Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DEA2C2D6C2F611ED95226623C4F9AE02.roa
File: DEA2C2D6C2F611ED95226623C4F9AE02.roa (raw, json)
Hash identifier: S5toquaO8Qbt4oZh/fR858qMvhDZ+11R9Kgjgk+bnGo=
Subject key identifier: FB:BB:18:71:42:25:90:22:06:AC:22:A3:19:6C:F6:FA:95:DF:E4:52
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7821
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DEA2C2D6C2F611ED95226623C4F9AE02.roa
Signing time: Tue 22 Aug 2023 04:55:33 +0000
ROA not before: Tue 22 Aug 2023 04:55:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141567
IP address blocks: 103.170.148.0/23 maxlen: 24
103.171.109.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30753 (0x7821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 22 04:55:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64e43fc5-e68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:2e:0e:f5:5c:9c:9c:43:4f:47:dd:9f:0c:
c5:4d:02:bc:0b:b9:80:19:cf:c8:68:c6:74:58:50:
a8:05:81:b3:ff:a3:8d:59:ec:89:a3:f9:3b:ad:fb:
dc:c5:86:9c:62:d2:9c:8a:6f:43:97:e5:04:27:36:
f7:8a:fe:72:4f:36:d9:57:c1:9c:36:19:db:64:87:
01:a3:fb:28:cf:34:5a:03:70:d4:a1:cd:9d:45:6d:
b0:a0:08:34:fc:43:a3:e9:0c:a7:41:1f:dd:3d:29:
e4:92:91:13:74:46:80:e0:a8:ac:56:98:85:ee:2b:
d6:99:61:77:fa:85:59:71:ec:c5:06:00:d6:1d:f1:
9c:10:9a:22:d5:4b:13:2a:3c:13:1e:b2:6b:a1:4e:
d2:e5:1b:21:9f:aa:de:57:c3:8a:15:f0:62:98:04:
a5:9b:9d:e0:0e:99:27:1a:d6:b3:70:e9:3c:7f:8c:
47:4a:b6:e6:e0:bd:76:3d:7a:8b:f9:98:04:d0:f0:
82:5b:f8:c6:2a:48:d5:b1:c7:f7:ef:d1:fd:86:49:
87:11:8c:67:35:52:70:0d:63:57:fc:1e:77:83:90:
9a:2d:55:15:3e:0c:2e:90:d8:e5:c0:21:19:ed:f2:
87:ca:48:7c:01:c2:49:75:df:00:36:6b:77:2f:21:
bb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BB:18:71:42:25:90:22:06:AC:22:A3:19:6C:F6:FA:95:DF:E4:52
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DEA2C2D6C2F611ED95226623C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.148.0/23
103.171.109.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:c7:1d:f3:c2:af:1f:33:04:80:aa:8d:14:36:1a:23:2e:4a:
77:17:17:90:7a:1c:5f:c2:94:41:4e:20:fd:d5:15:bd:97:53:
c8:d3:11:91:1f:94:17:07:59:64:b3:81:a7:9e:b1:49:b9:99:
e4:d2:00:47:41:85:d8:93:4d:52:3d:90:13:dd:4c:53:0c:a7:
2c:00:f8:20:34:cb:f8:21:f9:7f:b2:26:4e:b4:b4:63:44:b2:
cc:b6:1c:fc:de:27:9c:63:1c:70:1d:d5:23:e7:04:66:1e:d7:
05:04:1a:63:78:ee:61:e7:89:d4:b9:1c:79:39:80:24:07:5e:
df:b7:0d:b2:71:57:f7:2f:e0:fc:8e:89:60:d0:a8:0c:e9:0f:
4c:68:cb:c3:a2:17:21:9f:da:19:e9:aa:50:0e:78:af:d0:4c:
51:fe:dd:ea:54:80:01:db:c7:95:b6:ce:79:00:18:45:a8:4a:
08:22:fe:0c:06:9b:67:d5:96:9f:47:37:91:56:b8:75:03:d1:
da:5e:08:5b:8f:29:9d:db:35:84:fd:33:54:fe:40:04:16:a8:
3f:78:87:b7:08:2e:ba:00:ee:59:24:99:00:f4:17:24:7c:b3:
a8:81:b2:50:b5:44:ff:7a:b2:18:4f:bb:1c:19:34:6b:10:47:
d8:2f:f0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:50 2025 by rpki-client