Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D37F4CB28A9311ED9F4B8F13C4F9AE02.roa
File: D37F4CB28A9311ED9F4B8F13C4F9AE02.roa (raw, json)
Hash identifier: MsKl8cRUgnbZHPGhpAKl++YAjcwMDUrZNLpTz1Hpk3s=
Subject key identifier: 18:B1:65:0F:56:D2:A6:7A:5D:54:B5:ED:C1:15:BC:8A:0C:10:80:8F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6977
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D37F4CB28A9311ED9F4B8F13C4F9AE02.roa
Signing time: Tue 02 May 2023 11:31:46 +0000
ROA not before: Tue 02 May 2023 11:31:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137163
IP address blocks: 45.248.3.0/24 maxlen: 24
103.81.24.0/23 maxlen: 24
103.81.26.0/23 maxlen: 24
103.216.140.0/22 maxlen: 22
103.216.140.0/24 maxlen: 24
103.216.141.0/24 maxlen: 24
103.216.142.0/24 maxlen: 24
103.216.143.0/24 maxlen: 24
2400:eaa0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26999 (0x6977)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 2 11:31:46 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6450f4a2-ab59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:da:1f:90:2e:56:c4:1b:1b:85:28:95:7e:de:
b3:98:31:4b:f8:47:64:1f:eb:c8:e7:8c:f7:81:25:
bd:fd:79:d2:2e:2f:33:55:25:e3:39:47:9f:fa:cf:
53:5e:82:fd:bb:5b:e8:0c:1a:83:3e:53:9e:92:73:
a8:42:6a:c8:df:2a:40:38:67:ad:0b:ac:d7:97:4c:
03:96:dc:7f:0a:8a:e7:f8:09:f7:e2:67:dc:d4:cc:
2c:a3:f4:37:cf:bb:ea:1f:f2:78:fa:51:82:09:79:
8a:4c:50:d1:2f:2d:72:88:49:9c:2b:2b:83:56:17:
c3:a4:43:3d:79:54:6f:de:19:f9:04:9f:da:7d:18:
35:d8:10:81:b3:80:ed:75:52:06:65:43:18:83:9b:
60:c2:a9:21:c1:5c:c7:ba:a0:af:2a:25:b5:4b:99:
8d:49:52:11:a1:78:d3:c1:a5:6e:0d:5a:1a:e8:23:
89:8c:bb:06:4a:93:35:62:41:a7:1c:59:52:c7:f9:
90:41:d8:6c:ad:19:90:5c:b9:54:2d:9f:a8:f3:91:
e2:3b:9e:f0:b4:38:c9:b8:66:ae:33:91:3c:90:3e:
21:27:9f:46:80:16:da:55:fb:72:41:14:13:76:40:
90:47:0b:00:89:95:83:ba:3d:2e:88:c0:8a:99:5a:
f0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B1:65:0F:56:D2:A6:7A:5D:54:B5:ED:C1:15:BC:8A:0C:10:80:8F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D37F4CB28A9311ED9F4B8F13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.3.0/24
103.81.24.0/22
103.216.140.0/22
IPv6:
2400:eaa0::/32
Signature Algorithm: sha256WithRSAEncryption
47:61:67:42:29:a8:6d:e0:b0:8a:07:d6:20:a7:0b:a9:28:a8:
e7:3b:cc:74:85:6c:10:8b:57:a2:d8:3e:1a:54:48:45:32:fc:
72:e3:c0:a5:b9:43:45:54:4c:11:83:65:76:b3:fa:80:8b:91:
da:b6:66:1b:0a:72:52:42:b2:c9:e3:b6:25:1b:25:c2:1d:63:
44:7b:98:b5:0e:52:1c:d3:4d:49:12:ca:06:cc:0d:9f:55:d0:
f4:ce:32:56:64:2c:a1:7c:b5:6a:26:88:3f:cc:30:0a:0c:77:
34:96:18:fb:59:f1:85:e8:36:49:f1:0e:c1:58:e1:54:5b:6c:
e3:50:7b:fd:86:4c:ab:1e:46:d7:e2:18:3a:88:48:86:58:2d:
37:9a:51:a6:df:3f:e3:0f:ee:e7:f7:74:14:5f:81:9f:1d:d7:
c2:75:4e:f9:10:98:44:6a:a7:52:d7:49:c6:a3:eb:45:87:f2:
30:f0:c3:d9:f8:1d:52:b1:23:14:5a:1a:aa:f3:6b:79:06:42:
e9:e1:8c:a0:41:e9:09:61:76:98:48:15:9f:f8:a9:87:14:44:
86:99:1e:53:2a:22:7c:ad:f5:08:38:e6:06:21:e0:f8:3c:c1:
4e:7f:b2:54:53:c1:46:0f:8e:32:86:af:a8:46:b8:18:5f:57:
1b:03:5a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:31 2025 by rpki-client