Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/E7DE70DC3D9A11EA9606E13AC4F9AE02.roa
File: E7DE70DC3D9A11EA9606E13AC4F9AE02.roa (raw, json)
Hash identifier: y9GBe4owTCcifTdvnWP27LlhLf4BozHIoezNAKQ7z08=
Subject key identifier: 66:46:A1:21:22:7F:A1:43:3F:AB:2B:0E:60:E8:D6:10:D7:1D:66:23
Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial: 0B6A
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/E7DE70DC3D9A11EA9606E13AC4F9AE02.roa
Signing time: Mon 17 Mar 2025 04:25:01 +0000
ROA not before: Mon 17 Mar 2025 04:25:01 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 15412
IP address blocks: 43.231.188.0/24 maxlen: 24
43.231.190.0/24 maxlen: 24
43.251.184.0/24 maxlen: 24
43.251.186.0/24 maxlen: 24
45.115.32.0/24 maxlen: 24
45.115.34.0/24 maxlen: 24
45.124.60.0/22 maxlen: 22
103.7.116.0/22 maxlen: 22
103.7.208.0/22 maxlen: 22
103.8.84.0/24 maxlen: 24
103.8.86.0/24 maxlen: 24
103.12.52.0/24 maxlen: 24
103.12.54.0/24 maxlen: 24
103.13.16.0/24 maxlen: 24
103.13.18.0/24 maxlen: 24
103.21.104.0/24 maxlen: 24
103.21.106.0/24 maxlen: 24
103.24.160.0/22 maxlen: 22
103.225.192.0/22 maxlen: 22
103.244.208.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2922 (0xb6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4402
Validity
Not Before: Mar 17 04:25:01 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67d7a41d-21f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:62:2f:8d:65:22:9b:b2:f4:b1:d9:5f:71:
6b:0e:41:50:96:83:d4:8b:b5:a2:75:8d:fe:20:70:
5a:1d:fa:49:cb:e4:f0:97:36:0f:b8:eb:8a:08:1c:
81:0f:9e:01:1e:6c:72:d1:a8:55:be:ce:d7:ce:74:
09:8a:d2:f4:96:54:cf:17:50:86:2d:09:a8:10:f4:
d7:b7:e4:74:3c:28:da:80:0f:b7:24:ab:6f:9a:10:
7d:41:10:65:6e:0b:44:88:50:72:8e:33:99:cc:81:
7c:ad:21:c1:37:fa:7e:37:c2:e1:c5:26:1d:5e:36:
fd:4f:95:ac:cf:63:9d:68:7c:19:a0:aa:01:68:8c:
d3:78:95:42:82:b4:0d:40:a9:e0:e9:d2:dc:08:e1:
6d:01:82:5e:99:03:96:be:c0:e4:5b:86:b7:d6:19:
40:b1:37:ca:fb:0e:0a:75:e1:5d:2b:60:83:17:3a:
43:c7:00:c0:24:e2:d7:e1:10:a9:5d:e0:be:7a:24:
b6:c9:39:c9:d1:91:72:ab:4a:2d:f6:85:d7:f2:77:
d4:c4:92:5c:ae:c7:de:0d:57:f8:0e:e0:10:09:11:
26:c0:7e:82:1f:e5:14:55:4a:f4:cc:a6:a2:ad:46:
1b:be:58:99:8c:c8:e3:4e:94:1c:6c:d9:1a:af:d3:
93:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:46:A1:21:22:7F:A1:43:3F:AB:2B:0E:60:E8:D6:10:D7:1D:66:23
X509v3 Authority Key Identifier:
keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/E7DE70DC3D9A11EA9606E13AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.231.188.0/24
43.231.190.0/24
43.251.184.0/24
43.251.186.0/24
45.115.32.0/24
45.115.34.0/24
45.124.60.0/22
103.7.116.0/22
103.7.208.0/22
103.8.84.0/24
103.8.86.0/24
103.12.52.0/24
103.12.54.0/24
103.13.16.0/24
103.13.18.0/24
103.21.104.0/24
103.21.106.0/24
103.24.160.0/22
103.225.192.0/22
103.244.208.0/22
Signature Algorithm: sha256WithRSAEncryption
92:bc:f8:71:7f:16:a6:80:0e:54:b7:41:b4:97:a1:5b:17:de:
8e:fb:14:78:3d:15:7b:33:eb:c0:a3:85:b0:48:16:82:5f:ba:
50:56:ac:5d:44:1c:b8:a1:54:f1:3d:8b:57:f2:b1:cb:28:27:
fd:2a:33:2e:b0:26:8f:9a:e2:ea:40:d7:72:1c:42:aa:2a:0c:
e8:7b:bb:68:db:c2:68:4d:92:c3:b3:48:6a:a7:a7:8d:28:57:
30:3b:2e:85:c6:4b:bb:b5:a4:ff:af:87:dd:a9:19:27:81:01:
6d:e2:f2:6e:3e:b7:74:60:dd:5d:60:a2:3e:82:19:45:fb:e1:
5b:4d:41:61:67:2b:66:b5:ba:80:4f:bd:29:0c:dc:c2:89:60:
1c:ee:1f:1d:64:99:0a:e9:cf:a6:2e:c9:51:57:50:17:d9:36:
5c:1c:4f:23:f5:27:15:e4:cf:e9:5c:a6:7a:96:8e:d7:fd:07:
47:d6:8e:c6:f8:41:72:27:fe:9c:7f:4f:e3:bf:87:be:6d:b8:
57:7e:61:e6:6b:82:e3:7d:78:e0:1f:21:18:2f:4c:b5:ca:38:
da:8a:ff:ee:50:05:40:77:4c:52:20:24:79:98:15:f3:03:1f:
ea:aa:12:46:ba:b2:9d:e8:ec:3c:71:e1:e8:02:f4:ee:bf:ac:
1d:c2:f7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:36 2025 by rpki-client