Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCC10E7449AE11EBBE264E87C4F9AE02.roa
File: CCC10E7449AE11EBBE264E87C4F9AE02.roa (raw, json)
Hash identifier: bZt78a4l9DHYCZhhO7KkNrPSroxJCfWuWUIa4DqTb0I=
Subject key identifier: 13:E7:77:E1:F6:8B:F6:E4:AC:30:9A:B2:CE:B5:3C:7A:F3:BC:CA:FC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7F2C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCC10E7449AE11EBBE264E87C4F9AE02.roa
Signing time: Fri 01 Dec 2023 05:38:18 +0000
ROA not before: Fri 01 Dec 2023 05:38:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141312
IP address blocks: 103.159.10.0/23 maxlen: 24
103.181.222.0/23 maxlen: 24
103.185.202.0/23 maxlen: 24
103.191.90.0/23 maxlen: 24
203.145.52.0/24 maxlen: 24
2400:cc20::/32 maxlen: 32
2400:cc20::/48 maxlen: 48
2400:cc20:1::/48 maxlen: 48
2400:cc20:2::/48 maxlen: 48
2400:cc20:3::/48 maxlen: 48
2400:cc20:4::/48 maxlen: 48
2400:cc20:5::/48 maxlen: 48
2400:cc20:6::/48 maxlen: 48
2400:cc20:7::/48 maxlen: 48
2400:cc20:8::/48 maxlen: 48
2400:cc20:9::/48 maxlen: 48
2400:cc20:a::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32556 (0x7f2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 1 05:38:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6569714a-dfda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:10:c8:01:d1:5d:92:a4:9c:8b:83:ed:c7:d8:
f0:e8:7c:10:d8:69:92:c1:4b:4b:8a:c2:df:f3:71:
be:99:32:7f:d9:76:d2:1b:60:da:ab:62:b6:3a:18:
36:b8:06:5e:aa:2d:b8:48:e7:2f:44:04:9f:9d:4e:
81:b7:e9:e3:5e:11:4b:26:e4:d7:dc:67:7e:8a:58:
a3:a2:f7:82:bb:13:2d:43:a4:9d:96:f1:e3:f7:14:
40:43:06:97:af:3e:93:ca:b0:5d:c8:7b:62:b0:2f:
21:8d:f9:b2:19:eb:08:e7:f7:12:a2:a7:04:71:6d:
94:1e:41:6c:b4:6e:b0:8d:1f:a7:ba:51:d4:77:b2:
60:d1:0f:2f:90:ba:9c:c1:04:7c:56:19:10:fc:ee:
83:0d:58:01:ee:47:ef:5e:1a:e1:ef:ea:cf:d8:c6:
cf:32:bf:0e:ca:e5:73:d3:6c:4a:9e:2f:f0:b5:81:
b7:af:0d:62:25:30:a4:3a:6a:a8:31:6c:db:56:1c:
41:8d:06:a8:39:81:6c:35:9a:97:92:ef:d2:e2:fa:
a7:8e:72:14:1f:98:e1:0e:e8:92:ed:f0:10:31:6d:
89:15:b6:d6:69:84:7d:04:6c:39:55:18:37:8d:cd:
e3:48:6c:67:93:d9:a0:2b:d8:7e:37:c0:80:89:c5:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E7:77:E1:F6:8B:F6:E4:AC:30:9A:B2:CE:B5:3C:7A:F3:BC:CA:FC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CCC10E7449AE11EBBE264E87C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.10.0/23
103.181.222.0/23
103.185.202.0/23
103.191.90.0/23
203.145.52.0/24
IPv6:
2400:cc20::/32
Signature Algorithm: sha256WithRSAEncryption
1c:a1:0d:97:83:ac:04:49:10:32:cd:15:1b:39:83:f2:fe:7b:
29:6c:f4:16:ff:f9:2d:1f:70:0c:cc:52:58:3f:3c:fc:76:eb:
36:92:09:ac:4a:37:8f:2a:59:07:91:43:d8:a9:2c:e3:76:8d:
5e:6d:bb:9f:7a:c3:d8:c1:50:bd:24:6a:fa:e3:31:0a:cb:d1:
f7:24:87:6c:99:28:1b:3d:3b:e7:e9:07:b7:b3:59:c9:9a:57:
01:5f:89:fd:dd:70:31:1d:63:74:dc:3f:fb:a8:64:48:85:16:
5e:94:8e:8d:60:a8:3a:ad:a1:ab:77:0f:c6:5b:c1:a8:22:20:
bf:ae:2a:9f:00:56:c4:e9:33:c6:60:c0:57:a0:22:96:83:d2:
93:3e:0b:49:cc:77:dc:3f:0f:27:72:e6:a0:6f:40:fd:df:1a:
51:02:52:82:95:7d:f6:b3:fc:cc:aa:07:7b:65:7e:62:7d:54:
16:6e:45:33:4d:e3:b6:25:a2:8d:4f:34:d0:f8:ef:7f:70:e9:
01:5e:f3:df:23:94:0c:f8:95:66:17:7d:f0:32:b7:a5:69:d8:
0c:2f:0c:99:cd:a5:0a:a5:46:08:4f:f2:03:a9:08:1e:27:61:
93:db:ab:75:42:35:ff:7c:f4:52:8d:91:56:b2:0c:d7:83:14:
f3:66:a4:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:57 2025 by rpki-client