Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF39E028792011ECB1FC6D51C4F9AE02.roa
File: EF39E028792011ECB1FC6D51C4F9AE02.roa (raw, json)
Hash identifier: tfrkedLdouFl+FLmcMibiCx+K0TOMXwqFCfnr+xYxpc=
Subject key identifier: A9:2E:7A:53:A4:BC:DF:E9:7B:9B:6A:FC:7A:87:FE:11:A0:74:3B:7D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 48FF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF39E028792011ECB1FC6D51C4F9AE02.roa
Signing time: Wed 23 Feb 2022 10:41:30 +0000
ROA not before: Wed 23 Feb 2022 10:41:30 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 17665
IP address blocks: 36.255.88.0/22 maxlen: 24
43.230.40.0/22 maxlen: 24
59.152.120.0/22 maxlen: 24
103.10.224.0/22 maxlen: 24
103.38.128.0/22 maxlen: 24
103.88.56.0/24 maxlen: 24
103.88.57.0/24 maxlen: 24
103.88.58.0/24 maxlen: 24
103.88.59.0/24 maxlen: 24
103.147.1.0/24 maxlen: 24
103.159.212.0/24 maxlen: 24
103.163.148.0/23 maxlen: 24
103.164.46.0/23 maxlen: 24
103.165.28.0/23 maxlen: 24
103.169.156.0/23 maxlen: 24
103.174.159.0/24 maxlen: 24
103.177.174.0/23 maxlen: 24
103.203.36.0/22 maxlen: 24
103.206.8.0/24 maxlen: 24
103.206.9.0/24 maxlen: 24
103.206.10.0/24 maxlen: 24
103.206.11.0/24 maxlen: 24
103.209.68.0/22 maxlen: 22
103.209.68.0/24 maxlen: 24
103.209.69.0/24 maxlen: 24
103.209.70.0/24 maxlen: 24
103.209.71.0/24 maxlen: 24
103.251.52.0/22 maxlen: 24
2404:ba00::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18687 (0x48ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 23 10:41:30 2022 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=62160f5a-4f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b2:0e:ca:1d:6d:a3:b7:3a:b1:ba:ce:09:97:
30:33:d4:21:a9:64:ea:eb:1c:c0:6d:b6:6a:50:17:
91:11:53:5e:82:75:90:5d:c1:80:e6:df:e2:3e:bd:
67:99:1c:b3:db:ba:e8:b5:8a:76:62:92:e0:a4:34:
90:c3:76:da:ba:44:fe:65:31:25:e0:df:2c:42:b5:
2f:fd:e6:15:d5:98:7a:da:0f:be:34:0b:98:68:88:
88:3c:73:9c:01:f7:f4:29:48:6f:19:c4:70:b7:51:
f2:73:ab:8f:d3:f1:f6:67:a8:4b:56:bc:35:e7:b2:
4a:94:da:97:c1:97:dc:fe:5b:6a:11:e1:e7:60:f4:
61:7e:8b:05:b6:e8:25:02:6f:a0:db:a2:7d:9b:47:
92:35:9a:b6:71:2b:56:ba:af:12:ff:a3:b1:46:07:
4c:55:23:67:48:31:76:b8:a2:df:4b:d7:68:05:ad:
fa:8a:e8:a8:ec:6a:70:5e:4e:2d:cc:7c:36:2f:ea:
a7:5a:6a:63:d4:76:96:6b:33:b5:43:52:65:7d:b0:
ac:21:1a:cc:1e:70:25:df:c6:3e:a7:41:5e:d1:e9:
82:f6:92:ff:c9:00:c2:ec:1f:18:74:1e:a2:ca:2c:
06:3d:32:d1:f2:da:56:18:ff:a3:e0:43:54:f2:44:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2E:7A:53:A4:BC:DF:E9:7B:9B:6A:FC:7A:87:FE:11:A0:74:3B:7D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF39E028792011ECB1FC6D51C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.255.88.0/22
43.230.40.0/22
59.152.120.0/22
103.10.224.0/22
103.38.128.0/22
103.88.56.0/22
103.147.1.0/24
103.159.212.0/24
103.163.148.0/23
103.164.46.0/23
103.165.28.0/23
103.169.156.0/23
103.174.159.0/24
103.177.174.0/23
103.203.36.0/22
103.206.8.0/22
103.209.68.0/22
103.251.52.0/22
IPv6:
2404:ba00::/32
Signature Algorithm: sha256WithRSAEncryption
85:b9:d6:9a:6b:6a:65:cb:a7:30:3f:a6:4a:3a:b3:6c:e6:28:
86:d0:96:1d:e3:54:64:b6:af:af:5a:e6:fb:0b:d2:90:a5:19:
e6:37:62:d5:a7:4d:54:f1:5f:31:0b:3d:b7:2d:41:60:fe:b2:
f1:50:ea:a6:21:cb:9b:25:94:a1:5f:68:94:b5:49:88:ee:76:
b1:69:7e:cb:99:d1:8d:09:9f:bd:7f:2d:e7:1e:a7:d5:7c:11:
6b:45:bd:ab:d6:a9:38:8c:22:fb:9a:a7:92:b5:b2:78:33:e8:
54:97:1f:61:f2:f2:ae:c2:46:60:95:17:6a:ff:1a:dc:1d:0a:
e1:05:06:64:7f:39:0d:45:bf:64:3e:19:ff:29:6c:1a:32:04:
da:b7:c1:dc:88:4d:3a:15:c3:48:da:d5:64:c1:38:b1:4d:03:
07:14:2c:81:d9:76:61:16:d3:a6:15:88:25:25:81:01:b7:91:
07:ca:17:0a:f4:9f:02:09:a8:ed:14:81:6b:2a:b6:36:66:9b:
29:20:d1:a8:7b:8d:3c:00:59:98:bd:90:0f:78:a0:96:d9:6c:
21:1e:6f:b5:bf:f8:5c:6c:b0:2b:42:79:62:eb:8e:1e:e3:c8:
79:29:c7:ec:b5:89:ad:83:61:13:64:a8:e0:ae:f3:3b:af:30:
f8:05:71:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:23 2025 by rpki-client