Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/74BDB7D0B96C11EB956C1D2DC4F9AE02.roa
File: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (raw, json)
Hash identifier: GcFR8h/iT3o9szKNg9QC0T/IhGSts82BlmqYJleuoFI=
Subject key identifier: FA:0C:18:EF:27:6C:9B:79:E7:3F:CE:67:7F:DD:54:0C:E1:9C:6B:27
Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F
Certificate serial: 0524
Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/74BDB7D0B96C11EB956C1D2DC4F9AE02.roa
Signing time: Fri 07 Jun 2024 02:26:44 +0000
ROA not before: Fri 07 Jun 2024 02:26:44 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 142138
IP address blocks: 103.166.202.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1316 (0x524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91128B5
Validity
Not Before: Jun 7 02:26:44 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66626fe4-bba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1a:29:22:4f:65:ec:7e:ec:d4:40:be:cd:66:
ec:f6:f4:79:bf:fa:c9:90:c6:a0:3a:57:67:49:01:
88:6e:16:5a:4d:06:ae:5f:c3:08:0c:c2:4f:62:ed:
f0:28:03:b0:c8:ab:69:92:0d:45:13:36:c5:2f:26:
bd:6d:00:37:48:48:d0:7a:cc:ee:0b:b6:4e:78:71:
b5:a1:87:fb:2b:0d:e6:3c:74:58:24:29:14:1b:a1:
c0:c8:3c:c2:1e:6e:b7:85:4e:a1:4d:3f:4b:74:1b:
35:6e:9f:fa:91:ff:fd:1f:52:c7:8d:9f:2a:2f:30:
0e:06:ff:6c:f9:ab:95:40:a8:5a:c5:14:d7:33:31:
dd:ee:56:0b:80:7f:e3:76:87:c6:76:74:b4:b8:8a:
0f:85:8a:1f:66:dd:93:2f:76:51:e6:ad:79:c6:fa:
cc:72:f7:ba:47:66:c4:c3:50:90:c1:7d:9e:0f:93:
98:99:92:61:42:15:b5:37:4a:0e:70:5f:06:2a:10:
ec:cf:69:ac:53:db:26:b7:77:bf:80:de:28:06:74:
99:49:0a:ca:f1:95:53:a9:05:20:d3:32:a6:4c:ed:
b6:59:b2:c4:74:f9:e0:db:d8:2a:90:ef:eb:33:74:
cb:e4:57:99:58:8e:42:98:f4:d6:07:5c:c8:11:56:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0C:18:EF:27:6C:9B:79:E7:3F:CE:67:7F:DD:54:0C:E1:9C:6B:27
X509v3 Authority Key Identifier:
keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/74BDB7D0B96C11EB956C1D2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.202.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:f5:dd:6d:ec:77:9e:2c:8d:11:3f:b9:ec:ba:5e:db:07:86:
cc:29:c4:49:8d:ad:7b:51:c4:95:92:9f:86:2a:b8:15:b4:30:
eb:4c:51:ef:51:ce:f6:58:e7:00:8f:aa:ae:8a:11:f4:a6:1a:
0a:9d:c2:bf:5c:e4:9d:78:85:53:62:4e:91:70:0d:60:af:47:
99:67:9e:bc:c3:63:a9:97:d0:84:23:b9:6a:11:89:7a:6f:de:
ad:21:2c:22:79:8f:ff:38:9d:64:06:d2:2b:92:5f:e1:48:13:
72:7a:b4:73:3d:f0:0c:b8:25:7f:8a:e6:53:e4:90:05:a7:6d:
0f:f0:54:0d:f2:fb:ce:ad:ee:6e:4c:aa:8e:12:be:9b:c7:6c:
dc:c6:7e:66:3c:29:bf:13:5b:d6:a5:33:dc:a2:86:90:0a:42:
6d:fd:ba:48:56:e2:31:fa:64:4a:c9:0d:64:ce:86:75:31:57:
d1:3b:1e:d7:24:e7:3d:0e:de:de:87:95:92:58:3c:28:c5:49:
f7:01:ac:ed:a4:68:63:af:48:29:c9:fa:05:99:53:2e:16:16:
58:88:ab:48:f0:b4:73:7f:f9:96:42:64:94:e6:ce:96:66:1a:
cb:f9:f2:03:54:85:ab:71:71:fd:ea:dc:76:49:c4:e0:83:a8:
5e:42:ac:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:00 2025 by rpki-client