Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/D4811B86EDB011EF8DFB1285C4F9AE02.roa
File: D4811B86EDB011EF8DFB1285C4F9AE02.roa (raw, json)
Hash identifier: UANLL/DIhHAE6oC8FAukWCm16igdFVnOAgYy/cB4YuA=
Subject key identifier: 25:2C:C7:62:24:F0:9D:2A:68:B1:A9:DC:BB:2F:50:51:64:B2:28:77
Certificate issuer: /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial: 045A
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/D4811B86EDB011EF8DFB1285C4F9AE02.roa
Signing time: Tue 18 Feb 2025 04:28:41 +0000
ROA not before: Tue 18 Feb 2025 04:28:41 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 7586
IP address blocks: 103.177.44.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1114 (0x45a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113066
Validity
Not Before: Feb 18 04:28:41 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67b40c79-da51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4a:2c:51:37:d4:2c:41:a8:74:3b:5a:56:06:
41:3d:0f:f2:63:e2:e7:ea:53:e6:f6:64:94:f8:00:
09:d3:01:d7:d6:33:59:5a:e6:dc:8e:d2:d5:dc:b0:
40:83:fb:9a:7b:c5:22:d0:72:30:81:0d:af:5c:ba:
14:9e:ae:7e:02:da:05:d1:5a:04:b7:6e:16:11:ac:
82:54:23:74:e1:1d:1e:99:8d:73:07:39:24:2f:f3:
b0:81:4e:d5:d2:da:20:2b:19:23:b0:28:b4:7a:56:
2c:ce:06:4c:c8:73:74:10:3d:84:09:4c:df:74:2a:
4c:6e:e9:16:e7:2d:67:9a:19:56:c5:ea:f0:63:22:
2f:cf:56:4d:e3:80:1f:bf:70:64:5b:72:10:e1:60:
96:22:29:db:db:9f:2a:3e:48:ef:53:c2:53:da:dd:
21:55:9b:43:df:b1:6a:f9:31:6e:d0:41:97:b2:98:
79:84:1a:4a:75:8b:31:bb:6d:c0:ba:11:60:08:90:
b1:2e:e1:6f:c4:15:6e:3f:e0:61:c0:50:d3:0a:06:
c0:27:57:61:e6:b9:67:ee:c7:16:37:e8:0c:84:50:
8d:26:9d:d2:84:d6:4e:9e:bf:f5:40:73:8d:f1:78:
6e:c5:50:b9:ce:12:33:f7:6f:aa:4a:9d:2b:b2:c3:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2C:C7:62:24:F0:9D:2A:68:B1:A9:DC:BB:2F:50:51:64:B2:28:77
X509v3 Authority Key Identifier:
keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/D4811B86EDB011EF8DFB1285C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.44.0/24
Signature Algorithm: sha256WithRSAEncryption
52:ea:d0:87:0c:cb:dc:8c:7e:e9:96:b0:ea:97:51:ca:85:6a:
b4:90:a6:72:59:0e:0a:c1:07:1f:1c:11:e2:86:af:91:ce:51:
59:f9:b4:bf:80:20:eb:4b:5e:4c:52:1d:62:ef:2c:cc:f1:82:
46:19:ad:53:dd:e2:cf:c8:e3:0d:8c:7a:1c:0a:ae:e0:af:01:
23:15:ad:b4:a7:2d:fd:83:1f:e8:24:fe:e7:86:7a:93:2a:30:
12:a1:15:4a:41:ef:40:2a:cb:14:0b:e8:e8:b5:c2:b5:7f:da:
b4:58:ee:0f:95:6b:39:56:25:61:30:d0:49:79:7c:76:05:a4:
9e:24:59:62:7c:10:4a:e8:54:1a:14:b6:4e:fa:22:22:4b:2a:
d3:cb:e9:1f:a4:f7:92:e5:34:ff:2c:09:52:77:c9:a7:2e:ee:
3c:ea:70:9f:5e:85:63:26:13:8c:d5:a6:3b:cb:fb:66:74:aa:
56:ff:56:62:11:61:91:0c:43:e6:4a:20:76:42:5a:02:64:84:
7f:49:58:fc:97:c2:14:f9:5a:3f:be:5c:82:1d:a3:69:e8:61:
89:ab:86:7b:35:07:5c:5f:5f:d7:4d:e0:85:2b:c2:f7:1e:ad:
2a:1b:da:45:60:2c:28:2f:51:88:0f:56:59:fa:4a:11:d4:0e:
f5:e5:2a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:02:58 2025 by rpki-client