Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/958207DA213B11EEAFE7C354C4F9AE02.roa
File: 958207DA213B11EEAFE7C354C4F9AE02.roa (raw, json)
Hash identifier: Av/tTCMj72b+PDWqiFfIglhHVxRVqrYfBPY+NZQy97E=
Subject key identifier: C2:58:D0:E8:D8:BB:7C:98:5E:B7:2F:74:86:41:B3:E5:8C:6D:E4:65
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7574
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/958207DA213B11EEAFE7C354C4F9AE02.roa
Signing time: Thu 13 Jul 2023 05:10:29 +0000
ROA not before: Thu 13 Jul 2023 05:10:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150102
IP address blocks: 103.194.118.0/24 maxlen: 24
103.194.119.0/24 maxlen: 24
103.212.132.0/24 maxlen: 24
103.212.133.0/24 maxlen: 24
103.212.134.0/24 maxlen: 24
103.212.135.0/24 maxlen: 24
103.217.81.0/24 maxlen: 24
103.225.180.0/24 maxlen: 24
103.225.181.0/24 maxlen: 24
103.252.42.0/24 maxlen: 24
103.252.43.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30068 (0x7574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 13 05:10:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64af8745-1fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:5f:ca:e1:0e:60:1f:a8:c0:45:a9:4b:82:
95:71:f4:69:d0:a4:ae:63:81:f7:0a:d5:fb:c6:c8:
41:bc:4c:bb:6e:56:3d:65:64:cb:2a:0a:d9:07:49:
bd:eb:48:b0:ba:b8:b4:b6:ca:90:b6:93:b0:41:9f:
67:a7:36:1d:a6:3a:ba:fc:d6:8e:82:13:64:ce:fb:
3c:11:4f:67:b7:c6:24:5b:cf:61:6f:96:07:34:40:
62:91:cc:8e:ea:66:ad:e0:45:2c:93:f8:73:3c:95:
81:b6:f0:27:13:81:d7:d4:57:2b:79:63:a3:2c:f0:
c7:b9:f5:9f:ff:0a:49:e9:11:2e:f2:5e:f7:2c:0c:
fa:72:a5:fb:fd:87:0d:c2:f3:68:d5:a3:95:24:d2:
11:68:5b:02:ae:fb:07:38:0a:f7:6e:14:76:ab:0f:
13:54:6f:40:ab:2d:1c:c7:8b:ec:16:e8:50:2a:dd:
d1:41:2b:1f:3f:e4:d6:88:de:4a:b2:6e:a9:6e:e8:
4b:e8:1a:27:1f:84:00:bb:4d:02:17:1e:71:41:da:
70:d1:c1:65:1e:38:b2:c1:81:2f:71:27:19:df:ef:
78:68:4f:fa:cc:47:f4:de:21:d9:ea:31:07:87:61:
b5:45:42:52:bf:59:13:d9:1a:c5:2d:f9:bc:e9:80:
d6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:58:D0:E8:D8:BB:7C:98:5E:B7:2F:74:86:41:B3:E5:8C:6D:E4:65
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/958207DA213B11EEAFE7C354C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.194.118.0/23
103.212.132.0/22
103.217.81.0/24
103.225.180.0/23
103.252.42.0/23
Signature Algorithm: sha256WithRSAEncryption
00:15:ff:94:2d:ae:d8:cd:af:c7:02:e6:ed:b0:7b:9a:af:4c:
c1:37:a3:8f:a8:c1:43:a3:e4:b2:3c:c7:fb:fc:5e:10:9c:e0:
a6:ab:0a:05:78:79:53:f2:df:87:71:6d:2c:b5:b3:66:f1:07:
ad:4d:09:ab:19:62:0e:6e:1b:d2:68:fd:9a:15:61:9e:1b:0e:
1a:7c:1e:f7:c1:e2:90:6f:b4:69:f0:16:66:88:e3:e2:c6:1d:
dc:a0:17:ac:77:27:48:59:6c:3a:8a:b0:13:d2:fd:49:40:5c:
e9:41:e5:76:b9:3a:4a:57:0e:78:49:8f:4a:01:86:52:8b:03:
63:20:fb:6c:cc:ce:14:54:35:95:00:39:ef:8a:fc:ed:f5:fe:
e2:d5:ac:76:9d:dc:ef:5b:bd:93:8d:ca:09:01:24:93:08:bb:
da:a4:e7:ff:1a:dd:33:0a:dc:d0:ae:c0:3d:52:5b:aa:99:12:
e7:b1:bb:5a:be:69:05:9e:5f:4b:2a:a6:99:e0:fd:f5:76:b7:
2a:51:cc:9f:5f:a9:c2:5b:f4:46:17:f1:6d:f5:a8:a4:fe:18:
9c:8b:61:f0:38:a0:ae:54:cc:b6:f0:eb:cd:32:e7:a0:92:73:
ba:d3:5e:9e:ec:7d:0e:87:e7:12:2c:9f:02:75:53:fb:4e:c6:
03:df:ab:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:33:46 2025 by rpki-client