Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FA76DB70509711EF96CE0285C4F9AE02.roa
File: FA76DB70509711EF96CE0285C4F9AE02.roa (raw, json)
Hash identifier: e9k59gZf3OhJ/zAFGQJBniWPz1/QZuJDtmRmlVsvcYo=
Subject key identifier: E5:4F:02:2D:07:66:8D:77:18:7F:03:9F:EB:05:7E:7D:90:12:E8:86
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 95E4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FA76DB70509711EF96CE0285C4F9AE02.roa
Signing time: Fri 02 Aug 2024 06:25:14 +0000
ROA not before: Fri 02 Aug 2024 06:25:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204765
IP address blocks: 103.79.48.0/23 maxlen: 24
103.174.92.0/24 maxlen: 24
103.174.93.0/24 maxlen: 24
103.187.84.0/24 maxlen: 24
103.187.85.0/24 maxlen: 24
103.187.102.0/24 maxlen: 24
103.187.103.0/24 maxlen: 24
103.187.130.0/24 maxlen: 24
103.187.131.0/24 maxlen: 24
103.187.158.0/24 maxlen: 24
103.187.159.0/24 maxlen: 24
103.187.170.0/24 maxlen: 24
103.187.171.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38372 (0x95e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 2 06:25:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66ac7bca-c5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2c:d4:58:b8:b1:9b:dc:15:94:a8:7f:84:0b:
a4:1b:2e:13:a3:d4:6b:d3:5b:83:0a:2c:44:50:f3:
a8:10:86:8f:07:f2:a3:d5:d7:16:b9:ea:d9:27:03:
d2:4e:d5:6d:54:d3:0e:53:49:f7:60:6a:6a:1d:f2:
d3:e3:ad:f0:d9:54:b5:c2:49:f3:a5:48:f5:23:82:
bd:2f:93:7e:47:de:9a:90:34:28:3a:88:42:7f:ee:
59:78:c6:7c:2c:3a:67:c9:c2:08:54:13:32:97:c9:
79:b2:e1:59:7c:c6:97:35:a0:83:20:af:48:9c:0a:
fc:e7:64:9b:61:27:59:dc:a3:0c:fb:e6:98:7b:e3:
6a:9a:ea:7c:ca:e6:ea:d6:b6:e0:82:c3:6e:dd:ae:
d6:32:25:8e:43:43:eb:f6:0e:22:25:5c:6f:ed:ea:
77:ad:ab:63:8e:8d:90:5a:93:8b:07:5f:ef:59:38:
b0:9c:4d:0d:29:9c:bb:f9:83:07:07:85:7b:eb:57:
a0:98:36:1e:0c:76:01:f9:10:61:0c:2a:bc:94:35:
23:f7:09:ed:ac:cd:b5:f8:55:60:c3:a4:8b:bb:cf:
52:58:51:94:af:a1:c0:51:ab:e5:8d:10:44:3d:77:
0e:3c:3f:86:d2:c6:5d:4f:84:63:53:a8:ed:5b:9c:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4F:02:2D:07:66:8D:77:18:7F:03:9F:EB:05:7E:7D:90:12:E8:86
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FA76DB70509711EF96CE0285C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.48.0/23
103.174.92.0/23
103.187.84.0/23
103.187.102.0/23
103.187.130.0/23
103.187.158.0/23
103.187.170.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:3e:9d:61:12:fc:3a:81:86:ff:3b:99:c2:62:a2:91:2f:3e:
ea:a7:a8:b8:66:70:be:da:27:df:6b:70:46:fe:6b:2e:95:53:
21:d5:58:4e:a6:1a:21:18:21:31:4c:11:13:0e:0f:30:02:b6:
2e:ec:0d:ed:cf:1e:c3:6e:82:37:4b:41:a6:3f:73:05:aa:c2:
1f:18:ee:23:e4:f4:6a:e2:2d:8c:9b:3c:64:01:3d:c3:0a:3d:
a1:d4:c5:ec:fc:14:0f:c7:b5:90:f5:b6:c9:79:27:92:d1:74:
5e:25:fd:7c:e7:a9:2f:9c:fd:11:9f:6c:ba:56:3b:51:69:03:
b8:bc:66:3e:4b:be:3d:11:0c:a0:95:cc:50:da:85:d8:59:b2:
99:84:0c:56:23:e3:55:0f:2e:24:32:74:39:1c:a4:22:54:88:
3e:16:5a:20:37:d5:86:54:24:f5:81:c9:94:86:8d:ec:16:ff:
ba:31:c2:e4:b8:cb:33:0a:97:04:ac:34:4b:0c:65:9b:85:75:
10:cf:60:8d:98:6b:97:04:f1:3f:84:ae:a6:79:71:5a:0d:81:
ed:8b:24:d4:d0:ec:75:21:85:18:c1:50:37:bf:ba:99:96:6e:
75:a4:07:ca:6e:94:a7:ad:97:f2:85:a2:de:1e:b1:cc:4e:89:
3a:fb:9f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:57 2025 by rpki-client