Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D1A2B358AB0611EF8E32CF5DC4F9AE02.roa
File: D1A2B358AB0611EF8E32CF5DC4F9AE02.roa (raw, json)
Hash identifier: sbcecyQLw1pd/rWkPTGHLbQQF5Td3LLykjuAJP1WPW8=
Subject key identifier: EE:D0:2B:75:6F:84:A8:56:28:82:FB:07:E5:DD:7B:05:13:9F:DB:F5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9E9E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D1A2B358AB0611EF8E32CF5DC4F9AE02.roa
Signing time: Thu 05 Dec 2024 08:09:25 +0000
ROA not before: Thu 05 Dec 2024 08:09:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 43.225.0.0/22 maxlen: 24
43.231.116.0/22 maxlen: 24
45.114.156.0/22 maxlen: 24
103.14.196.0/22 maxlen: 24
103.16.140.0/22 maxlen: 24
103.27.168.0/24 maxlen: 24
103.27.170.0/23 maxlen: 23
103.47.152.0/24 maxlen: 24
103.51.92.0/22 maxlen: 24
103.52.48.0/22 maxlen: 24
103.54.96.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.82.144.0/22 maxlen: 24
103.86.20.0/22 maxlen: 24
103.108.76.0/22 maxlen: 24
103.118.8.0/22 maxlen: 24
103.129.8.0/22 maxlen: 24
103.142.64.0/23 maxlen: 24
103.171.236.0/23 maxlen: 24
103.180.216.0/23 maxlen: 24
103.192.72.0/22 maxlen: 24
103.200.48.0/22 maxlen: 24
103.206.64.0/22 maxlen: 24
103.212.132.0/22 maxlen: 24
103.226.224.0/22 maxlen: 24
103.228.172.0/24 maxlen: 24
103.228.173.0/24 maxlen: 24
103.228.174.0/24 maxlen: 24
103.228.175.0/24 maxlen: 24
139.5.96.0/22 maxlen: 24
203.191.56.0/22 maxlen: 24
2400:d180:66::/48 maxlen: 48
2400:d180:67::/48 maxlen: 48
2400:d180:68::/48 maxlen: 48
2400:d180:69::/48 maxlen: 48
2400:d180:70::/48 maxlen: 48
2400:d180:71::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40606 (0x9e9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 5 08:09:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67515fb4-16ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b7:10:b9:b1:1f:82:03:60:0e:17:19:fe:7a:
9c:e4:f2:a3:61:23:8b:f0:a5:6c:15:1c:67:a4:a4:
b7:d7:70:cb:8d:83:92:39:60:81:88:2d:77:c1:d9:
5f:2c:04:19:69:1d:9b:b8:a2:b6:6b:69:33:99:9a:
e7:7b:a2:27:92:fe:e2:0d:69:29:43:a8:33:f0:a7:
10:af:4c:fe:49:89:47:43:27:70:b7:01:f4:8b:eb:
0f:b8:f0:c5:a5:6d:e0:ae:da:6d:48:dd:f1:7d:8b:
1c:20:8c:13:19:a4:91:e8:56:c8:87:f0:ae:40:09:
f0:8f:2c:ee:8b:45:18:42:61:5e:73:1f:34:66:27:
f9:e0:4a:af:df:3e:c9:91:40:44:b1:6e:47:22:1b:
4f:85:59:7b:5d:89:a7:1f:ba:3e:ac:65:fd:9a:a0:
d0:82:a3:07:09:3a:c4:a0:32:ce:a5:03:54:18:84:
41:99:99:9b:8a:db:93:8e:bf:fa:af:4b:8f:77:c9:
f7:8e:88:53:db:a9:75:50:06:05:ef:19:5c:5e:84:
24:9d:f9:bf:29:82:55:1e:a0:a9:b2:13:b7:57:9e:
dc:f4:60:8f:97:81:e1:f2:6c:42:a7:09:c3:75:49:
a0:ed:e4:43:ae:ef:06:d0:a0:3b:9c:16:d6:b0:2b:
79:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D0:2B:75:6F:84:A8:56:28:82:FB:07:E5:DD:7B:05:13:9F:DB:F5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D1A2B358AB0611EF8E32CF5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
43.231.116.0/22
45.114.156.0/22
103.14.196.0/22
103.16.140.0/22
103.27.168.0/24
103.27.170.0/23
103.47.152.0/24
103.51.92.0/22
103.52.48.0/22
103.54.96.0/22
103.55.84.0/22
103.82.144.0/22
103.86.20.0/22
103.108.76.0/22
103.118.8.0/22
103.129.8.0/22
103.142.64.0/23
103.171.236.0/23
103.180.216.0/23
103.192.72.0/22
103.200.48.0/22
103.206.64.0/22
103.212.132.0/22
103.226.224.0/22
103.228.172.0/22
139.5.96.0/22
203.191.56.0/22
IPv6:
2400:d180:66::-2400:d180:69:ffff:ffff:ffff:ffff:ffff
2400:d180:70::/47
Signature Algorithm: sha256WithRSAEncryption
a2:8b:8c:24:72:33:85:7d:89:ab:8a:ad:36:43:45:46:79:54:
55:d5:84:90:52:b9:f4:e9:59:6e:23:e7:82:76:8e:7e:a1:51:
2a:66:f8:4e:dd:a6:76:b4:8d:e5:f3:3b:3b:00:d4:7e:73:7d:
e0:c6:5c:82:02:89:3a:1e:24:78:01:55:a0:ea:f2:9d:6f:43:
93:55:d8:2a:50:da:7e:33:89:58:71:5b:93:02:69:d5:30:82:
73:2d:c6:b4:52:85:3c:0e:d9:1b:8c:9d:a3:66:92:f0:c3:cd:
9c:07:23:7f:b0:cb:9f:ac:17:f8:00:f3:36:3c:54:8c:85:a9:
35:7e:a8:66:33:a8:93:da:6f:79:78:2a:3c:51:0e:a8:a8:e7:
92:29:8e:6a:da:af:9e:9d:46:1d:18:49:f4:25:03:52:84:6d:
f5:55:24:31:d9:9e:aa:dc:bd:10:de:8f:d2:5d:de:82:69:72:
02:d4:9d:27:35:79:49:4e:35:ca:de:f0:c0:2e:20:57:98:11:
ca:27:4d:3f:61:a1:1b:ed:ee:d8:aa:88:8b:00:d1:e5:02:f7:
a2:3f:83:5c:df:6d:8e:6d:b5:11:85:ce:69:d4:ec:c4:e9:3b:
91:bb:e8:bb:cf:f5:a6:b4:10:2f:ce:55:57:9a:f6:7c:94:c3:
76:ce:77:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:18:33 2025 by rpki-client