Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E88F6398DE0C11EFBF4CAB45C4F9AE02.roa
File: E88F6398DE0C11EFBF4CAB45C4F9AE02.roa (raw, json)
Hash identifier: nH9g9sfEl2sQ+W7l6i7oXgrGB/url2elSoHNKfEQs8g=
Subject key identifier: E1:F7:CA:A2:37:22:AD:8B:59:EA:85:02:33:DE:B3:89:65:CB:2D:8A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A3E4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E88F6398DE0C11EFBF4CAB45C4F9AE02.roa
Signing time: Wed 29 Jan 2025 06:54:23 +0000
ROA not before: Wed 29 Jan 2025 06:54:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133652
IP address blocks: 45.118.164.0/22 maxlen: 24
103.47.64.0/22 maxlen: 24
103.87.49.0/24 maxlen: 24
103.87.50.0/23 maxlen: 24
103.214.117.0/24 maxlen: 24
103.214.118.0/23 maxlen: 24
2401:df80::/32 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41956 (0xa3e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 29 06:54:23 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6799d09e-8bb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9c:47:33:52:ec:be:9f:cf:1c:0f:b9:83:47:
13:31:ee:13:cf:ad:b9:93:1a:60:6e:8f:42:eb:89:
1b:da:47:98:fb:27:fb:d4:8a:b6:b5:e2:cf:6e:a7:
2a:3c:58:96:58:e0:7f:b1:71:cf:23:d2:af:45:f7:
5b:0e:48:62:d5:cb:c4:35:5f:29:8d:e5:9c:37:2f:
70:38:9a:e2:ac:64:dc:48:9f:ea:9d:cf:5c:7c:97:
b7:d1:bf:47:90:d7:7e:4e:65:a7:68:5b:80:a5:74:
e3:cb:02:de:c2:d6:a8:0f:9f:b5:2a:c1:b5:91:54:
08:f6:73:83:21:81:03:1f:92:c7:b5:85:67:2f:a4:
83:61:a2:7e:08:87:3e:73:b8:d7:7e:0c:93:1d:af:
b1:0d:cf:8c:df:e8:60:e1:53:60:c0:af:11:a0:90:
bb:db:64:9e:50:ca:11:76:eb:ac:cc:84:01:0a:f6:
27:3d:c3:03:ca:c7:bb:ba:de:90:c6:e5:2b:51:ee:
b8:d6:ec:6c:21:be:d2:23:f7:b4:eb:86:a4:7a:2a:
a6:7a:4e:c9:ee:31:bf:70:b5:79:d9:e5:45:d9:1f:
58:98:28:b5:29:3c:2d:e0:71:55:72:5f:4a:04:78:
a7:9c:82:89:cb:22:6a:91:ff:a1:0f:07:93:da:5f:
0e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F7:CA:A2:37:22:AD:8B:59:EA:85:02:33:DE:B3:89:65:CB:2D:8A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E88F6398DE0C11EFBF4CAB45C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.118.164.0/22
103.47.64.0/22
103.87.49.0-103.87.51.255
103.214.117.0-103.214.119.255
IPv6:
2401:df80::/32
Signature Algorithm: sha256WithRSAEncryption
1b:b8:ff:58:12:20:0a:db:ef:59:bf:eb:89:5b:c3:46:75:ef:
f1:77:3f:bb:aa:de:50:1b:53:d1:62:c2:e4:a0:08:de:31:17:
3f:85:dd:a1:22:7a:f6:a5:46:e9:ce:c4:28:62:66:cc:49:9c:
76:cb:70:5b:af:d3:71:74:41:ae:e3:fe:e3:19:cf:01:e5:21:
ef:2a:bd:9e:1c:f1:ea:70:39:a4:2f:3e:80:bb:ee:0c:48:fd:
97:d1:17:9e:e6:f7:87:7a:9d:42:ec:97:cb:0f:4f:7d:48:ef:
e3:f6:56:db:e8:e8:7f:f1:7f:67:bd:c1:da:bd:ff:8f:b0:76:
9c:41:7a:b9:b9:31:4b:36:f6:e4:9f:e5:8a:9f:9a:0d:33:1b:
0c:6d:a5:c7:56:17:75:82:b9:a2:e0:32:19:0c:01:47:fc:58:
99:e3:41:72:f4:ea:59:af:40:ef:09:40:4e:f0:90:ea:02:81:
d1:f7:de:06:25:e5:83:2d:6e:b1:e2:69:23:4c:02:77:dd:90:
c7:e2:dc:2e:b3:81:e4:d6:96:83:b9:d3:4f:e5:58:2f:3b:09:
ea:a4:94:95:e7:ad:e1:f0:77:b7:83:5e:30:2f:7e:5b:ff:20:
29:fa:07:78:5f:85:56:8e:2a:f4:9f:6c:40:67:f8:97:ad:38:
0d:8e:b5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:46 2025 by rpki-client