Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E670F4BCBDD411EAA2D98325C4F9AE02.roa
File: E670F4BCBDD411EAA2D98325C4F9AE02.roa (raw, json)
Hash identifier: +7/7Yc4UFQFQKBK47b0ObVlwwavFeJTITBV+nnYWYeo=
Subject key identifier: 66:55:66:AF:5F:F6:23:20:6B:35:6A:B0:DF:C9:DD:DD:00:1E:EA:B8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8A46
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E670F4BCBDD411EAA2D98325C4F9AE02.roa
Signing time: Thu 30 May 2024 16:02:18 +0000
ROA not before: Thu 30 May 2024 16:02:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135686
IP address blocks: 103.69.44.0/22 maxlen: 24
103.165.64.0/23 maxlen: 24
2406:29c0::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35398 (0x8a46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:02:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a30a-e284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:17:ad:0d:24:34:e1:e2:ef:62:5a:0e:5c:
a4:9f:f4:b7:32:ac:28:8e:90:50:91:53:1d:e5:c8:
70:87:ac:bf:fe:d6:85:c2:97:5a:53:b2:b8:24:0c:
a4:12:2b:e6:af:f7:5c:4a:9d:42:48:bd:9e:2f:b4:
5d:46:70:cc:85:aa:de:15:77:ee:f5:0e:30:ec:5c:
d4:03:4e:ed:df:02:e2:ce:21:a7:d0:03:a3:ea:0a:
58:3f:69:1e:3f:f6:5b:af:e7:56:38:26:74:84:d8:
9b:e7:95:f0:38:19:35:aa:c6:4c:92:06:37:8f:de:
cb:dc:2e:51:7a:34:c0:28:9f:53:d8:0e:93:30:9c:
94:a6:26:2b:e5:53:06:c1:4f:44:51:d2:45:3b:30:
db:c4:c8:26:eb:5d:5d:d8:7b:15:d5:11:d9:73:7f:
e0:8a:bc:a9:33:5c:1f:39:50:7d:0e:b1:f3:90:ac:
94:b5:d5:05:d1:53:a9:ec:63:e9:42:b1:a8:05:00:
12:d1:e7:7c:9a:83:71:88:08:c2:33:86:a7:19:59:
72:f4:3d:11:7f:5b:f5:5b:82:0e:2e:90:29:35:bc:
d4:9b:66:af:41:0a:d1:fa:cb:be:be:53:29:e7:73:
46:41:0b:a3:3a:d0:31:9a:14:cb:6c:fe:c0:cd:bb:
db:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:55:66:AF:5F:F6:23:20:6B:35:6A:B0:DF:C9:DD:DD:00:1E:EA:B8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E670F4BCBDD411EAA2D98325C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.69.44.0/22
103.165.64.0/23
IPv6:
2406:29c0::/32
Signature Algorithm: sha256WithRSAEncryption
b2:46:50:09:a0:5d:b5:1c:c8:11:1d:ca:ed:c6:e1:f7:cf:9a:
52:03:3a:6c:4f:c8:62:46:c1:59:3e:bf:6f:68:f3:f8:55:19:
c4:ba:87:3c:af:df:27:01:03:3a:1a:25:9e:c9:a0:ab:5d:b5:
9d:dc:bc:63:af:fb:d6:39:97:68:39:3e:45:ac:62:e7:5a:2f:
14:53:50:8c:b6:b1:1c:7c:1e:28:e7:73:15:17:30:ed:a1:d1:
da:b2:2a:85:5a:6c:49:79:fe:1a:76:05:d0:44:26:b5:1b:9c:
98:4c:f2:1a:1a:cc:69:16:c8:8d:ea:08:66:d3:8a:a7:7e:31:
49:75:e4:70:5c:9d:58:27:42:e3:cb:4b:9e:fa:aa:1d:18:9b:
02:c8:fb:60:70:ea:6e:1c:d1:d6:16:ba:b6:be:0d:0c:4b:b7:
6e:a4:6d:f4:de:98:82:be:18:43:0c:23:29:54:01:e4:1a:e2:
a9:59:6a:75:c3:68:0d:82:cf:05:e1:a3:44:3c:db:a3:5a:cf:
83:05:b4:cc:ff:aa:fb:5b:79:3f:39:aa:61:96:2e:ac:57:08:
a4:60:83:d7:74:6c:47:db:09:c8:f9:be:9d:34:14:ef:78:d0:
d9:b3:77:d4:bf:67:3e:51:59:4b:be:c3:38:c5:f6:38:8a:0e:
e1:44:dd:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:33 2025 by rpki-client