Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F34B0456429C11EF9D7BAC20C4F9AE02.roa
File: F34B0456429C11EF9D7BAC20C4F9AE02.roa (raw, json)
Hash identifier: oc4GGrX//w/kQY5Bpk0OIwys3r5vxIsxTyd8QtTt+gs=
Subject key identifier: 3C:42:06:0E:4D:17:50:E7:B6:B9:AB:C5:96:27:0D:4A:1A:6C:CE:76
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 997D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F34B0456429C11EF9D7BAC20C4F9AE02.roa
Signing time: Thu 19 Sep 2024 08:56:35 +0000
ROA not before: Thu 19 Sep 2024 08:56:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133676
IP address blocks: 36.50.82.0/24 maxlen: 24
43.225.74.0/24 maxlen: 24
43.230.196.0/22 maxlen: 24
43.240.4.0/24 maxlen: 24
43.240.6.0/24 maxlen: 24
43.240.7.0/24 maxlen: 24
43.250.252.0/22 maxlen: 24
45.64.8.0/24 maxlen: 24
45.64.9.0/24 maxlen: 24
45.64.10.0/24 maxlen: 24
45.64.11.0/24 maxlen: 24
45.248.24.0/24 maxlen: 24
45.248.26.0/23 maxlen: 24
103.42.88.0/22 maxlen: 24
103.47.12.0/23 maxlen: 24
103.47.15.0/24 maxlen: 24
103.47.72.0/23 maxlen: 24
103.47.74.0/23 maxlen: 24
103.47.172.0/23 maxlen: 24
103.47.174.0/23 maxlen: 24
103.49.232.0/23 maxlen: 24
103.54.24.0/23 maxlen: 24
103.54.26.0/24 maxlen: 24
103.62.147.0/24 maxlen: 24
103.80.34.0/23 maxlen: 24
103.82.72.0/22 maxlen: 24
103.85.118.0/23 maxlen: 24
103.87.204.0/22 maxlen: 24
103.93.172.0/22 maxlen: 24
103.93.212.0/23 maxlen: 24
103.98.53.0/24 maxlen: 24
103.101.116.0/24 maxlen: 24
103.101.117.0/24 maxlen: 24
103.101.118.0/23 maxlen: 24
103.103.163.0/24 maxlen: 24
103.109.180.0/23 maxlen: 24
103.109.182.0/23 maxlen: 24
103.114.188.0/23 maxlen: 24
103.118.180.0/22 maxlen: 24
103.141.166.0/23 maxlen: 24
103.173.218.0/24 maxlen: 24
103.177.202.0/23 maxlen: 24
103.178.58.0/23 maxlen: 24
103.181.90.0/23 maxlen: 24
103.182.44.0/23 maxlen: 24
103.186.44.0/23 maxlen: 24
103.189.146.0/24 maxlen: 24
103.189.147.0/24 maxlen: 24
103.191.182.0/23 maxlen: 24
103.191.234.0/23 maxlen: 24
103.204.168.0/22 maxlen: 24
103.211.56.0/23 maxlen: 24
103.211.58.0/24 maxlen: 24
103.211.190.0/23 maxlen: 24
103.212.136.0/23 maxlen: 24
103.212.138.0/23 maxlen: 24
103.213.6.0/23 maxlen: 24
103.225.205.0/24 maxlen: 24
103.225.206.0/23 maxlen: 24
103.226.200.0/22 maxlen: 24
103.248.120.0/24 maxlen: 24
103.248.121.0/24 maxlen: 24
139.5.16.0/23 maxlen: 24
139.5.18.0/23 maxlen: 24
2405:5540::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39293 (0x997d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Sep 19 08:56:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ebe742-bb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:60:45:ac:47:a8:39:e0:90:8f:bb:36:cd:
49:92:e8:fb:11:ed:72:38:d8:6d:b7:a3:39:8a:f7:
3e:5b:b0:de:7c:f5:2d:b5:e8:7d:59:d5:94:a5:ed:
98:16:74:62:e6:47:98:a8:86:cd:31:ca:c8:36:90:
8c:ae:b8:ed:32:ed:85:0b:d9:9d:8b:98:7d:5c:f0:
2a:e1:d8:9f:52:79:43:ac:b6:79:29:fc:0e:ec:58:
af:ef:cc:31:f7:11:f6:21:d5:dc:16:4f:99:6e:5d:
7f:8f:43:d9:4d:fe:dd:4a:94:1f:0a:70:f7:7d:bc:
46:e6:ac:2a:99:f6:cb:01:9a:e0:31:18:58:07:aa:
c9:d3:1d:03:13:15:30:13:11:b6:56:4f:65:89:71:
99:2c:a3:66:47:52:02:fd:75:33:5e:df:55:3e:e2:
bc:ba:f2:15:23:d3:da:13:61:28:91:b1:84:ff:b8:
92:98:72:bc:49:5f:54:6c:c2:e7:95:17:94:97:e4:
ea:93:23:3f:d7:75:e8:e0:c4:10:b7:84:26:4a:3b:
f5:c1:9d:59:ae:80:ec:3e:3c:5f:97:95:c3:ba:6c:
c4:15:4d:04:df:50:d7:7a:eb:cf:e5:9e:ee:86:91:
19:78:93:ee:dc:ab:9b:34:3a:62:0e:d2:f9:9b:c1:
12:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:42:06:0E:4D:17:50:E7:B6:B9:AB:C5:96:27:0D:4A:1A:6C:CE:76
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F34B0456429C11EF9D7BAC20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.50.82.0/24
43.225.74.0/24
43.230.196.0/22
43.240.4.0/24
43.240.6.0/23
43.250.252.0/22
45.64.8.0/22
45.248.24.0/24
45.248.26.0/23
103.42.88.0/22
103.47.12.0/23
103.47.15.0/24
103.47.72.0/22
103.47.172.0/22
103.49.232.0/23
103.54.24.0-103.54.26.255
103.62.147.0/24
103.80.34.0/23
103.82.72.0/22
103.85.118.0/23
103.87.204.0/22
103.93.172.0/22
103.93.212.0/23
103.98.53.0/24
103.101.116.0/22
103.103.163.0/24
103.109.180.0/22
103.114.188.0/23
103.118.180.0/22
103.141.166.0/23
103.173.218.0/24
103.177.202.0/23
103.178.58.0/23
103.181.90.0/23
103.182.44.0/23
103.186.44.0/23
103.189.146.0/23
103.191.182.0/23
103.191.234.0/23
103.204.168.0/22
103.211.56.0-103.211.58.255
103.211.190.0/23
103.212.136.0/22
103.213.6.0/23
103.225.205.0-103.225.207.255
103.226.200.0/22
103.248.120.0/23
139.5.16.0/22
IPv6:
2405:5540::/32
Signature Algorithm: sha256WithRSAEncryption
28:ba:aa:02:30:82:44:bb:61:04:61:8f:bb:44:42:40:36:ea:
0f:a1:1e:5d:96:d0:46:c0:3c:36:b2:c4:0f:26:ba:5e:9f:da:
3a:2b:3d:3b:22:07:6c:e7:b9:89:20:f3:9f:c9:5d:d1:68:41:
52:a7:08:59:8d:78:19:b1:b4:9c:5f:50:01:0b:a4:d5:70:fe:
2a:87:e7:46:44:ad:06:b4:45:9f:c8:7c:56:9d:7a:7e:cc:ff:
02:84:f3:e6:3d:e3:cc:db:9a:3a:dc:de:25:ee:a8:0f:d7:90:
a9:61:51:8b:a3:a2:32:35:2c:9e:71:20:6e:f5:d6:12:b1:24:
d4:23:f7:43:f1:b9:9d:e5:71:c4:e8:10:5e:2a:ca:80:9a:b4:
48:0e:f4:e1:d8:81:c4:3c:95:31:82:ca:73:19:f6:09:34:f7:
b5:37:c7:a7:84:99:a5:82:a7:70:07:f7:a0:30:31:a6:6f:99:
f6:f1:48:f8:5f:8d:10:15:10:a2:41:e4:98:a6:f7:e9:34:e7:
28:39:55:09:fb:0f:4b:a6:d7:3e:ae:55:1c:a8:87:5d:e1:87:
85:60:7a:55:20:4f:4c:cd:60:6d:41:f4:da:40:b8:26:fc:4b:
54:e0:05:d7:83:6c:a3:2d:b3:f2:da:dd:08:f2:6a:73:a2:29:
80:f3:73:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:16 2025 by rpki-client