Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D0D5C842E84211EF832B845AC4F9AE02.roa
File: D0D5C842E84211EF832B845AC4F9AE02.roa (raw, json)
Hash identifier: YhVd7hhLPtB8UPRN95MwcelwK05hrXmFJYdRgmTixD8=
Subject key identifier: A7:CE:F5:09:04:57:77:7A:B7:D5:62:F2:1A:C4:B3:0D:CC:40:AD:33
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A5C6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D0D5C842E84211EF832B845AC4F9AE02.roa
Signing time: Tue 11 Feb 2025 06:38:34 +0000
ROA not before: Tue 11 Feb 2025 06:38:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55947
IP address blocks: 43.247.156.0/22 maxlen: 24
103.5.132.0/22 maxlen: 24
103.39.126.0/23 maxlen: 24
103.87.92.0/22 maxlen: 24
103.87.128.0/22 maxlen: 24
103.91.180.0/22 maxlen: 24
103.92.100.0/22 maxlen: 24
103.132.16.0/23 maxlen: 24
103.157.238.0/23 maxlen: 24
103.161.74.0/23 maxlen: 24
103.173.170.0/23 maxlen: 24
124.40.244.0/22 maxlen: 24
2400:c2a0::/32 maxlen: 32
2404:1f00::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42438 (0xa5c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 11 06:38:34 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67aaf06a-b221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:13:29:a4:a3:7e:d5:c8:cb:e5:64:d2:18:c4:
36:b2:89:26:2c:ef:31:8c:6f:33:a4:ab:9e:c1:b9:
6d:a3:53:ca:90:2d:34:20:1a:61:b9:76:c6:d4:c1:
ac:13:3f:90:55:94:ed:f5:b8:a5:9a:41:41:8d:1b:
74:68:9b:7a:58:22:11:a6:98:14:c3:88:1a:44:ed:
e8:eb:b1:c2:e7:70:3f:c1:4a:1c:f2:30:c5:e6:0d:
58:7a:0c:44:4e:0a:da:b9:aa:a8:f3:96:38:9e:bc:
8e:9e:c4:c3:4c:55:04:98:5e:b2:3b:35:66:33:6d:
85:c7:9e:a6:0c:41:0c:ad:55:01:db:94:40:eb:26:
e7:d8:01:40:8a:96:96:cd:0e:fb:61:c2:65:48:ae:
3f:79:bd:79:20:73:e1:a2:23:ba:67:6d:2a:3f:1f:
41:4a:3c:b4:26:f4:e6:ff:ca:aa:f4:2e:cb:22:d1:
32:3c:96:94:e0:b1:3d:9d:9d:e8:54:05:7d:d2:41:
9d:80:55:d6:1d:ce:4c:f5:57:d5:f7:ad:ed:bb:6e:
09:96:41:ef:bf:70:e6:d7:d7:31:f7:91:48:d4:46:
46:da:2d:62:40:52:7d:43:ce:59:6f:3a:6f:a7:1b:
6c:f7:aa:c4:fd:b8:0e:02:02:fa:98:54:fc:cb:ac:
cd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CE:F5:09:04:57:77:7A:B7:D5:62:F2:1A:C4:B3:0D:CC:40:AD:33
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D0D5C842E84211EF832B845AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.247.156.0/22
103.5.132.0/22
103.39.126.0/23
103.87.92.0/22
103.87.128.0/22
103.91.180.0/22
103.92.100.0/22
103.132.16.0/23
103.157.238.0/23
103.161.74.0/23
103.173.170.0/23
124.40.244.0/22
IPv6:
2400:c2a0::/32
2404:1f00::/32
Signature Algorithm: sha256WithRSAEncryption
91:77:3c:14:7f:09:92:1f:92:a6:47:85:d5:6b:04:eb:74:01:
b8:7c:8d:29:6b:f4:4a:9f:b5:c1:8e:15:62:df:fe:70:8f:9f:
a1:3f:03:ad:89:9d:c4:ea:ac:49:fb:7f:c0:eb:75:57:75:26:
37:8d:02:78:f2:69:9c:f4:06:04:98:97:33:af:09:41:d0:c3:
3f:5b:73:7a:b6:ff:3f:b7:c7:e1:bc:b4:8a:7b:f7:5d:d9:ca:
7a:65:63:29:3d:aa:dd:f7:6a:0b:a0:6d:3f:d3:df:f3:81:a4:
52:4d:67:55:2f:68:d7:d9:5e:d4:dc:7d:e6:cd:67:6c:7b:e7:
86:c4:e6:3e:5c:30:be:6e:ac:59:cf:f0:7e:ab:d6:c6:1b:c5:
df:18:39:97:89:c7:46:21:9b:8a:c7:ec:57:84:74:94:a6:2d:
03:e5:e9:42:15:e4:b5:bb:8e:3a:43:e9:d5:8a:48:ee:d1:68:
fa:f5:04:2c:b1:10:09:13:6f:ab:5a:d4:c8:d7:48:83:16:ec:
d7:04:5c:8e:d7:fa:b8:b9:ab:05:7b:c3:e7:2f:47:5e:e7:bb:
7d:06:c6:8a:dc:eb:c5:e5:b0:d4:ca:08:57:c2:8b:86:3e:b8:
0a:c5:c1:5d:11:d9:f3:39:f5:34:c2:ec:c8:e5:d5:b8:ed:9c:
d6:fb:85:05
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:49 2025 by rpki-client