Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EEFB72B47D1911ECAD6EA426C4F9AE02.roa
File: EEFB72B47D1911ECAD6EA426C4F9AE02.roa (raw, json)
Hash identifier: uqKfZcKEh2gGD3bMQX8BI9O0JKTAE8HVTQrjtBkLRV0=
Subject key identifier: A9:73:89:7F:E2:23:93:F4:83:F5:F4:D5:FC:B9:1E:BE:DB:45:62:22
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8592
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EEFB72B47D1911ECAD6EA426C4F9AE02.roa
Signing time: Mon 01 Apr 2024 03:56:22 +0000
ROA not before: Mon 01 Apr 2024 03:56:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55470
IP address blocks: 49.50.123.0/24 maxlen: 24
103.36.104.0/24 maxlen: 24
103.36.105.0/24 maxlen: 24
103.36.106.0/24 maxlen: 24
103.36.107.0/24 maxlen: 24
103.158.65.0/24 maxlen: 24
103.170.3.0/24 maxlen: 24
2001:df3:8ac0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34194 (0x8592)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Apr 1 03:56:22 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=660a3065-f8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:fa:c4:5d:cb:46:f4:60:0d:ca:ba:72:e0:
bb:6f:0c:8d:ee:b8:25:cc:0a:d1:75:f0:1c:6b:c0:
09:eb:be:dd:71:98:24:68:22:70:84:c3:cc:7a:a3:
ce:e8:32:e0:05:7e:2a:c9:56:7b:97:ea:79:ac:82:
65:ab:f0:bb:76:4b:9c:e2:6e:6e:44:67:62:8d:80:
e0:cd:14:a7:00:eb:d6:02:75:b3:e6:84:71:6d:d0:
0b:fe:84:78:de:cb:c4:97:2c:a7:59:1a:77:43:4c:
8d:5f:0b:55:df:e4:bc:5c:1e:69:53:2d:56:19:7c:
6c:2a:29:c1:3d:9e:11:0f:70:67:98:4e:7a:33:43:
54:57:8d:05:1a:6e:03:a9:6d:da:6a:86:ca:7c:eb:
88:4f:ac:9c:28:c4:ae:81:93:57:ed:26:d7:f1:5e:
48:60:65:d5:b3:37:f0:05:40:ec:10:d4:92:91:69:
50:3e:45:78:85:45:af:e1:d5:a5:8a:47:29:75:9b:
ba:94:f4:a6:f0:2d:d5:12:b2:36:ac:fb:3d:88:48:
2a:53:47:b1:da:bb:9e:33:5a:11:c5:50:48:c9:6b:
cc:6c:f9:c1:76:47:52:e3:0b:97:6f:2e:2a:56:78:
26:10:2d:75:63:8b:3d:1d:e8:ae:e1:16:6c:13:c6:
54:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:73:89:7F:E2:23:93:F4:83:F5:F4:D5:FC:B9:1E:BE:DB:45:62:22
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EEFB72B47D1911ECAD6EA426C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.50.123.0/24
103.36.104.0/22
103.158.65.0/24
103.170.3.0/24
IPv6:
2001:df3:8ac0::/48
Signature Algorithm: sha256WithRSAEncryption
69:3e:7f:31:d1:18:89:b4:c2:ce:8c:39:f9:1e:f4:90:e9:76:
08:66:07:e0:6d:46:07:74:b1:1e:97:79:82:5f:69:9f:e7:2a:
c5:a9:6d:a8:64:9c:12:3f:18:2b:81:b7:d3:c2:d5:76:9d:ba:
70:28:0e:86:00:e6:d2:62:eb:dd:23:c9:9f:d8:0b:70:ee:d3:
5b:00:45:d4:0a:63:b3:2b:7b:8c:f6:82:69:37:dc:65:87:f5:
da:bd:15:dd:28:f0:6e:34:3e:b7:b0:ff:b4:8e:82:65:22:63:
6b:4b:94:0d:67:33:6f:fd:58:72:fb:ea:d0:7d:c2:d6:0e:fe:
84:e7:cf:a3:7b:e9:03:50:85:f4:28:7a:70:0f:06:20:e7:1b:
11:ca:58:0c:11:bf:c3:55:0f:5d:e5:62:0a:62:22:21:38:8c:
98:e0:53:3a:2d:d1:29:3a:74:67:9a:0c:53:7a:1f:c9:d2:43:
1a:28:7b:8d:72:da:f4:63:9c:b6:36:2c:25:53:88:2b:10:8f:
d7:cd:11:e1:33:97:7a:45:56:ef:e7:2f:86:69:28:f4:3d:cb:
87:35:74:d3:b4:a7:48:e2:77:78:93:70:e4:91:42:e8:61:dd:
e3:c2:00:94:e0:82:aa:6b:82:48:86:85:28:d6:89:59:e2:9b:
bb:9f:4f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:08 2025 by rpki-client