Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BE655FAEFBE911EBBBD6245FC4F9AE02.roa
File: BE655FAEFBE911EBBBD6245FC4F9AE02.roa (raw, json)
Hash identifier: ZctbHioCTUEg1XdVEeWcZ278Tf2O+PCvMNddDCMBOTs=
Subject key identifier: AE:9E:C5:E9:AE:8A:A9:CA:6C:2E:37:C0:FB:FE:39:90:46:69:1F:18
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4E7B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BE655FAEFBE911EBBBD6245FC4F9AE02.roa
Signing time: Fri 13 May 2022 05:21:42 +0000
ROA not before: Fri 13 May 2022 05:21:42 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 16509
IP address blocks: 103.18.158.0/24 maxlen: 24
103.18.159.0/24 maxlen: 24
103.166.180.0/24 maxlen: 24
103.167.152.0/23 maxlen: 24
103.181.194.0/24 maxlen: 24
103.225.180.0/23 maxlen: 24
103.229.210.0/24 maxlen: 24
103.229.211.0/24 maxlen: 24
103.241.133.0/24 maxlen: 24
103.241.134.0/24 maxlen: 24
103.241.135.0/24 maxlen: 24
103.252.40.0/22 maxlen: 24
2001:df6:9580::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20091 (0x4e7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 13 05:21:42 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=627deae6-325e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:19:8c:c6:00:2c:5d:e9:fa:ae:8c:29:d5:ab:
0e:32:c3:be:25:64:18:be:34:e6:fd:91:03:02:bc:
bc:c1:31:88:50:3e:41:5f:df:7c:1c:9c:73:3a:4d:
12:c0:1e:e0:8e:05:42:60:77:b2:59:f1:2e:b9:a3:
4a:2b:b6:75:7b:a7:42:9d:52:57:fe:20:06:b6:e1:
57:5c:5d:92:22:af:68:ff:15:0a:85:af:b5:1d:25:
bc:3a:56:1e:c6:53:ce:ec:57:e2:e4:62:71:f9:37:
89:f7:d6:55:a5:53:b0:63:dd:78:59:94:88:68:89:
df:dd:71:e3:e2:f5:ae:ce:a6:6b:c8:14:f8:93:31:
fa:b4:b4:3b:38:88:0e:cb:93:ea:e5:fb:db:06:ae:
ac:78:f1:f5:ef:f6:0d:09:4d:bf:23:d8:e5:bb:23:
e7:2b:bf:2c:c8:78:3e:2e:9a:dc:9c:1f:f1:09:16:
26:c0:4e:ed:4a:87:4b:df:42:ff:c7:e1:55:69:45:
fc:b1:b3:f1:20:27:dd:c1:82:15:c4:fe:b6:4d:71:
a1:d8:31:69:74:57:60:37:60:2c:88:b0:a6:bd:e0:
db:d6:f1:e0:c1:d5:6f:bb:07:e6:89:ff:59:11:a8:
44:ef:c8:0f:81:dd:ae:d7:a9:76:46:42:72:cd:66:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:9E:C5:E9:AE:8A:A9:CA:6C:2E:37:C0:FB:FE:39:90:46:69:1F:18
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BE655FAEFBE911EBBBD6245FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.18.158.0/23
103.166.180.0/24
103.167.152.0/23
103.181.194.0/24
103.225.180.0/23
103.229.210.0/23
103.241.133.0-103.241.135.255
103.252.40.0/22
IPv6:
2001:df6:9580::/48
Signature Algorithm: sha256WithRSAEncryption
89:c5:01:df:1b:38:08:a8:cf:53:3b:58:70:78:5d:43:cc:23:
fc:7e:ff:fc:76:0a:c1:29:e5:dc:07:1e:e6:ca:57:87:41:3e:
75:45:33:9a:67:a3:c8:81:90:99:e9:5f:38:75:41:29:1a:e4:
48:e2:b9:82:23:c7:c8:67:2f:07:b3:41:0c:67:dd:9c:64:18:
fc:7f:89:60:96:1c:f2:ab:d4:a5:23:ae:be:45:98:23:8e:d3:
b1:ba:d4:3a:38:91:1a:69:d5:2f:1e:0b:8b:3b:42:34:01:aa:
27:12:eb:e7:c4:75:da:ae:31:7e:05:ff:34:75:d5:92:79:99:
47:b0:63:11:3c:ba:d2:1b:c8:ef:b2:06:8f:58:70:42:af:67:
f5:3a:32:2f:82:8e:2e:ba:a3:6b:38:cf:5b:a6:e5:38:7b:d0:
79:97:6d:af:62:a2:80:56:37:6d:62:1e:68:b7:99:d4:94:ed:
90:43:a2:61:ad:d5:66:2d:25:36:41:9b:9d:dd:69:60:24:9d:
ab:1b:de:e0:ce:c0:79:b6:33:84:26:76:77:8b:47:92:26:0b:
72:cc:95:18:53:61:60:ec:b9:96:3f:91:0d:0b:78:e5:19:18:
89:84:12:be:db:56:71:00:6c:73:7c:72:27:35:e6:ca:5a:68:
7c:82:b8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:41 2025 by rpki-client