Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECEE06C8877411EE8B94CF30C4F9AE02.roa
File: ECEE06C8877411EE8B94CF30C4F9AE02.roa (raw, json)
Hash identifier: aEa3dhm3BUTNhPgZpufeULUW6UQ0pzbPv2R4GLHzYlM=
Subject key identifier: 33:4A:6E:BA:C2:E4:9F:CA:D5:F7:09:82:B6:95:EF:A5:56:F2:CB:7D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7E33
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECEE06C8877411EE8B94CF30C4F9AE02.roa
Signing time: Mon 20 Nov 2023 07:17:55 +0000
ROA not before: Mon 20 Nov 2023 07:17:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150091
IP address blocks: 103.179.120.0/24 maxlen: 24
103.179.121.0/24 maxlen: 24
103.181.151.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32307 (0x7e33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 20 07:17:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655b0823-bbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b0:8e:d1:5c:99:d6:30:bf:c7:33:b5:27:5e:
b0:c4:7e:a3:0f:61:2b:ad:07:05:18:ad:07:23:09:
37:46:ac:06:29:68:d9:da:74:ff:17:b2:00:25:2f:
92:d3:00:07:df:44:e2:ec:3d:ee:9a:e4:ff:17:8d:
80:f2:9f:b7:54:1c:21:b5:cc:35:08:a2:ba:ce:0b:
2a:e6:08:8e:c3:d5:ce:3d:95:5d:48:56:28:74:8b:
6d:9f:ce:8b:70:b8:4c:b1:6b:51:08:9c:0b:52:6c:
83:d7:71:8f:6d:da:7f:99:78:5a:fe:b9:f2:18:56:
90:aa:88:f4:e4:bc:e6:15:e3:87:3c:6c:06:a1:31:
76:1b:95:95:a2:93:cd:6d:56:fc:ff:e6:a3:d7:9c:
c1:3f:d9:da:18:b7:1b:a3:1c:b6:06:d7:db:19:36:
76:04:60:08:4c:9b:35:73:05:8e:89:95:ca:f7:4d:
2e:b9:1f:98:33:2c:c1:c0:e8:bd:54:73:89:68:28:
ab:af:86:75:b8:75:65:a7:a2:4f:9b:83:92:24:84:
05:5b:80:ca:4a:c6:9c:52:2c:35:3b:33:0e:84:87:
f6:09:80:f3:75:1d:68:48:7b:af:3e:ef:67:25:9b:
e6:7a:f3:b2:ca:72:3d:94:80:e7:9f:19:66:7b:a4:
83:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:4A:6E:BA:C2:E4:9F:CA:D5:F7:09:82:B6:95:EF:A5:56:F2:CB:7D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECEE06C8877411EE8B94CF30C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.120.0/23
103.181.151.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2a:1e:ae:fe:4c:37:81:88:c0:7e:08:68:5f:44:88:19:a2:
5e:15:17:f2:9a:8c:92:f4:c9:22:cd:7a:a6:ef:f8:eb:5b:f9:
1c:1b:40:16:92:88:ae:80:2e:a5:bb:6c:02:27:96:8c:5a:e3:
b2:32:62:2d:ce:91:43:53:8d:98:da:55:4f:8e:2b:4c:2f:eb:
f7:51:57:c3:4c:73:09:74:7e:b1:87:ca:99:ba:5f:67:d2:66:
f5:b0:04:54:de:02:2b:73:92:2b:67:bb:29:39:f2:f8:30:75:
e0:bb:e9:85:83:57:c1:3b:99:2c:74:09:7a:0a:80:57:9a:4e:
87:69:97:ff:e8:2c:9b:fb:d1:27:a6:34:0a:f7:f1:d3:f2:89:
f9:80:63:dc:45:28:66:2d:ec:9d:5e:91:fd:32:67:06:62:88:
93:c8:fe:6b:8b:ba:c2:0a:cd:2d:22:a0:08:2f:3b:a1:a4:b0:
ac:fa:2f:45:4b:18:7d:a9:3d:49:b1:3d:5d:ad:de:76:c8:d0:
25:f6:4d:45:f4:f9:0b:ab:c9:e8:2e:93:77:12:78:6a:1c:4b:
ae:09:de:da:13:dc:aa:d9:02:aa:6c:de:52:7f:38:0a:c9:89:
5a:6e:7b:b4:95:07:f7:f3:14:89:9c:8e:a8:0a:96:64:d0:b8:
99:b8:f4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:02 2025 by rpki-client