d:ca:f7:83:
c4:47:00:71:c7:6a:eb:1c:a4:c5:07:d5:de:75:8c:
fa:07:4a:83:29:1d:ce:6e:af:f3:2e:ab:74:17:c7:
ab:f5:71:03:9d:13:83:5a:a8:e1:d5:a5:8c:a5:92:
05:41:81:1c:12:21:a9:86:4c:b3:ef:c9:7c:10:af:
e6:79:67:2a:c4:89:5e:27:dd:6b:77:ee:1c:73:be:
1b:83:e5:88:4f:d4:ad:60:3f:c5:fc:d4:00:7c:95:
d8:37:59:e7:f0:64:d5:6d:db:29:78:3a:40:10:58:
f2:99:08:8e:9b:1b:7d:53:7e:ac:33:d2:3c:82:97:
ae:69:69:4c:ed:12:5d:07:c0:9b:eb:82:7e:2a:a7:
91:0e:1e:46:ea:3f:3f:bc:28:ed:1e:1c:45:c4:28:
97:25:bf:9e:f7:ff:5b:be:ff:2a:68:ee:8c:e8:b9:
f1:87:d8:b2:f4:a7:b7:82:30:27:8f:83:a5:b8:84:
f9:55:cf:00:2d:ba:da:59:27:a2:67:20:15:e6:f8:
b1:18:ab:b4:c3:4e:a3:d1:f0:03:63:ef:2d:69:99:
ac:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F1:56:07:B8:F0:76:9C:0E:D4:A3:4A:E6:7B:1D:9B:3C:DD:FA:77
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4E2BE56BEBC11EF99CCDE61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.231.116.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.27.168.0/24
103.27.170.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.85.16.0/22
103.86.20.0/22
103.87.28.0/22
103.88.124.0/22
103.108.76.0/22
103.111.128.0/22
103.118.8.0/22
103.142.64.0/23
103.155.108.0/23
103.170.220.0/23
103.171.236.0/23
103.180.216.0/23
103.192.72.0/22
103.195.196.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.226.224.0/22
103.228.172.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
7e:f7:e3:da:a4:49:f2:41:62:c3:c6:e5:46:a8:4c:70:57:5f:
6b:c4:26:2d:ac:96:6f:82:04:9e:7f:c1:d5:a5:50:ff:27:8a:
f8:4f:59:a2:52:5e:54:70:9f:7c:0d:ee:ae:78:3b:20:29:f8:
e9:f8:59:ff:c5:19:99:53:57:e2:01:b5:a3:af:ba:9a:25:79:
52:c6:28:26:29:e9:96:40:31:b9:80:b5:ab:9d:9c:82:bd:53:
28:17:d9:d1:79:84:ad:41:e7:3a:50:23:ee:34:21:79:82:48:
e7:15:ff:f2:7f:e5:98:8e:80:79:08:e8:f4:8e:b6:5f:f3:10:
34:f4:d0:e3:e3:b5:1d:35:10:50:46:1a:2f:6c:ae:af:c8:6d:
14:d9:6c:07:2d:6e:f5:7b:93:09:9b:c1:67:c3:a7:eb:e8:7f:
ca:d7:ce:f6:75:89:8c:54:7d:ec:d4:4a:bb:b7:16:b5:69:4e:
06:75:18:eb:c1:d7:5b:a4:73:01:10:cf:96:f0:ba:fe:5b:8a:
44:6f:2c:79:72:9e:99:7b:d4:86:33:cb:63:9f:3f:b2:12:0a:
98:23:a4:50:b4:20:86:24:d6:ca:1c:02:a9:9e:f1:ea:19:e9:
d7:34:31:5d:02:3a:41:52:96:40:9e:c2:d8:5f:a6:82:75:ee:
6e:e5:c9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:32 2025 by rpki-client