Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F75B87BE2E0111EF9C51813AC4F9AE02.roa
File: F75B87BE2E0111EF9C51813AC4F9AE02.roa (raw, json)
Hash identifier: P+Wun4sqD2Gm3Z1Az9FuSJhLvf/YIbcuGIf+WKY09zM=
Subject key identifier: AE:C1:D7:17:62:11:53:3E:60:FC:52:1B:4D:37:91:66:DD:55:15:B1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 92CB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F75B87BE2E0111EF9C51813AC4F9AE02.roa
Signing time: Wed 19 Jun 2024 06:05:46 +0000
ROA not before: Wed 19 Jun 2024 06:05:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139482
IP address blocks: 103.97.104.0/22 maxlen: 24
103.114.64.0/24 maxlen: 24
103.140.72.0/24 maxlen: 24
103.140.73.0/24 maxlen: 24
103.173.14.0/24 maxlen: 24
103.173.15.0/24 maxlen: 24
103.177.42.0/23 maxlen: 24
103.177.181.0/24 maxlen: 24
103.179.120.0/24 maxlen: 24
103.179.224.0/24 maxlen: 24
103.181.208.0/24 maxlen: 24
103.181.209.0/24 maxlen: 24
103.190.97.0/24 maxlen: 24
2405:9540::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37579 (0x92cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 19 06:05:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66727539-e5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:64:c2:96:0c:54:57:b0:4c:c4:db:01:c5:c5:
0e:15:87:09:d2:a5:96:c3:13:32:45:b4:79:33:b7:
74:d6:4d:d9:0f:15:e9:e3:63:6e:dc:80:da:92:b2:
65:d6:d5:81:0a:a6:97:6e:d9:08:ae:90:2b:9b:9f:
cb:fc:b0:c2:d6:99:5a:3f:2e:14:d9:8a:d8:64:de:
c2:63:be:b3:b9:74:33:d6:b1:18:b1:d5:90:f5:06:
6e:d6:c6:30:58:1e:3f:f6:a5:69:a6:2c:73:46:54:
b6:66:f9:6d:23:98:58:3a:53:31:3c:d3:af:ea:86:
78:3f:1e:5c:1d:4b:33:b5:07:cd:c8:d2:ce:91:8a:
77:95:46:31:94:5a:f2:50:db:14:dc:fa:2d:ef:0e:
89:4c:e0:e9:15:89:0c:19:be:62:b3:ec:f6:e7:7c:
98:f7:7f:89:b7:17:35:fb:c6:3d:7e:69:fd:1a:d2:
e3:f1:ed:56:5d:c0:ea:c5:c5:41:0e:ab:c0:f4:a5:
89:1c:b7:22:cf:f9:55:ed:bd:55:44:05:83:65:09:
d4:c1:56:55:92:eb:cf:f2:ca:e1:96:40:67:b1:46:
38:9b:77:19:58:0c:0c:e4:4f:cc:cd:4d:65:99:c3:
24:91:02:1c:43:da:3c:7f:d4:09:e1:b8:38:c6:f6:
64:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C1:D7:17:62:11:53:3E:60:FC:52:1B:4D:37:91:66:DD:55:15:B1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F75B87BE2E0111EF9C51813AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.104.0/22
103.114.64.0/24
103.140.72.0/23
103.173.14.0/23
103.177.42.0/23
103.177.181.0/24
103.179.120.0/24
103.179.224.0/24
103.181.208.0/23
103.190.97.0/24
IPv6:
2405:9540::/32
Signature Algorithm: sha256WithRSAEncryption
a4:bd:09:8d:dc:aa:62:9e:2b:0f:8d:48:07:9b:74:bd:3f:c8:
2a:20:b8:94:87:f6:0c:c3:59:80:d7:a5:39:b3:05:b9:27:9d:
f9:fd:ed:5d:3a:4f:ea:71:d8:d8:2f:e8:6a:e2:37:3a:fa:bd:
34:1b:d8:1e:cf:c9:c0:ad:7c:bc:9d:28:ca:81:38:c6:ab:56:
0a:3b:c1:8a:a4:03:b1:b3:10:ad:89:ef:b2:a2:35:73:5d:10:
a0:77:70:11:c5:61:ba:bb:1d:16:16:34:dc:8e:21:8b:9d:47:
d9:c4:c9:b7:84:cc:ec:26:51:54:4d:f0:d2:1a:1d:87:dc:0c:
cc:f3:3e:f3:a3:8c:12:f4:9e:37:31:07:f5:a3:96:b0:e6:91:
cb:f2:cc:1f:e2:7c:31:63:66:9b:79:68:00:7c:43:a5:5b:ba:
ab:83:12:33:c8:19:44:c4:78:d4:3c:26:4f:cc:f2:00:6f:00:
c5:93:06:b5:0a:6a:69:e0:5e:05:a4:82:b7:13:88:67:0c:84:
f7:12:11:67:1d:06:e5:6d:68:36:18:70:cb:7b:82:3e:52:12:
b4:bc:24:b3:db:9a:0c:e1:96:b0:65:a5:aa:70:0c:81:b6:6a:
41:c4:66:6a:6f:53:0a:7f:8f:a1:75:91:37:1e:e6:cd:50:73:
4f:05:69:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:32 2025 by rpki-client