Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D7AFE29CCFD911EEB3DB8C4BC4F9AE02.roa
File: D7AFE29CCFD911EEB3DB8C4BC4F9AE02.roa (raw, json)
Hash identifier: xPqy/7ATFPUqvazgSgAZVkafd8kHvhmsY1hs80XMRM4=
Subject key identifier: 09:CF:DD:53:6A:58:83:6B:01:F7:F5:C9:9D:0D:09:0D:7D:05:F6:20
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8346
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D7AFE29CCFD911EEB3DB8C4BC4F9AE02.roa
Signing time: Tue 20 Feb 2024 10:21:43 +0000
ROA not before: Tue 20 Feb 2024 10:21:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134014
IP address blocks: 45.126.168.0/22 maxlen: 24
103.59.200.0/22 maxlen: 24
103.66.232.0/22 maxlen: 24
103.137.94.0/24 maxlen: 24
103.185.178.0/24 maxlen: 24
103.185.236.0/23 maxlen: 23
103.185.237.0/24 maxlen: 24
103.198.100.0/24 maxlen: 24
103.198.102.0/23 maxlen: 23
103.198.103.0/24 maxlen: 24
182.54.148.0/22 maxlen: 24
2001:df0:99c0::/48 maxlen: 48
2402:fbc0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33606 (0x8346)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 20 10:21:43 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65d47d37-3cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:d2:8c:99:95:f5:1f:63:4a:8e:c2:e5:d3:
7b:df:4d:7e:89:14:05:d7:3f:8a:e9:2f:1b:ec:d7:
03:09:09:d3:b4:5a:1c:58:63:fc:ce:b1:f6:8e:66:
04:28:74:62:40:1f:c3:6b:dc:b8:1f:4b:3e:99:ce:
e6:5d:f8:a4:54:34:a3:cd:18:c0:9c:3e:c7:5c:a6:
df:a7:ad:7f:f3:aa:9e:3b:e5:b7:c6:87:05:30:01:
61:48:85:da:ad:53:9e:0e:1e:e3:85:29:2a:4a:16:
02:c2:9a:a6:de:ac:8b:4e:e1:55:5e:aa:3b:10:a5:
27:59:d3:a8:02:c4:41:e7:e1:88:b5:99:c6:e4:c1:
b5:d7:11:fe:7d:e3:05:66:0e:34:5b:b4:cd:1c:b2:
6a:b9:e5:8b:85:c4:b2:7b:6d:ad:fd:c1:f6:41:07:
be:2f:68:9d:fd:42:98:b1:a5:a6:e5:40:69:8d:f6:
5b:88:e0:83:c9:c0:c7:d0:ab:77:f0:00:06:a3:da:
80:44:f3:c4:f0:95:fe:b6:cb:46:03:6a:f1:3c:f8:
17:31:a3:5b:e9:c7:d5:69:2e:c4:45:80:db:69:c3:
c8:17:9c:b9:5b:e1:47:92:bd:59:06:81:aa:bf:d3:
94:3a:51:d8:ba:24:da:f9:17:3d:df:13:75:e1:b8:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CF:DD:53:6A:58:83:6B:01:F7:F5:C9:9D:0D:09:0D:7D:05:F6:20
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D7AFE29CCFD911EEB3DB8C4BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.168.0/22
103.59.200.0/22
103.66.232.0/22
103.137.94.0/24
103.185.178.0/24
103.185.236.0/23
103.198.100.0/24
103.198.102.0/23
182.54.148.0/22
IPv6:
2001:df0:99c0::/48
2402:fbc0::/32
Signature Algorithm: sha256WithRSAEncryption
ba:75:20:13:7d:99:db:95:1c:ce:cd:ed:b0:ec:70:5e:8c:00:
da:e8:97:23:28:c6:83:12:e9:87:40:5b:05:95:0b:d7:28:55:
47:d2:76:06:6d:8c:23:3a:57:89:e4:23:fb:c7:78:3c:60:7c:
6e:d4:bd:58:63:36:e5:cc:e0:ce:59:cf:f9:96:9a:95:9a:8f:
70:e7:f9:c3:55:3a:01:91:6c:53:93:63:88:f6:18:4f:35:88:
68:2e:d3:59:8f:e0:92:fb:4a:ca:cb:cc:c5:9d:1a:5a:04:86:
c3:92:e2:77:b3:ce:c3:47:d4:0a:03:9f:3f:8c:83:70:43:1f:
cc:17:26:c9:15:c8:42:71:d8:0f:ea:c1:87:ef:2d:80:97:22:
62:ac:a4:0b:11:14:24:8a:d4:43:74:18:47:c1:48:65:32:29:
b8:43:ca:8c:f3:96:b5:42:e5:30:73:54:58:98:20:47:08:42:
58:8c:cd:4a:86:bc:f2:65:c3:61:80:c5:6c:17:42:c0:8c:e6:
d2:a1:58:3d:cd:6c:d8:4d:30:4a:d5:51:67:76:2b:c2:3f:74:
06:25:f4:b1:69:20:35:77:ce:86:2f:66:be:57:eb:a0:be:b1:
01:c2:02:2f:b4:a0:85:08:17:a2:0a:a8:87:c0:ed:0c:e0:5e:
7d:b5:09:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:11 2025 by rpki-client