Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD43FC98FBE911EBBBD6245FC4F9AE02.roa
File: BD43FC98FBE911EBBBD6245FC4F9AE02.roa (raw, json)
Hash identifier: o0JP7z2x2qC17Kg1/IxJI35oMk4kiO7GfQHGAzyuDWc=
Subject key identifier: 29:09:01:C4:FD:F0:66:C3:1A:A3:8E:FB:BF:0D:D1:59:98:1D:94:59
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 56DD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD43FC98FBE911EBBBD6245FC4F9AE02.roa
Signing time: Tue 07 Jun 2022 08:51:42 +0000
ROA not before: Tue 07 Jun 2022 08:51:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 103.165.72.0/23 maxlen: 24
103.165.88.0/24 maxlen: 24
103.165.89.0/24 maxlen: 24
103.166.180.0/24 maxlen: 24
103.167.152.0/23 maxlen: 24
103.173.15.0/24 maxlen: 24
103.181.151.0/24 maxlen: 24
2001:df6:9580::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22237 (0x56dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 7 08:51:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=629f119e-cf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:00:0d:42:6f:b7:f9:8e:ab:e4:cb:c9:7f:b6:
8b:b6:1e:50:63:5d:e1:9e:24:80:51:3b:b8:29:dd:
2e:7a:76:ed:15:c3:a2:fb:02:74:be:12:7a:a2:e6:
83:c4:c9:1b:ef:2b:c2:05:f1:2a:8c:ec:1b:39:15:
ff:82:5f:df:4e:62:1e:9e:d2:d4:4c:ab:28:bc:84:
05:d7:20:ff:c7:93:34:b6:60:bd:49:9e:7c:5c:e3:
54:e6:d4:fc:c7:ee:3e:b5:73:02:39:04:84:27:11:
83:8a:7a:22:92:cf:50:b4:92:e8:15:07:9f:5e:d9:
cb:fb:04:24:e1:80:9e:01:c9:60:74:d8:ac:a0:5c:
17:65:70:f6:a0:9b:1d:95:e0:aa:c8:8c:a4:17:bb:
dd:74:45:d9:64:f3:54:61:81:c5:05:1d:00:b3:57:
a7:b1:47:a0:e4:51:4a:e6:e4:d3:1e:f4:4a:25:a9:
0b:fa:5b:cc:bb:aa:25:9d:8b:ef:76:10:84:65:04:
0e:5e:50:4a:21:b4:61:4f:27:39:ad:e5:47:77:ac:
89:ab:e4:00:97:63:4d:fe:6f:b6:12:bd:d4:c7:80:
39:76:52:fc:75:0a:1a:45:23:3c:84:c0:fb:96:ca:
52:2a:f9:e1:bb:05:c8:2a:ff:bd:38:3d:bc:0f:43:
fd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:09:01:C4:FD:F0:66:C3:1A:A3:8E:FB:BF:0D:D1:59:98:1D:94:59
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BD43FC98FBE911EBBBD6245FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.72.0/23
103.165.88.0/23
103.166.180.0/24
103.167.152.0/23
103.173.15.0/24
103.181.151.0/24
IPv6:
2001:df6:9580::/48
Signature Algorithm: sha256WithRSAEncryption
af:58:a8:38:c3:40:bd:0e:cd:74:d0:1d:b1:84:0f:c9:4f:0d:
53:c5:ae:ed:16:95:84:79:95:5d:e0:72:4c:63:56:aa:f0:c2:
31:e8:8f:d9:ad:62:af:a6:10:8b:76:80:15:1b:e6:0a:89:f6:
bf:c0:1c:02:46:11:42:d2:67:13:c9:e3:86:97:57:aa:ad:2b:
06:27:3d:3a:46:b2:ea:8e:37:d6:ac:58:6b:db:a3:43:2a:fc:
f3:e9:d4:34:5f:45:a6:ad:1c:81:b6:34:6b:7b:93:ef:22:22:
a8:42:45:0c:19:c3:0b:4d:21:ae:b3:ae:ee:86:db:17:fb:74:
e9:5f:5c:e6:44:bd:32:c7:d9:e6:41:34:2b:cb:ac:40:d1:54:
84:0d:1f:c3:e8:fe:4a:5a:20:e8:ad:6b:f4:6c:90:35:dd:85:
2e:81:73:fb:09:96:43:82:ae:8a:02:cb:8d:c2:2e:27:85:47:
f0:1d:2b:4c:ec:bd:1b:ee:fe:17:d9:0f:2c:ea:69:bd:ef:c1:
96:6f:f6:66:4e:67:26:b6:6d:99:c9:73:3f:d2:4a:fe:c7:21:
86:4c:87:8b:99:19:a0:ce:8a:ad:ae:5e:b2:d2:ac:26:cb:d6:
13:b2:80:cb:89:2c:54:ab:86:bb:d4:aa:d2:fc:db:3f:8d:9d:
b3:de:6d:c2
-----BEGIN CERTIFICATE-----
MIIFoDCCBIigAwIBAgICVt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwNjA3MDg1MTQyWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjlmMTE5ZS1jZjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArwANQm+3+Y6r5MvJf7aLth5QY13hniSAUTu4Kd0uenbtFcOi+wJ0vhJ6ouaD
xMkb7yvCBfEqjOwbORX/gl/fTmIentLUTKsovIQF1yD/x5M0tmC9SZ58XONU5tT8
x+4+tXMCOQSEJxGDinoiks9QtJLoFQefXtnL+wQk4YCeAclgdNisoFwXZXD2oJsd
leCqyIykF7vddEXZZPNUYYHFBR0As1ensUeg5FFK5uTTHvRKJakL+lvMu6olnYvv
dhCEZQQOXlBKIbRhTyc5reVHd6yJq+QAl2NN/m+2Er3Ux4A5dlL8dQoaRSM8hMD7
lspSKvnhuwXIKv+9OD28D0P9MQIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFCkJAcT9
8GbDGqOO+78N0VmYHZRZMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkQ0M0ZDOThG
QkU5MTFFQkJCRDYyNDVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTgYIKwYBBQUHAQcBAf8E
PzA9MCoEAgABMCQDBAFnpUgDBAFnpVgDBABnprQDBAFnp5gDBABnrQ8DBABntZcw
DwQCAAIwCQMHACABDfaVgDANBgkqhkiG9w0BAQsFAAOCAQEAr1ioOMNAvQ7NdNAd
sYQPyU8NU8Wu7RaVhHmVXeByTGNWqvDCMeiP2a1ir6YQi3aAFRvmCon2v8AcAkYR
QtJnE8njhpdXqq0rBic9Okay6o431qxYa9ujQyr88+nUNF9Fpq0cgbY0a3uT7yIi
qEJFDBnDC00hrrOu7obbF/t06V9c5kS9MsfZ5kE0K8usQNFUhA0fw+j+Slog6K1r
9GyQNd2FLoFz+wmWQ4KuigLLjcIuJ4VH8B0rTOy9G+7+F9kPLOppve/Blm/2Zk5n
JrZtmclzP9JK/schhkyHi5kZoM6Kra5estKsJsvWE7KAy4ksVKuGu9Sq0vzbP42d
s95twg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:48 2025 by rpki-client