Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/ADE3F5B635D611EB8466D634C4F9AE02.roa
File: ADE3F5B635D611EB8466D634C4F9AE02.roa (raw, json)
Hash identifier: 8U9EPbtMKIJ3PvMvZUbdIHhWDysnxRWcaHtBd734a+U=
Subject key identifier: 1C:07:A2:83:F6:13:2E:8D:11:3F:8C:B8:BE:01:FE:3F:3B:D5:3E:87
Certificate issuer: /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97
Certificate serial: 06B4
Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/ADE3F5B635D611EB8466D634C4F9AE02.roa
Signing time: Sat 28 Sep 2024 22:11:49 +0000
ROA not before: Sat 28 Sep 2024 22:11:49 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 53587
IP address blocks: 43.250.184.0/22 maxlen: 22
43.250.184.0/24 maxlen: 24
43.250.185.0/24 maxlen: 24
43.250.186.0/24 maxlen: 24
43.250.187.0/24 maxlen: 24
103.240.140.0/22 maxlen: 22
103.240.140.0/23 maxlen: 23
103.240.140.0/24 maxlen: 24
103.240.141.0/24 maxlen: 24
103.240.142.0/23 maxlen: 23
103.240.142.0/24 maxlen: 24
103.240.143.0/24 maxlen: 24
2401:a080::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1716 (0x6b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC8F3
Validity
Not Before: Sep 28 22:11:49 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f87f25-2f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:7e:58:3c:b1:30:ab:e0:14:7b:84:43:95:
94:d5:4e:dc:ec:cc:f5:79:7c:5b:78:cd:b2:a3:46:
32:73:a5:69:cd:01:23:3b:d0:20:13:a6:1c:90:43:
88:a0:7f:04:67:88:60:9b:f6:32:1e:ea:25:72:48:
bf:08:29:23:a0:7a:95:a4:39:d4:7a:2c:e1:9e:d8:
e4:6b:0a:1c:3c:de:d4:d8:94:cc:95:c5:13:bc:58:
65:a2:39:57:22:0b:8d:af:1d:18:88:4a:70:2a:82:
0c:31:c7:4f:c6:69:1a:10:95:8d:6e:dd:fa:9f:80:
62:3a:39:c1:ed:99:33:16:50:a3:b9:b7:31:1e:c9:
8d:46:e5:ab:00:26:74:d9:12:14:8f:65:4b:94:30:
10:30:e0:f5:e3:a8:27:65:45:cd:74:73:e4:fa:5d:
ba:a2:f4:26:27:52:39:82:9e:3b:e0:8f:57:99:3b:
6c:50:66:e8:0a:d4:9b:9e:df:ea:75:91:83:5b:ea:
57:e2:22:d1:61:24:16:17:61:d5:4d:22:2f:e5:97:
ff:a5:0a:be:85:45:02:8c:76:0b:25:b5:d8:a0:66:
22:9e:db:88:b7:6f:8b:bd:9a:c2:b9:79:85:54:82:
35:7d:92:28:14:84:86:fb:ca:9a:07:96:55:51:e2:
d1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:07:A2:83:F6:13:2E:8D:11:3F:8C:B8:BE:01:FE:3F:3B:D5:3E:87
X509v3 Authority Key Identifier:
keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/ADE3F5B635D611EB8466D634C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.250.184.0/22
103.240.140.0/22
IPv6:
2401:a080::/32
Signature Algorithm: sha256WithRSAEncryption
6d:18:d0:93:46:31:ac:01:58:77:57:24:4f:4e:a6:d0:bf:23:
0a:b3:c1:24:39:5d:a1:df:1e:87:14:73:b1:b6:99:e1:89:0f:
9b:ae:5d:21:42:a6:cb:d3:3d:93:dc:a4:51:55:9f:78:93:32:
26:fe:56:ca:99:62:92:9d:e3:05:c0:0a:d0:7f:fd:6e:3f:fd:
73:c4:76:1a:29:54:bc:d4:b4:76:c2:d7:0c:62:b9:61:f3:c0:
8b:cb:6b:7a:99:24:22:bf:28:b9:1e:2f:7a:c6:90:e7:ea:b4:
05:ae:95:e6:1b:b7:57:10:d9:40:73:4b:b4:a0:82:20:6d:16:
dd:01:ac:f9:a4:de:cc:e7:69:87:2c:3a:f1:1e:0d:c1:59:0f:
f3:d1:2c:6b:2d:62:83:97:1c:84:5d:cd:80:93:5f:fa:4c:2d:
99:6d:fb:16:ee:1b:b4:f0:62:1c:16:fb:68:b6:d2:ad:45:dc:
07:29:32:1c:da:d5:8d:ce:3e:3d:45:dc:23:ec:a1:1c:45:f6:
70:41:c5:16:83:27:71:9b:ed:a6:c5:d3:67:a8:1d:de:73:7b:
84:0e:55:76:15:aa:18:ac:e2:7c:0a:97:bc:2d:b5:8e:2e:09:
2f:5d:cb:5a:b8:c2:55:92:fb:8c:ec:79:3a:56:65:8e:38:2b:
5b:c5:54:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:06 2025 by rpki-client