Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3E2BDBA543211ED9E4CB114C4F9AE02.roa
File: E3E2BDBA543211ED9E4CB114C4F9AE02.roa (raw, json)
Hash identifier: TZ/cJ51Uli+/fFutVPQTOmR/X2NKE2Vl5uQsObUlPcI=
Subject key identifier: 68:2B:4B:CA:9C:45:D9:BC:2B:92:E2:31:0A:D6:0F:95:44:BB:AB:71
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 5F2B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3E2BDBA543211ED9E4CB114C4F9AE02.roa
Signing time: Tue 25 Oct 2022 07:01:47 +0000
ROA not before: Tue 25 Oct 2022 07:01:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140125
IP address blocks: 103.168.0.0/23 maxlen: 24
103.173.14.0/23 maxlen: 24
103.179.94.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.179.120.0/24 maxlen: 24
103.179.121.0/24 maxlen: 24
103.179.226.0/23 maxlen: 24
103.181.64.0/23 maxlen: 24
103.181.110.0/23 maxlen: 24
103.181.114.0/23 maxlen: 24
103.181.152.0/23 maxlen: 24
103.181.174.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24363 (0x5f2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Oct 25 07:01:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=635789db-0769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:a8:90:a0:c6:69:98:8f:eb:d2:d9:9c:59:
c2:02:66:e0:f5:15:c1:6d:0b:57:ae:ef:b7:a2:75:
49:0c:14:6b:30:a6:df:69:80:9b:ef:14:92:ed:2e:
ec:40:dc:fe:f7:a4:c1:c9:5d:ea:9d:9a:24:dc:13:
d9:fe:77:19:91:a4:06:00:b2:82:67:54:3a:38:d0:
d9:75:96:25:3f:2c:e3:fc:4d:33:21:36:1d:6f:d8:
9f:42:b9:c9:26:dd:80:c4:95:dd:cf:0d:db:fa:ce:
3b:e1:97:af:f6:2d:95:4e:a6:10:2b:e0:a6:35:da:
5a:0c:d2:b4:50:62:08:1d:16:3f:3b:99:6c:e6:dc:
63:e0:b7:e9:7e:b8:38:78:d9:4b:d4:e6:21:fa:a3:
0a:01:6b:c9:4c:a7:eb:79:45:95:64:76:66:82:de:
85:e2:d6:87:4d:c9:f4:c1:ed:cb:cb:1d:ed:fc:30:
64:af:e7:88:71:4f:6f:b6:8b:cb:9b:8d:56:04:08:
6e:2e:07:18:62:5e:6b:ba:76:9a:2d:fa:95:dd:1f:
1a:ee:78:b8:c8:b6:98:e3:6e:e5:86:90:9a:75:3e:
c6:c3:81:b2:16:8a:e5:59:3c:9e:85:97:5d:b9:a3:
bc:2b:14:3f:72:fd:a3:3d:96:c6:4c:11:55:fd:b8:
a8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2B:4B:CA:9C:45:D9:BC:2B:92:E2:31:0A:D6:0F:95:44:BB:AB:71
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E3E2BDBA543211ED9E4CB114C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.0.0/23
103.173.14.0/23
103.179.94.0/23
103.179.118.0-103.179.121.255
103.179.226.0/23
103.181.64.0/23
103.181.110.0/23
103.181.114.0/23
103.181.152.0/23
103.181.174.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:22:be:d4:86:f8:61:f0:0c:8a:6e:86:ff:04:f8:bf:32:4a:
07:bd:2c:0f:9c:50:44:13:fc:79:37:6b:4d:b0:de:ce:db:15:
24:1a:ac:af:a4:12:c5:eb:4e:51:5f:71:87:2e:8f:20:cb:56:
59:5b:61:14:96:cd:ea:97:0d:dd:7e:03:cc:0b:03:ba:2b:9d:
ed:63:5b:32:29:6b:df:96:bc:c7:80:1a:8a:d0:08:20:2d:ab:
95:f9:db:01:cf:6d:2f:b1:10:5a:90:7e:ce:09:cc:9f:07:c2:
ac:dc:e0:00:bf:92:3d:15:c1:06:69:ac:00:0e:af:1b:89:79:
2a:45:9b:3c:49:b6:58:a9:3f:0d:31:09:f2:40:79:f9:15:b5:
94:b1:a7:8d:32:82:02:fb:6d:fc:f0:a4:b8:4c:b4:00:47:48:
40:ce:58:ca:4a:1b:17:df:e2:75:9d:ea:fa:ef:96:d0:c0:a7:
6a:1b:13:31:73:96:fd:6a:39:7d:4b:0f:15:9e:63:31:d7:4b:
05:61:b7:a3:93:ce:0d:c1:18:64:07:15:17:79:e4:a7:c0:c3:
3b:e4:3b:50:65:f8:12:04:b4:27:17:b2:41:3e:03:21:d2:93:
a8:d1:b8:3e:33:6d:16:63:f5:fb:a0:18:cf:85:2a:ee:18:06:
1d:64:e8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:11 2025 by rpki-client