Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BF03F59CCF3F11EFBBEF5337C4F9AE02.roa
File: BF03F59CCF3F11EFBBEF5337C4F9AE02.roa (raw, json)
Hash identifier: IPpzNxWFh+t0nCV6+ic3p4tmqpCgT46+WVGdvouU3J4=
Subject key identifier: 09:13:81:65:4D:1D:51:89:46:53:27:3D:33:EB:75:21:43:A7:3C:20
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A239
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BF03F59CCF3F11EFBBEF5337C4F9AE02.roa
Signing time: Sat 11 Jan 2025 13:14:44 +0000
ROA not before: Sat 11 Jan 2025 13:14:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135834
IP address blocks: 103.80.116.0/22 maxlen: 24
103.91.86.0/24 maxlen: 24
103.91.120.0/22 maxlen: 24
103.102.119.0/24 maxlen: 24
103.102.144.0/23 maxlen: 24
103.171.209.0/24 maxlen: 24
103.181.7.0/24 maxlen: 24
103.185.244.0/24 maxlen: 24
103.185.245.0/24 maxlen: 24
103.228.9.0/24 maxlen: 24
2401:93c0::/48 maxlen: 48
2401:93c0:1::/48 maxlen: 48
2401:93c0:2::/48 maxlen: 48
2401:93c0:3::/48 maxlen: 48
2401:93c0:4::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41529 (0xa239)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 11 13:14:44 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67826ec4-e4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:e8:5c:f7:a3:7c:1e:53:6d:b2:08:cf:d5:
3b:82:bf:a7:0a:22:11:f9:61:91:f2:e5:eb:ab:dd:
cc:27:8d:0d:24:b8:18:31:e7:c6:99:d9:d9:e8:47:
9f:1b:79:10:aa:96:95:bc:95:54:8f:14:cf:af:1f:
7b:ab:f5:fd:33:e0:b6:fa:81:3a:0c:21:04:1d:0c:
33:80:fb:84:01:ea:a0:ca:bd:a6:fa:d3:81:ce:16:
3b:e5:f8:85:32:4b:8a:96:be:ee:d4:1a:e6:e0:d5:
60:21:e0:4f:45:c9:e6:2e:79:b5:ca:3d:b0:bf:3c:
bd:0c:0b:5a:0c:86:a2:52:fb:ed:4b:60:ad:b5:87:
e3:23:07:6c:d8:84:f9:0f:b3:cc:06:53:82:32:81:
34:e1:be:f2:f0:14:da:84:80:2b:20:f5:07:e6:02:
cd:18:24:b0:d1:ff:95:1b:58:ab:ea:9f:74:62:87:
2a:c2:cc:be:ba:7c:57:2a:5b:76:e7:6d:0f:27:18:
22:31:77:bf:c8:60:93:36:17:c8:de:25:7d:c7:34:
92:1e:84:df:1f:de:25:59:e5:1d:13:73:ce:89:a3:
15:fc:41:27:f5:04:80:1e:38:bc:94:1f:f0:72:4a:
4b:b0:94:7b:7d:51:f8:27:f5:ed:6a:ec:b9:43:1c:
08:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:13:81:65:4D:1D:51:89:46:53:27:3D:33:EB:75:21:43:A7:3C:20
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BF03F59CCF3F11EFBBEF5337C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.116.0/22
103.91.86.0/24
103.91.120.0/22
103.102.119.0/24
103.102.144.0/23
103.171.209.0/24
103.181.7.0/24
103.185.244.0/23
103.228.9.0/24
IPv6:
2401:93c0::-2401:93c0:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
45:23:1e:6e:32:18:d1:66:18:80:d1:d8:7c:43:e7:f8:c3:0c:
58:d3:67:4b:fa:5b:8a:7d:93:d6:1c:73:19:eb:77:71:13:73:
3b:a9:37:48:47:63:75:a4:86:fb:cd:a8:54:df:49:93:63:4a:
29:6f:2c:9e:99:0e:f1:55:ec:fc:21:55:35:20:9d:aa:73:80:
37:30:bd:c7:b1:da:31:e8:8d:40:2a:0d:9f:23:50:be:45:ab:
81:08:33:ff:f8:4e:9a:6d:0c:6e:63:48:fa:ae:19:37:8e:68:
90:76:e0:43:a8:5c:d9:f2:9b:50:68:01:3e:45:cf:78:44:cc:
f5:98:1a:3e:d2:6c:cd:6f:bf:96:21:6f:c2:c5:29:3e:47:22:
55:eb:63:60:aa:7b:0f:5a:31:86:aa:80:c8:c9:49:f8:0c:f2:
a2:a7:63:41:2b:ef:c9:45:92:f5:08:54:22:00:71:21:6b:8f:
52:18:aa:ad:f1:75:64:5a:ce:ed:d0:08:e9:ab:11:97:33:77:
54:63:24:82:7b:4d:66:96:d0:08:d9:fd:7a:97:c3:fa:17:7e:
98:c0:4b:c0:7e:31:9e:a7:fc:b2:68:b8:86:2b:ec:f5:cb:6d:
46:3f:a7:58:de:ef:b9:40:26:19:a5:69:37:08:9c:41:6c:60:
25:3b:1c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:25 2025 by rpki-client