Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EEFA292AB38C11EF96CFED31C4F9AE02.roa
File: EEFA292AB38C11EF96CFED31C4F9AE02.roa (raw, json)
Hash identifier: m68wC4RR4xojt3gZ2roDNU91s0VuNZ589dWvWQttFIg=
Subject key identifier: F6:5F:E7:67:62:E4:74:D0:AD:74:A9:8D:C1:C3:57:16:5E:3B:24:B1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9EA7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EEFA292AB38C11EF96CFED31C4F9AE02.roa
Signing time: Fri 06 Dec 2024 04:45:36 +0000
ROA not before: Fri 06 Dec 2024 04:45:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133225
IP address blocks: 103.129.8.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40615 (0x9ea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 6 04:45:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67528170-03f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ca:b5:7a:da:c9:d8:fc:db:31:8f:5b:e5:98:
d8:b0:92:d2:98:1f:00:07:ef:54:44:c3:25:31:be:
66:61:44:e6:e5:cc:bd:e3:dc:fc:f1:43:29:0e:a7:
be:eb:ee:30:04:e8:9b:c8:60:62:32:f3:a8:29:58:
48:b4:08:72:15:64:52:a7:28:c7:2e:c3:cb:6b:c7:
d1:68:d2:9d:71:50:d6:a0:10:27:28:eb:f1:0b:15:
73:00:0e:a4:14:e5:cb:17:cf:3e:56:58:2a:e0:46:
74:86:53:a1:cb:78:07:c4:62:b1:f8:48:03:70:7a:
0f:92:09:24:9a:45:dd:03:b2:30:42:52:c5:d7:6a:
55:83:5a:3d:83:92:3c:3d:a5:07:26:cb:dd:ab:bb:
f3:1c:5e:bd:bf:c0:15:59:17:db:9a:53:3d:47:cf:
99:58:a0:11:9e:35:68:5c:36:17:12:93:8b:22:86:
73:47:4b:a0:65:a4:6e:56:eb:c9:35:c0:f2:1d:fe:
2a:3f:12:16:9e:0d:82:65:c4:c7:e2:b3:31:27:e8:
8a:b4:b3:1c:e6:7c:f1:fc:c1:50:0d:73:1d:27:bf:
43:20:65:eb:98:8d:29:c4:8f:30:95:47:c9:73:e1:
66:f5:4d:c1:58:c6:f5:a5:b2:10:87:63:80:2f:2c:
a3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:5F:E7:67:62:E4:74:D0:AD:74:A9:8D:C1:C3:57:16:5E:3B:24:B1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EEFA292AB38C11EF96CFED31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.8.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:62:42:49:d3:d9:b5:cc:91:89:ff:f4:7f:13:86:f7:d2:de:
24:d1:93:b8:ca:1c:d8:35:d7:28:89:0d:f8:d4:58:3a:df:22:
25:50:6d:b3:67:33:3e:2a:0f:57:ee:01:89:a6:48:99:1f:49:
db:2a:12:4c:15:b4:8e:6a:22:f4:1f:a4:78:87:41:6a:7d:f9:
2f:c6:81:c5:07:17:d5:8f:d9:97:a8:f1:b7:e1:bb:05:37:9b:
16:5f:d8:f2:ba:32:2f:e2:0b:66:a5:5f:ec:36:77:53:96:e7:
8c:f2:2f:90:ac:84:c7:52:77:6b:5a:9a:35:97:eb:58:1f:86:
af:5f:30:c5:82:e4:9c:7e:8c:b9:e0:53:b1:02:fc:01:a7:ba:
06:e5:ba:7a:a5:b6:75:ef:f2:75:e0:d6:56:c7:9e:e6:f0:79:
91:92:9f:02:a2:e0:33:36:b7:14:53:f0:fe:81:0c:cd:43:5a:
6a:77:6f:d6:96:0e:02:0c:3a:4d:e9:25:ca:6d:0f:9c:1d:0d:
df:9e:ae:99:94:b5:8d:b0:23:7f:8f:43:7f:ac:c4:91:5c:09:
01:75:1a:ff:c8:72:23:f4:c5:8e:48:cd:17:10:82:05:9f:c6:
08:7a:bd:a7:9b:f5:52:a4:9a:a0:25:e7:16:55:36:7a:80:19:
79:a6:87:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:54:10 2025 by rpki-client