Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D15177B203F211ED934E171AC4F9AE02.roa
File: D15177B203F211ED934E171AC4F9AE02.roa (raw, json)
Hash identifier: oDvNPRAblqL53FU4As1GpKUGJTGdZNApfadLGUK+g50=
Subject key identifier: 1D:68:38:99:DF:45:70:AB:42:F9:2D:E3:61:16:8E:92:3A:A1:05:03
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7166
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D15177B203F211ED934E171AC4F9AE02.roa
Signing time: Wed 10 May 2023 16:48:03 +0000
ROA not before: Wed 10 May 2023 16:48:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23682
IP address blocks: 101.0.43.0/24 maxlen: 24
101.0.44.0/24 maxlen: 24
101.0.51.0/24 maxlen: 24
101.0.59.0/24 maxlen: 24
101.0.61.0/24 maxlen: 24
103.5.84.0/24 maxlen: 24
103.5.86.0/24 maxlen: 24
180.188.225.0/24 maxlen: 24
203.76.176.0/24 maxlen: 24
203.76.177.0/24 maxlen: 24
203.76.179.0/24 maxlen: 24
203.76.184.0/24 maxlen: 24
203.76.187.0/24 maxlen: 24
203.76.189.0/24 maxlen: 24
210.89.56.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29030 (0x7166)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 10 16:48:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bcac3-a446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:95:9f:aa:87:5d:b1:b3:a1:1c:2f:5b:dd:9f:
de:69:d4:46:a8:e5:a9:13:84:4d:00:f0:ba:07:8d:
76:6c:5c:eb:12:d9:83:e9:19:6b:3a:ad:98:d7:5f:
65:64:36:81:a0:65:39:e4:2a:af:2a:5f:ca:d2:af:
a6:42:82:3c:1c:a6:6a:bc:de:79:9a:0d:e5:21:63:
b1:26:e6:d8:43:c1:38:c2:3d:4b:77:51:35:fa:6e:
f8:a8:5f:22:8c:7e:f7:de:c6:89:92:94:7a:e6:e3:
7b:9c:80:79:ec:47:9b:a4:32:45:fc:49:87:f2:4e:
36:99:e1:d1:19:4d:bb:8b:d1:1e:53:55:3e:e9:4c:
6a:e6:9b:75:d0:69:14:02:99:e1:c8:d7:c0:98:98:
87:a1:98:6c:7d:a2:27:e3:62:8c:b5:f0:11:99:1f:
c6:71:cb:71:57:df:1a:94:d0:1b:18:a0:83:0d:fc:
51:3b:ae:4f:62:57:a1:b7:79:fb:f1:24:c0:64:d7:
69:69:fa:c3:c3:6a:b6:a2:0a:f7:0a:13:b0:6c:a2:
82:0a:f1:dc:00:86:a3:86:9e:fe:b3:41:83:4d:f7:
ef:60:cc:d5:9e:f7:a6:84:48:55:8c:15:97:b9:21:
9c:10:55:28:c8:57:dc:08:3d:92:db:80:f2:00:6e:
3f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:68:38:99:DF:45:70:AB:42:F9:2D:E3:61:16:8E:92:3A:A1:05:03
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D15177B203F211ED934E171AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
101.0.43.0-101.0.44.255
101.0.51.0/24
101.0.59.0/24
101.0.61.0/24
103.5.84.0/24
103.5.86.0/24
180.188.225.0/24
203.76.176.0/23
203.76.179.0/24
203.76.184.0/24
203.76.187.0/24
203.76.189.0/24
210.89.56.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:93:f9:ca:00:af:3a:aa:38:22:f9:05:7b:13:53:7d:8b:06:
8b:24:00:36:a2:4d:93:58:1c:ed:19:1d:4a:75:a4:35:3d:b6:
56:d5:35:30:1f:e0:2a:4e:8b:46:51:bc:14:1a:25:9b:7a:83:
2b:88:d3:19:9e:03:6a:bf:f5:17:fa:44:16:23:8f:98:58:f8:
22:c1:4d:69:21:f6:c4:94:2c:7c:c8:02:84:2c:46:e6:cf:78:
f1:3e:cd:20:9b:54:86:ca:4a:80:6f:1e:33:c6:66:1e:03:3b:
f6:44:5b:8f:aa:ce:8e:4e:5f:73:b1:e9:b8:6e:6d:f9:08:d4:
b7:b3:d6:03:07:50:90:1f:5e:1e:98:c9:83:e5:33:6d:be:e3:
62:05:9a:5b:4d:f6:e3:6a:da:ad:6b:2c:82:cf:c5:52:97:40:
f2:8b:93:68:98:f8:02:04:f7:f7:d7:82:01:73:f4:b4:58:79:
3f:21:4a:78:88:5c:05:33:4f:16:a0:27:3f:29:3c:9c:f4:b7:
69:bb:ef:4e:20:d3:24:f8:19:af:c9:72:91:09:1c:3f:c0:1b:
16:05:76:71:b7:4c:14:f9:2e:83:a2:52:4c:b4:fc:85:66:93:
e2:c3:75:ca:cd:e0:09:42:de:9a:b7:02:e7:5c:09:66:66:40:
a5:80:29:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:36 2025 by rpki-client