Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC606CC2039711EF827EA96FC4F9AE02.roa
File: BC606CC2039711EF827EA96FC4F9AE02.roa (raw, json)
Hash identifier: //j0Klz3xRmdBvo+AgBU2/GLwOgf9wfQnMeJw6ixMhc=
Subject key identifier: 9C:72:47:6B:67:44:2D:7E:55:7E:1E:50:2F:2F:A3:9B:CD:DB:6F:CA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 86BA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC606CC2039711EF827EA96FC4F9AE02.roa
Signing time: Fri 26 Apr 2024 06:39:31 +0000
ROA not before: Fri 26 Apr 2024 06:39:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147224
IP address blocks: 103.108.45.0/24 maxlen: 24
103.137.45.0/24 maxlen: 24
103.171.77.0/24 maxlen: 24
103.174.247.0/24 maxlen: 24
2001:df0:f740::/48 maxlen: 48
2001:df2:16c0::/48 maxlen: 48
2001:df3:93c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34490 (0x86ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 26 06:39:31 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=662b4c23-d480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:5b:e7:4f:77:a8:d7:04:0b:5f:6a:c0:e8:
10:5a:00:97:bb:4a:4f:8c:4b:fb:7e:48:30:d1:c3:
16:ff:a3:6d:66:a6:8a:e9:02:02:3a:97:e4:49:4f:
c3:88:bd:fe:f5:3c:5b:e9:6e:7f:f6:f4:57:eb:58:
c4:0e:9e:96:33:a3:5f:ba:f3:54:e3:5a:4d:79:e0:
43:1e:71:01:9b:1c:b7:c1:af:da:19:30:10:e2:e0:
ed:97:64:05:ff:3d:37:39:79:f7:79:c9:68:8f:73:
37:13:92:ea:56:8b:e7:b3:5b:01:8e:c5:8c:cb:1c:
92:3b:8f:f6:4c:c1:d2:23:27:9e:42:ae:c6:ad:0f:
6f:75:23:e1:2a:72:b9:27:4c:6e:05:8b:e1:c5:a9:
25:84:22:8e:44:f6:22:55:6d:c7:f3:00:27:47:02:
4e:e0:cc:b6:b4:29:32:9e:dc:ab:8c:f2:39:a5:ed:
86:74:ac:94:4f:eb:c2:9e:21:ba:5a:b2:7c:1f:3e:
b6:db:6b:d1:b5:42:6c:89:17:c1:96:3a:65:96:a8:
48:3b:cb:fb:e8:22:09:19:ae:dc:23:bc:19:97:3e:
25:36:6b:39:88:91:f4:86:82:70:98:c2:47:73:54:
82:23:ba:42:1d:1d:39:f0:64:9e:79:fb:01:cf:ed:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:72:47:6B:67:44:2D:7E:55:7E:1E:50:2F:2F:A3:9B:CD:DB:6F:CA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BC606CC2039711EF827EA96FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.45.0/24
103.137.45.0/24
103.171.77.0/24
103.174.247.0/24
IPv6:
2001:df0:f740::/48
2001:df2:16c0::/48
2001:df3:93c0::/48
Signature Algorithm: sha256WithRSAEncryption
b8:4a:2a:0f:ad:6e:0e:b8:f2:47:b5:54:25:8e:03:4a:d9:9f:
6d:77:7b:52:ad:d4:c4:5f:ae:b2:a7:4f:01:44:24:9f:47:f3:
70:b5:38:c5:f7:5a:f2:0f:12:e8:e5:5a:3f:94:c4:4b:c4:b3:
68:df:e9:16:cc:97:4b:01:83:21:89:4c:30:59:51:03:5d:6a:
48:65:d0:b2:02:88:39:a0:af:72:68:1c:36:15:74:a5:06:e7:
d4:92:84:97:e9:c9:89:3e:98:a5:1b:2a:c7:80:5e:6c:6c:c0:
fe:97:b2:86:18:d8:a1:d7:e2:32:91:f4:3c:42:80:43:24:8b:
42:6c:7c:b8:e9:8e:23:84:91:8a:9f:43:b6:6a:17:0a:40:74:
72:3e:72:cc:ad:ad:4b:ae:84:27:84:6f:21:c2:3a:43:33:40:
b0:60:15:be:da:ae:cc:ee:b8:ea:53:0e:56:97:13:72:7f:85:
23:99:49:78:79:88:dc:fc:f4:e3:f3:87:72:78:de:4b:73:e0:
bc:53:3a:33:6b:17:78:94:02:2d:74:18:bd:96:be:79:62:eb:
3b:4f:01:30:2c:af:cd:2d:fc:86:b4:69:6d:1a:d6:33:1e:70:
57:bb:12:d7:e0:da:67:ea:7a:a4:53:85:02:c4:4e:d8:0b:b2:
3f:9c:21:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:37:13 2025 by rpki-client