Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/A4B120EE1EAC11ECB7B9E330C4F9AE02.roa
File: A4B120EE1EAC11ECB7B9E330C4F9AE02.roa (raw, json)
Hash identifier: kEEI3fPFID9q9QeI1+e9E9KlLxtPEMnsb7gIFiRbjBY=
Subject key identifier: 70:8E:5E:F3:A1:9E:19:6A:DF:E2:CD:7E:9D:39:31:F7:5B:BB:7B:D8
Certificate issuer: /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial: 0453
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/A4B120EE1EAC11ECB7B9E330C4F9AE02.roa
Signing time: Fri 19 Jul 2024 09:07:39 +0000
ROA not before: Fri 19 Jul 2024 09:07:39 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 64022
IP address blocks: 45.126.124.0/24 maxlen: 24
45.126.125.0/24 maxlen: 24
45.126.126.0/24 maxlen: 24
45.126.127.0/24 maxlen: 24
103.6.170.0/24 maxlen: 24
103.6.171.0/24 maxlen: 24
103.102.44.0/24 maxlen: 24
103.102.45.0/24 maxlen: 24
103.102.47.0/24 maxlen: 24
103.195.4.0/24 maxlen: 24
103.195.5.0/24 maxlen: 24
103.195.6.0/24 maxlen: 24
103.195.7.0/24 maxlen: 24
103.252.116.0/24 maxlen: 24
103.252.117.0/24 maxlen: 24
103.252.118.0/24 maxlen: 24
103.252.119.0/24 maxlen: 24
114.29.236.0/24 maxlen: 24
114.29.237.0/24 maxlen: 24
114.29.238.0/24 maxlen: 24
114.29.239.0/24 maxlen: 24
2401:df40:1::/48 maxlen: 48
2402:da80:100::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1107 (0x453)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918E4B7
Validity
Not Before: Jul 19 09:07:39 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=669a2cdb-af8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0e:37:3e:38:db:20:7c:07:de:ec:db:5d:60:
15:f9:fd:5a:33:f1:ec:5e:a5:e4:48:27:b9:f1:6c:
c5:f0:b6:8e:28:58:38:a4:f6:30:ec:77:06:41:46:
35:82:b1:ee:93:e3:af:3d:71:08:a7:85:ad:68:71:
b1:3f:f2:f2:e9:48:e0:2d:68:08:a6:c2:57:8c:b7:
a4:58:b9:26:88:1f:fc:27:84:7d:fd:da:91:b9:74:
69:5d:ec:be:aa:fd:d4:f2:b9:ec:10:fc:ad:64:a1:
c8:d1:ec:a2:61:65:d6:e2:ae:7c:0b:54:91:88:f3:
db:86:28:f3:08:98:38:75:be:cf:52:ac:0f:da:bc:
ed:b0:05:85:6c:70:1e:5d:cb:dc:91:83:ad:cb:cf:
b2:a1:85:32:b6:78:86:9f:95:6c:97:a9:10:87:99:
21:5d:36:8c:45:8a:69:d9:2b:18:64:92:3e:e3:79:
12:13:f0:fc:21:45:8e:56:70:3e:9c:b8:e2:bc:85:
13:9c:58:81:5b:9d:1f:76:a3:00:7a:5a:10:73:6e:
64:34:ad:b0:69:7c:c8:1c:23:39:40:1e:25:5f:56:
dd:cb:b4:8d:ad:e8:c2:51:87:1d:53:2e:c1:cc:78:
6c:f8:14:8f:8f:a3:c4:c2:f0:96:d1:81:96:f2:7c:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8E:5E:F3:A1:9E:19:6A:DF:E2:CD:7E:9D:39:31:F7:5B:BB:7B:D8
X509v3 Authority Key Identifier:
keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/A4B120EE1EAC11ECB7B9E330C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.124.0/22
103.6.170.0/23
103.102.44.0/23
103.102.47.0/24
103.195.4.0/22
103.252.116.0/22
114.29.236.0/22
IPv6:
2401:df40:1::/48
2402:da80:100::/48
Signature Algorithm: sha256WithRSAEncryption
39:fe:e1:ef:2a:ad:6f:96:9b:c5:a0:d6:bd:13:ea:75:4c:8c:
08:68:3e:21:a9:a9:be:a7:60:dc:ad:e6:16:47:bf:b1:6c:33:
d7:dc:43:ba:76:4d:18:5f:8e:d1:51:43:33:ad:34:d1:2a:cc:
e9:f7:c9:40:1d:d0:c8:4a:21:fc:67:69:d0:af:e7:de:71:2e:
25:a6:89:eb:1d:86:85:1e:52:91:b6:12:e2:33:3e:bd:e9:0a:
ee:49:dc:19:34:83:48:c2:0f:73:bb:34:ee:f6:cb:05:1a:fc:
dd:6b:53:08:87:18:45:2d:56:84:30:8c:a0:60:54:e8:29:b1:
f3:d7:2b:34:54:99:1d:a7:71:3f:91:5f:f7:6e:22:9a:27:c7:
5a:0a:2b:57:01:29:77:3e:8e:53:40:58:68:ef:1f:d9:5b:f3:
88:e2:ea:82:46:25:1e:24:0e:0f:a4:97:8d:5e:71:3d:b4:d8:
a1:ea:a5:68:a7:69:22:c9:c6:7a:86:b3:e7:de:7e:6b:cc:a9:
7d:fd:c5:60:5f:58:ec:67:18:0f:e1:8b:38:b8:40:b4:ed:e1:
ee:3c:c1:1f:48:31:b6:95:79:b6:8b:2e:05:be:87:82:2f:bf:
d1:66:63:91:bf:ab:6c:00:23:c2:c6:a6:f4:98:14:8d:36:5e:
ca:44:a7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:17 2025 by rpki-client