Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAB06F5EAD2211EDB8BC840AC4F9AE02.roa
File: EAB06F5EAD2211EDB8BC840AC4F9AE02.roa (raw, json)
Hash identifier: Nc9+LTIZNY8w17OUJsyyPyRyHnRtpycO8H+aiPsfiVw=
Subject key identifier: 29:92:2C:0C:8D:19:60:24:D4:10:B4:A9:F7:E5:E6:EE:A4:BE:46:EC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7201
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAB06F5EAD2211EDB8BC840AC4F9AE02.roa
Signing time: Fri 12 May 2023 10:32:07 +0000
ROA not before: Fri 12 May 2023 10:32:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17754
IP address blocks: 103.48.68.0/23 maxlen: 24
103.48.71.0/24 maxlen: 24
103.55.213.0/24 maxlen: 24
103.105.102.0/24 maxlen: 24
103.187.78.0/23 maxlen: 24
113.11.224.0/22 maxlen: 24
113.11.228.0/22 maxlen: 24
175.101.0.0/16 maxlen: 24
202.133.48.0/20 maxlen: 24
202.153.32.0/20 maxlen: 24
2401:fb00::/33 maxlen: 33
2401:fb00::/40 maxlen: 48
2401:fb00:100::/40 maxlen: 48
2401:fb00:200::/40 maxlen: 48
2401:fb00:300::/40 maxlen: 48
2401:fb00:400::/40 maxlen: 48
2401:fb00:500::/40 maxlen: 48
2401:fb00:600::/40 maxlen: 48
2401:fb00:700::/40 maxlen: 48
2401:fb00:800::/40 maxlen: 48
2401:fb00:900::/40 maxlen: 48
2401:fb00:7600::/40 maxlen: 48
2401:fb00:7700::/40 maxlen: 48
2401:fb00:7800::/40 maxlen: 48
2401:fb00:7900::/40 maxlen: 48
2401:fb00:7a00::/40 maxlen: 48
2401:fb00:7b00::/40 maxlen: 48
2401:fb00:7c00::/40 maxlen: 48
2401:fb00:7d00::/40 maxlen: 48
2401:fb00:7e00::/40 maxlen: 48
2401:fb00:7f00::/40 maxlen: 48
2401:fb00:8000::/33 maxlen: 33
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29185 (0x7201)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 12 10:32:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645e15a7-279c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b8:e2:bc:40:f2:17:d5:58:c6:b2:e9:09:52:
d1:e9:f2:e9:a8:01:40:1c:28:99:56:c2:85:bb:58:
1b:c4:0f:fa:82:23:16:c7:61:7f:a2:c5:61:7c:c0:
d9:36:49:a5:d6:b5:3c:b7:8c:5c:9a:02:96:fe:48:
7e:fa:fb:60:0b:21:cf:5b:d6:39:74:4d:f6:5a:74:
f9:5f:b4:2e:e2:52:a6:f3:64:38:58:47:e3:2e:93:
f7:99:81:15:81:29:5b:14:ad:bc:13:d4:e0:a0:17:
3e:42:d5:58:09:8e:ea:f6:40:21:f7:1f:0e:07:75:
3a:3f:80:18:a8:93:35:f4:bc:35:ed:e3:50:f4:6e:
0e:13:10:ae:db:d6:98:6d:f7:4a:79:42:c5:50:77:
8d:13:3f:dc:06:f4:f5:8d:a4:eb:0e:5a:4c:ba:25:
9f:e8:fa:fc:dc:8d:99:1d:81:de:4f:e1:bf:e8:47:
c6:fb:b9:76:ec:d4:27:26:9d:c7:ba:64:4d:e4:c9:
bb:5c:ac:a8:59:56:5f:d0:db:ff:cb:64:82:08:c3:
ba:80:cf:69:0f:31:31:fa:a9:18:b8:05:69:7f:a6:
46:5b:e8:82:10:45:1b:b5:51:61:54:c3:7c:9f:58:
05:ad:b6:e6:5a:98:60:ff:62:06:a4:b7:02:29:6e:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:92:2C:0C:8D:19:60:24:D4:10:B4:A9:F7:E5:E6:EE:A4:BE:46:EC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EAB06F5EAD2211EDB8BC840AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.48.68.0/23
103.48.71.0/24
103.55.213.0/24
103.105.102.0/24
103.187.78.0/23
113.11.224.0/21
175.101.0.0/16
202.133.48.0/20
202.153.32.0/20
IPv6:
2401:fb00::/32
Signature Algorithm: sha256WithRSAEncryption
74:5b:50:3d:3c:d0:62:17:4d:ba:82:bb:ed:b7:eb:2d:88:92:
77:cf:5c:7e:5a:7d:fb:f1:ec:9e:8c:bd:94:16:9e:ec:e4:a6:
6b:7e:37:45:fe:a2:01:95:bb:85:39:0d:bf:9f:1b:74:f3:e4:
02:18:ae:db:14:75:56:04:68:ac:35:40:55:c8:69:dc:8e:a8:
71:76:c5:c9:8a:19:df:c3:32:af:2e:46:a8:0b:c6:5f:30:31:
ba:45:35:5e:6a:dc:e6:6c:48:1a:69:8f:ee:e5:93:07:fd:16:
02:01:b7:82:6e:a2:c7:28:a2:27:d6:85:08:92:bc:c0:8a:7e:
c8:73:6c:29:ac:86:5c:c5:3c:24:cf:bd:3a:08:b4:58:c1:3a:
08:55:72:fd:20:95:8a:10:54:d6:0e:cf:58:21:1f:72:66:a7:
93:e0:97:35:76:86:c6:04:24:1b:eb:6e:17:1d:81:fd:0e:28:
11:f4:f5:fd:a8:19:98:55:69:e7:45:6e:e0:59:4a:4b:bf:70:
5f:97:5d:14:d5:7f:34:c1:bc:2e:1d:56:22:68:9a:e1:63:6f:
cf:4c:72:3f:3a:25:98:9b:a4:2c:5c:b3:ca:07:3b:85:ef:8d:
0b:35:ea:da:5a:6a:7b:9c:fe:30:63:3f:cb:84:67:9a:89:00:
5c:a6:2a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:30 2025 by rpki-client