Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8B49C82A87911EDA872717EC4F9AE02.roa
File: E8B49C82A87911EDA872717EC4F9AE02.roa (raw, json)
Hash identifier: 5RccbKTL0vb+CDEUEjcEGOJ9HboyqqtfxvEUeSR40/M=
Subject key identifier: 59:27:7B:76:A0:93:67:B4:83:B7:1F:AE:B1:28:27:2F:19:29:0A:DB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 88B3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8B49C82A87911EDA872717EC4F9AE02.roa
Signing time: Thu 30 May 2024 15:55:41 +0000
ROA not before: Thu 30 May 2024 15:55:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133001
IP address blocks: 43.225.160.0/22 maxlen: 24
43.251.216.0/22 maxlen: 24
45.117.220.0/22 maxlen: 24
45.119.44.0/24 maxlen: 24
45.119.45.0/24 maxlen: 24
45.119.46.0/24 maxlen: 24
45.119.47.0/24 maxlen: 24
103.38.36.0/22 maxlen: 24
103.42.166.0/23 maxlen: 24
103.51.132.0/24 maxlen: 24
103.51.133.0/24 maxlen: 24
103.51.134.0/24 maxlen: 24
103.51.135.0/24 maxlen: 24
103.54.76.0/24 maxlen: 24
103.54.77.0/24 maxlen: 24
103.114.0.0/22 maxlen: 23
103.114.2.0/23 maxlen: 24
103.116.147.0/24 maxlen: 24
103.133.116.0/24 maxlen: 24
103.140.26.0/24 maxlen: 24
103.140.27.0/24 maxlen: 24
103.156.98.0/23 maxlen: 24
103.165.68.0/24 maxlen: 24
103.165.69.0/24 maxlen: 24
103.176.210.0/24 maxlen: 24
103.176.211.0/24 maxlen: 24
103.196.76.0/22 maxlen: 24
103.200.74.0/23 maxlen: 24
103.201.148.0/22 maxlen: 24
103.239.168.0/24 maxlen: 24
103.239.169.0/24 maxlen: 24
103.239.170.0/24 maxlen: 24
103.239.171.0/24 maxlen: 24
111.125.225.0/24 maxlen: 24
157.119.202.0/24 maxlen: 24
183.87.251.0/24 maxlen: 24
183.87.252.0/22 maxlen: 24
202.94.160.0/22 maxlen: 24
2401:b240::/32 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34995 (0x88b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:55:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a17d-b5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:c7:15:2a:b0:88:1f:e5:6b:5f:6c:f6:d4:
7c:27:52:be:fd:f9:ba:c8:9f:4a:ff:ed:f5:56:64:
b5:c0:2f:bf:bd:47:d4:4e:d5:8f:c4:3a:a5:9f:da:
66:54:b9:85:ca:93:c3:07:f3:de:66:64:79:fa:77:
d8:4a:64:0e:a8:8d:be:9e:92:f7:1b:b4:ce:fa:5d:
d5:d6:56:b0:8f:b4:60:20:03:82:e2:8a:e6:20:f3:
9b:75:16:87:f8:64:49:3f:cc:08:df:78:65:e1:36:
8a:06:96:2e:c2:39:bd:88:f3:80:0d:74:e6:0d:08:
b7:da:84:c5:8a:bf:ef:6a:87:9d:36:96:17:a6:72:
bf:b2:04:75:5e:11:b7:9b:cd:86:6e:34:37:34:8d:
22:67:59:8f:19:3a:23:c7:24:01:96:54:12:ae:d2:
e2:c6:fb:74:92:8d:6f:2f:68:fc:ff:fe:d5:52:6f:
a6:c7:aa:6a:50:63:b9:59:9c:01:a8:6b:e8:fd:c1:
53:9c:45:c6:43:1c:33:b3:36:56:db:f8:fd:1e:15:
4a:93:b1:05:63:f9:b2:ea:11:72:85:80:38:4d:fd:
d3:1c:68:11:51:65:6e:ad:ec:97:4a:27:2f:9b:9c:
29:fd:46:fe:dd:85:2d:6f:e0:76:aa:e3:13:df:46:
e0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:27:7B:76:A0:93:67:B4:83:B7:1F:AE:B1:28:27:2F:19:29:0A:DB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E8B49C82A87911EDA872717EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.225.160.0/22
43.251.216.0/22
45.117.220.0/22
45.119.44.0/22
103.38.36.0/22
103.42.166.0/23
103.51.132.0/22
103.54.76.0/23
103.114.0.0/22
103.116.147.0/24
103.133.116.0/24
103.140.26.0/23
103.156.98.0/23
103.165.68.0/23
103.176.210.0/23
103.196.76.0/22
103.200.74.0/23
103.201.148.0/22
103.239.168.0/22
111.125.225.0/24
157.119.202.0/24
183.87.251.0-183.87.255.255
202.94.160.0/22
IPv6:
2401:b240::/32
Signature Algorithm: sha256WithRSAEncryption
46:f4:b1:77:b3:00:5f:86:ae:b8:94:48:18:ad:e3:c2:af:d2:
10:42:26:63:25:c2:c0:05:53:ad:fc:27:41:04:9b:aa:0a:3d:
05:04:a9:74:c3:15:46:57:e4:8b:5a:c7:ad:ae:4d:49:07:21:
0d:c6:e7:a3:70:2a:be:6f:89:cb:02:42:71:d8:15:97:e6:d8:
d3:50:33:97:7c:24:51:ef:5a:90:51:66:63:c1:a7:05:1f:7f:
8b:99:06:99:39:3c:97:06:e7:b4:4b:1a:5c:dc:35:04:f7:0f:
50:98:b3:33:3b:87:44:25:2d:4b:b6:06:a6:a3:47:58:2c:d6:
b7:51:53:d5:8c:59:38:71:a6:fa:32:ec:23:19:e9:35:36:50:
fd:59:83:08:02:29:35:d7:37:86:26:dd:45:23:7c:b6:a1:00:
96:f5:74:bd:64:06:44:7d:a0:9d:4e:6a:10:05:95:49:75:b0:
7b:7d:03:6a:a1:85:4d:0c:e4:4d:f5:5b:b8:4c:a1:9e:d0:b4:
f9:77:cd:8f:bc:f5:3a:84:f3:e7:61:48:1d:13:0a:0c:bc:25:
3c:7e:85:88:d9:91:60:7b:62:cb:75:8b:40:95:33:7f:55:34:
2f:af:d9:ba:a8:eb:f3:f8:e5:59:8d:aa:ff:63:70:d5:2e:dc:
62:9b:d2:41
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIDAIizMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE1NTU0MVoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGExN2QtYjVjZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL1BxxUqsIgf5WtfbPbUfCdSvv35usifSv/t9VZktcAvv71H1E7Vj8Q6pZ/a
ZlS5hcqTwwfz3mZkefp32EpkDqiNvp6S9xu0zvpd1dZWsI+0YCADguKK5iDzm3UW
h/hkST/MCN94ZeE2igaWLsI5vYjzgA105g0It9qExYq/72qHnTaWF6Zyv7IEdV4R
t5vNhm40NzSNImdZjxk6I8ckAZZUEq7S4sb7dJKNby9o/P/+1VJvpseqalBjuVmc
Aahr6P3BU5xFxkMcM7M2Vtv4/R4VSpOxBWP5suoRcoWAOE390xxoEVFlbq3sl0on
L5ucKf1G/t2FLW/gdqrjE99G4NECAwEAAaOCAzQwggMwMB0GA1UdDgQWBBRZJ3t2
oJNntIO3H66xKCcvGSkK2zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0U4QjQ5Qzgy
QTg3OTExRURBODcyNzE3RUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMIG9BggrBgEFBQcBBwEB
/wSBrTCBqjCBmAQCAAEwgZEDBAIr4aADBAIr+9gDBAItddwDBAItdywDBAJnJiQD
BAFnKqYDBAJnM4QDBAFnNkwDBAJncgADBABndJMDBABnhXQDBAFnjBoDBAFnnGID
BAFnpUQDBAFnsNIDBAJnxEwDBAFnyEoDBAJnyZQDBAJn76gDBABvfeEDBACdd8ow
CwMEALdX+wMDA7dQAwQCyl6gMA0EAgACMAcDBQAkAbJAMA0GCSqGSIb3DQEBCwUA
A4IBAQBG9LF3swBfhq64lEgYrePCr9IQQiZjJcLABVOt/CdBBJuqCj0FBKl0wxVG
V+SLWsetrk1JByENxuejcCq+b4nLAkJx2BWX5tjTUDOXfCRR71qQUWZjwacFH3+L
mQaZOTyXBue0Sxpc3DUE9w9QmLMzO4dEJS1Ltgamo0dYLNa3UVPVjFk4cab6Muwj
Gek1NlD9WYMIAik11zeGJt1FI3y2oQCW9XS9ZAZEfaCdTmoQBZVJdbB7fQNqoYVN
DORN9Vu4TKGe0LT5d82PvPU6hPPnYUgdEwoMvCU8foWI2ZFge2LLdYtAlTN/VTQv
r9m6qOvz+OVZjar/Y3DVLtxim9JB
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:09:22 2025 by rpki-client