Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6872ABA551A11EDA6DFB272C4F9AE02.roa
File: C6872ABA551A11EDA6DFB272C4F9AE02.roa (raw, json)
Hash identifier: 9rG2nqBeQ0w/T606nTEp6HX9jYQtDgOJGDswWPngQNM=
Subject key identifier: 34:FC:48:3D:77:7F:91:E7:A2:94:C0:C5:8A:33:13:66:BF:9A:62:BD
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7A0E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6872ABA551A11EDA6DFB272C4F9AE02.roa
Signing time: Tue 12 Sep 2023 07:28:24 +0000
ROA not before: Tue 12 Sep 2023 07:28:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139490
IP address blocks: 103.88.236.0/22 maxlen: 24
103.143.168.0/23 maxlen: 24
103.163.18.0/23 maxlen: 24
103.164.70.0/23 maxlen: 24
103.186.128.0/23 maxlen: 24
103.203.172.0/22 maxlen: 22
103.203.172.0/24 maxlen: 24
103.203.173.0/24 maxlen: 24
103.203.174.0/24 maxlen: 24
103.203.175.0/24 maxlen: 24
103.220.224.0/24 maxlen: 24
2001:df6:4180::/48 maxlen: 48
2400:7120::/32 maxlen: 32
2400:7120::/48 maxlen: 48
2400:7120:1::/48 maxlen: 48
2400:7120:2::/48 maxlen: 48
2400:7120:3::/48 maxlen: 48
2400:7120:4::/48 maxlen: 48
2400:7120:5::/48 maxlen: 48
2400:7120:6::/48 maxlen: 48
2400:7120:7::/48 maxlen: 48
2400:7120:8::/48 maxlen: 48
2400:7120:9::/48 maxlen: 48
2400:7120:a::/48 maxlen: 48
2400:7120:b::/48 maxlen: 48
2400:7120:c::/48 maxlen: 48
2400:7120:d::/48 maxlen: 48
2400:7120:e::/48 maxlen: 48
2400:7120:f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31246 (0x7a0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Sep 12 07:28:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65001318-217a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:53:c5:3b:d0:77:7c:dc:7d:0b:ae:18:c5:
78:80:9b:0b:23:fd:12:8e:b1:48:07:ea:b5:47:8f:
8b:6b:57:69:31:d4:5a:0b:36:dc:fc:cf:73:d0:e8:
23:fd:d1:f0:36:9a:ab:33:bb:b9:14:3b:18:f5:f5:
39:83:c8:07:da:ea:40:93:c4:35:c3:78:31:8d:31:
4e:72:3b:f4:95:86:b1:6b:5b:eb:ed:49:20:4d:32:
d2:4a:0d:09:d1:66:a6:6b:07:df:5e:35:f4:28:9e:
e3:26:ce:a0:5b:5d:01:0e:00:82:1c:31:e2:c6:26:
d8:eb:16:f7:bb:fd:3a:c9:38:b4:7e:8a:7f:21:c6:
3f:e1:09:b9:a5:7d:a5:3c:c8:0d:de:ee:ee:07:5b:
50:62:f5:09:5c:b1:31:2b:a1:14:57:07:8b:d1:c9:
fa:38:5f:74:e8:af:5c:bf:36:b8:39:ac:03:32:c7:
4e:09:9e:e8:f2:7e:4f:0b:d6:8e:0f:ec:4c:31:a9:
99:05:07:ea:70:7a:ce:3b:e9:79:da:21:35:fa:d5:
af:f9:c6:59:93:dd:d9:08:48:56:52:97:ca:37:c5:
cd:bb:cc:fa:bb:b9:8a:a2:f9:40:64:9d:4b:3f:ea:
05:1a:8b:e7:00:4e:2c:f1:9d:c1:48:bc:a3:dd:ac:
ab:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FC:48:3D:77:7F:91:E7:A2:94:C0:C5:8A:33:13:66:BF:9A:62:BD
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C6872ABA551A11EDA6DFB272C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.88.236.0/22
103.143.168.0/23
103.163.18.0/23
103.164.70.0/23
103.186.128.0/23
103.203.172.0/22
103.220.224.0/24
IPv6:
2001:df6:4180::/48
2400:7120::/32
Signature Algorithm: sha256WithRSAEncryption
34:b8:b3:85:83:9f:fc:3e:06:f9:c4:33:f5:f8:fa:2b:0a:8b:
3d:39:18:71:9f:02:50:f3:ae:5c:4e:4b:3a:e9:c0:fa:ac:e2:
bd:8e:4d:fa:1a:8b:17:c7:8a:f6:0e:4e:4c:0e:35:21:17:4e:
50:a0:b1:94:da:07:f4:c7:07:d1:0a:b2:fb:7c:1f:43:6d:b0:
52:44:d4:60:5d:fe:49:3f:3f:47:6e:75:7d:dc:0d:f3:39:61:
63:5d:99:0d:63:3c:c1:6b:b4:bb:5a:b8:c7:59:37:71:3f:ea:
c4:ba:6b:8e:ea:cf:3e:c0:6f:2d:86:8d:07:3d:61:8b:11:19:
0e:9a:10:3f:81:9f:3e:e9:e2:b9:5c:62:6c:b9:01:98:07:b1:
ba:cd:77:dd:6e:ca:2c:67:f7:f7:27:64:c6:3a:e9:e5:43:0d:
c3:27:df:8c:81:a9:22:7a:48:72:36:c1:77:9d:12:06:90:6b:
cd:3f:5a:3b:03:d3:48:f3:ef:57:80:9c:b6:f2:23:72:b5:2a:
4b:83:3e:a5:9c:cc:71:eb:c6:0e:f3:e5:32:bb:d9:e5:93:49:
2c:f8:a1:77:bf:49:5c:4d:d3:24:63:08:4e:7d:a8:2f:d3:77:
41:9d:d1:90:b6:36:b5:53:76:ef:d5:e9:24:30:df:67:6b:e7:
c1:a6:aa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:07:40 2025 by rpki-client