Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/D4F8B4B407D511EF86AD0733C4F9AE02.roa
File: D4F8B4B407D511EF86AD0733C4F9AE02.roa (raw, json)
Hash identifier: NccEMCqAY6Q4s87TmJw+IxbzpvybsP6p9O44DoX+2ok=
Subject key identifier: A0:DC:6B:E7:A3:FC:6A:D0:69:98:8A:D3:5B:24:8E:7E:57:84:7B:2A
Certificate issuer: /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Certificate serial: 11BA
Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/D4F8B4B407D511EF86AD0733C4F9AE02.roa
Signing time: Wed 01 May 2024 16:14:05 +0000
ROA not before: Wed 01 May 2024 16:14:05 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 55714
IP address blocks: 103.86.36.0/24 maxlen: 24
103.86.37.0/24 maxlen: 24
116.204.164.0/24 maxlen: 24
116.204.165.0/24 maxlen: 24
116.204.166.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4538 (0x11ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115D5
Validity
Not Before: May 1 16:14:05 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=66326a4d-218a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:00:ec:c8:8c:d0:14:ca:a9:23:5c:f8:94:
e2:c8:0a:4d:6a:7f:f5:98:4b:a8:bc:99:4d:ef:01:
e9:27:54:bd:72:b7:6e:e6:1e:0d:44:e9:54:ee:5a:
81:b5:99:9c:4f:f5:33:44:27:bd:b2:16:23:4a:cd:
16:47:b5:42:25:5c:6f:72:4b:be:bb:99:db:8c:82:
26:22:e4:46:e5:24:14:c3:e3:4b:93:9c:13:71:e6:
f7:7b:c6:f3:56:26:3c:1c:0c:7d:52:1c:c2:2b:be:
04:a2:31:5d:65:f9:96:c1:e9:d2:2d:07:11:c3:68:
89:b5:1a:ba:a7:31:0c:aa:0d:d6:9c:36:35:4c:46:
71:f3:fe:ed:a1:f0:0b:80:89:9d:c9:e4:58:a4:8a:
24:6a:0b:96:c7:d6:74:be:ef:40:64:e4:d3:d3:46:
be:2f:50:c9:90:c4:14:9e:6e:9f:d3:57:50:27:0c:
ea:72:63:09:b6:6e:b1:e2:0e:8a:1e:42:14:7c:ef:
5a:f8:26:8e:3e:61:79:9f:c5:31:28:82:ae:bb:4f:
48:62:71:7d:aa:cc:64:9c:33:9f:07:f6:a2:69:fb:
40:7d:9b:39:a3:d1:ec:75:0b:4d:5d:8b:7f:03:f8:
a3:cb:5b:b1:d7:b8:94:60:b4:a8:a5:5e:38:50:e6:
97:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DC:6B:E7:A3:FC:6A:D0:69:98:8A:D3:5B:24:8E:7E:57:84:7B:2A
X509v3 Authority Key Identifier:
keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/D4F8B4B407D511EF86AD0733C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.86.36.0/23
116.204.164.0-116.204.166.255
Signature Algorithm: sha256WithRSAEncryption
76:31:3c:f6:70:05:be:d8:33:e6:36:bb:f3:aa:5f:21:79:c5:
18:e7:32:c8:ff:75:65:c5:7a:86:73:38:9d:16:ce:57:bc:1b:
c1:08:fe:42:74:73:ec:79:af:2c:ab:53:da:5a:f5:e5:fb:7c:
c8:25:df:5c:6c:ca:5a:2a:b3:d9:4a:4e:2a:21:bc:d3:6a:63:
20:9f:ef:9f:01:8b:78:aa:83:5f:05:a8:a4:32:a1:d2:83:7f:
29:d1:16:67:29:1e:d1:0d:85:07:83:fa:9f:a6:e1:5a:9b:ef:
e0:ae:5f:ee:4a:e9:8b:ed:00:49:44:12:ef:f9:52:40:2a:f3:
d9:6a:59:09:4d:93:35:b6:79:63:0b:0b:45:75:4e:52:ff:7d:
3e:18:b2:fa:7d:b0:65:fb:03:ef:29:00:5d:c6:c6:84:7d:ca:
36:3f:66:ba:33:9c:4d:18:14:6a:c7:a7:32:82:e0:1a:a5:05:
ac:9e:77:3a:bb:6d:a8:f2:2b:17:f7:af:6c:c1:49:21:36:93:
31:0b:81:d8:65:36:9e:fc:7f:1d:fa:1c:41:60:e8:32:1b:cc:
5a:f8:46:03:b7:e3:5e:f3:87:e7:fc:a9:73:e8:26:f5:7c:75:
56:59:6d:af:36:b2:94:d6:2b:c4:3d:1b:0d:a8:f7:ab:68:d2:
2c:a9:18:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:58:04 2025 by rpki-client