Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FE41A1C84E4D11EF85DA9346C4F9AE02.roa
File: FE41A1C84E4D11EF85DA9346C4F9AE02.roa (raw, json)
Hash identifier: ZgaepUdGLuVft+YuCn+LsKtkJtKwcP1pG+9U7espFIs=
Subject key identifier: 07:57:44:65:49:07:CA:A7:26:F9:B9:82:97:AD:58:F2:5A:B6:48:29
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9E15
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FE41A1C84E4D11EF85DA9346C4F9AE02.roa
Signing time: Fri 29 Nov 2024 06:10:56 +0000
ROA not before: Fri 29 Nov 2024 06:10:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140171
IP address blocks: 103.29.63.0/24 maxlen: 24
103.38.182.0/23 maxlen: 24
103.53.30.0/24 maxlen: 24
103.53.31.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
103.72.218.0/24 maxlen: 24
103.72.219.0/24 maxlen: 24
103.77.14.0/24 maxlen: 24
103.80.152.0/24 maxlen: 24
103.80.153.0/24 maxlen: 24
103.80.154.0/23 maxlen: 24
103.134.132.0/24 maxlen: 24
103.144.192.0/24 maxlen: 24
103.156.200.0/23 maxlen: 24
103.159.162.0/24 maxlen: 24
103.160.186.0/24 maxlen: 24
103.160.187.0/24 maxlen: 24
103.161.32.0/24 maxlen: 24
103.161.33.0/24 maxlen: 24
103.161.59.0/24 maxlen: 24
103.163.42.0/23 maxlen: 24
103.163.158.0/24 maxlen: 24
103.168.23.0/24 maxlen: 24
103.169.154.0/24 maxlen: 24
103.169.155.0/24 maxlen: 24
103.169.167.0/24 maxlen: 24
103.175.0.0/23 maxlen: 24
103.176.142.0/24 maxlen: 24
103.187.166.0/23 maxlen: 24
103.190.100.0/23 maxlen: 24
103.191.202.0/23 maxlen: 24
103.209.62.0/24 maxlen: 24
103.209.63.0/24 maxlen: 24
103.209.174.0/23 maxlen: 24
202.61.108.0/24 maxlen: 24
2001:df0:cf80::/48 maxlen: 48
2001:df1:1fc0::/48 maxlen: 48
2001:df1:2040::/48 maxlen: 48
2001:df1:20c0::/48 maxlen: 48
2001:df1:2240::/48 maxlen: 48
2001:df1:22c0::/48 maxlen: 48
2001:df1:2740::/48 maxlen: 48
2001:df1:8740::/48 maxlen: 48
2001:df2:240::/47 maxlen: 49
2001:df4:3ac0::/48 maxlen: 48
2001:df4:5640::/48 maxlen: 48
2401:c5a0::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40469 (0x9e15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 29 06:10:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67495af0-3b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:6c:9c:27:a1:40:b9:22:5e:f9:25:fe:58:
c4:4e:8c:78:0f:a6:42:1c:4a:b1:eb:2d:fc:23:e6:
1b:4e:93:a0:b1:af:93:27:9d:c1:9b:57:39:5c:55:
88:ea:c2:a1:56:e3:e9:29:5d:71:c2:6d:61:4a:ae:
0f:5b:05:61:b8:55:eb:16:a2:5b:1a:90:3b:f2:73:
23:dd:a3:a2:90:e7:cc:6d:57:a9:78:30:22:0b:ba:
60:ad:df:9e:4b:ed:36:1b:b4:47:af:fc:e6:e4:67:
2e:35:02:08:e9:01:e6:33:98:c5:cf:92:e3:8f:de:
f7:06:f0:b5:c0:f0:80:82:5d:9c:3c:12:37:a4:9a:
6e:45:4e:49:52:28:25:08:f3:24:43:2b:14:dc:18:
a8:8a:ae:2d:98:18:2b:34:68:fd:48:e7:e5:73:6b:
60:e4:96:a6:68:04:d0:cd:f9:e9:f7:82:a7:65:f6:
73:fd:14:f4:49:46:da:03:7a:b7:97:8e:7a:06:94:
99:fd:6f:60:d7:97:c4:4f:20:5a:c9:40:9f:43:75:
f4:38:d9:55:6f:7c:82:87:ce:44:00:41:91:39:fc:
d6:a4:1f:11:ce:8a:a5:63:0f:7a:e1:d3:e0:2c:c3:
ec:54:65:c2:3f:0d:11:ac:65:35:60:2d:d9:12:99:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:57:44:65:49:07:CA:A7:26:F9:B9:82:97:AD:58:F2:5A:B6:48:29
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FE41A1C84E4D11EF85DA9346C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.29.63.0/24
103.38.182.0/23
103.53.30.0/23
103.56.84.0/24
103.72.218.0/23
103.77.14.0/24
103.80.152.0/22
103.134.132.0/24
103.144.192.0/24
103.156.200.0/23
103.159.162.0/24
103.160.186.0/23
103.161.32.0/23
103.161.59.0/24
103.163.42.0/23
103.163.158.0/24
103.168.23.0/24
103.169.154.0/23
103.169.167.0/24
103.175.0.0/23
103.176.142.0/24
103.187.166.0/23
103.190.100.0/23
103.191.202.0/23
103.209.62.0/23
103.209.174.0/23
202.61.108.0/24
IPv6:
2001:df0:cf80::/48
2001:df1:1fc0::/48
2001:df1:2040::/48
2001:df1:20c0::/48
2001:df1:2240::/48
2001:df1:22c0::/48
2001:df1:2740::/48
2001:df1:8740::/48
2001:df2:240::/47
2001:df4:3ac0::/48
2001:df4:5640::/48
2401:c5a0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:b7:a7:9c:b3:cb:59:c7:4d:53:22:33:f0:b1:f3:f7:5a:d3:
bd:82:e0:5a:a7:2a:dc:7c:19:b2:d0:52:4c:6b:21:6d:52:bb:
4d:44:f2:73:01:4f:cd:78:82:94:d4:88:2d:f6:bc:b9:a0:0e:
9e:01:be:58:48:c2:95:cf:3c:dc:1d:64:cd:81:ea:6d:4e:53:
a6:a2:bb:da:eb:ae:cf:cc:5c:f3:24:0a:27:2c:d7:73:58:82:
e4:c2:d7:d3:6f:73:11:37:e1:3e:0c:27:34:5f:20:2f:b6:dc:
3c:e2:fa:ce:c6:80:11:cf:b5:f8:b3:6b:f8:4c:4b:b2:5c:58:
6f:59:76:4f:ae:fb:7e:fa:8e:9c:e0:90:55:3a:57:b2:6a:a3:
f0:2b:da:3f:4a:66:1e:5c:5e:3a:75:2f:d4:be:74:22:1a:ab:
6e:27:bd:fb:ce:7d:4a:dc:d2:8a:d7:cd:13:c3:e6:1a:c2:68:
33:96:ca:52:3b:4c:37:30:34:fa:84:18:8b:42:41:d1:37:31:
fc:ef:58:81:8a:ac:88:01:04:91:a9:51:97:60:07:92:38:b0:
05:ca:92:ae:ea:a6:6c:51:52:1d:02:fe:e4:8c:f0:db:24:fe:
77:58:8b:42:30:17:8c:50:dc:d9:59:ed:cc:2a:6b:04:51:e1:
82:96:d8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:11 2025 by rpki-client