Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9181172CD7F11EFA9661D39C4F9AE02.roa
File: E9181172CD7F11EFA9661D39C4F9AE02.roa (raw, json)
Hash identifier: Ck6rC7CsKAz20YYN8iNbCbd8l+ZLtpWoC322O4vgTcU=
Subject key identifier: 53:31:AA:2D:B7:0B:DB:18:2C:E8:0E:65:65:F5:16:27:B6:F5:8F:6E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A1E6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9181172CD7F11EFA9661D39C4F9AE02.roa
Signing time: Thu 09 Jan 2025 11:07:55 +0000
ROA not before: Thu 09 Jan 2025 11:07:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139555
IP address blocks: 103.126.32.0/22 maxlen: 24
103.134.116.0/23 maxlen: 24
103.181.212.0/23 maxlen: 24
2001:df3:d7c0::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41446 (0xa1e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 9 11:07:55 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=677fae0b-3c95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:00:a7:e1:64:15:45:ba:11:ad:53:d4:c5:5a:
d3:2e:54:4e:14:4e:44:e9:00:a6:25:90:f0:b5:ec:
d7:6c:ec:15:51:4d:01:34:23:86:f6:d5:55:af:6b:
66:c2:e0:a9:5a:65:08:0c:7e:b9:33:78:84:7e:21:
b7:88:6d:16:11:3d:a8:64:8f:e1:d8:af:9c:44:33:
5d:83:06:c4:03:7f:bd:bd:7d:13:25:6f:c0:b4:ab:
4d:7f:5d:44:bf:0f:cf:2b:aa:ca:6d:d0:62:2c:74:
02:c5:e6:89:d9:cc:14:3c:b4:06:1d:1f:a9:23:ba:
e2:20:a4:4b:77:31:89:18:42:74:ac:6a:77:ed:7a:
e0:1a:0a:36:bf:31:18:9d:09:af:04:59:2f:09:cf:
a3:4f:da:1a:07:b2:79:bd:6b:9a:07:c0:4d:db:ed:
ea:de:8d:32:1f:37:da:5d:82:b7:7d:03:05:c3:01:
b1:10:42:6e:6d:6b:99:a5:69:0e:e1:c6:41:7c:49:
38:e4:c2:78:58:4b:de:cf:09:5f:42:e4:d1:4d:c7:
5d:c5:76:50:b1:23:05:75:fb:58:50:30:b6:a1:0a:
ce:7f:13:81:03:5c:7e:e2:b1:3f:eb:64:17:33:1e:
4a:85:11:4f:cf:14:cd:fe:f0:93:ed:38:1c:ae:3c:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:31:AA:2D:B7:0B:DB:18:2C:E8:0E:65:65:F5:16:27:B6:F5:8F:6E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E9181172CD7F11EFA9661D39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.32.0/22
103.134.116.0/23
103.181.212.0/23
IPv6:
2001:df3:d7c0::/48
Signature Algorithm: sha256WithRSAEncryption
24:34:78:82:ab:e8:8e:dc:ab:6a:ca:2a:23:37:5b:fa:ce:1e:
ed:82:1c:02:24:4b:6e:eb:59:93:ee:b2:c5:5f:af:bd:39:3a:
9e:8b:88:66:77:52:0c:a6:cb:74:d6:98:5e:7b:d1:ea:bb:54:
ff:c3:bd:04:71:2c:48:be:4d:39:ec:40:57:cb:d5:a4:52:84:
58:dd:d2:4f:ad:01:0a:60:c1:41:37:a3:85:49:3e:a0:c8:bf:
e4:fc:97:a1:b4:8f:32:0d:12:fb:95:6d:cc:ea:0b:c8:65:17:
9e:74:f1:a6:05:1e:1d:14:d1:a7:d5:7e:58:63:8f:62:dc:64:
c7:c7:47:63:f7:47:22:d7:4c:49:b1:a5:ed:e6:b9:28:44:d8:
a3:54:54:02:f3:fd:36:f0:db:05:83:fa:22:13:26:c5:9a:d6:
8f:64:7b:71:47:0d:31:1d:a2:02:4a:db:29:d3:11:c4:b7:be:
d0:08:2e:f7:64:39:db:eb:43:96:72:05:76:47:75:ce:aa:a5:
13:6c:c5:4a:38:b8:39:a2:19:4b:fa:74:a0:a9:b7:40:fa:6a:
0d:d3:c8:63:65:ae:94:9b:12:ca:2e:5f:9c:c9:15:fc:76:40:
a1:55:e3:62:89:8d:df:ff:32:e5:8e:3b:01:12:50:fc:43:d9:
b6:25:6b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:03:12 2025 by rpki-client