Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/D510745CEDB011EF8DFB1285C4F9AE02.roa
File: D510745CEDB011EF8DFB1285C4F9AE02.roa (raw, json)
Hash identifier: mkdcNiRN7WmsqgoxZDJMLaSm19QMGSaPtxWNLxau8CI=
Subject key identifier: 29:D2:D9:98:AB:A4:4B:C2:BB:2F:71:7E:7A:02:18:63:C1:B3:5C:1B
Certificate issuer: /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial: 045B
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/D510745CEDB011EF8DFB1285C4F9AE02.roa
Signing time: Tue 18 Feb 2025 04:28:42 +0000
ROA not before: Tue 18 Feb 2025 04:28:42 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 976
IP address blocks: 103.177.44.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1115 (0x45b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113066
Validity
Not Before: Feb 18 04:28:42 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67b40c79-8ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a6:8b:cb:e2:30:09:73:d1:74:f8:f8:20:3c:
14:d8:f6:9e:34:41:42:ba:db:d0:a7:e6:76:26:5c:
6a:85:16:26:ba:a7:8c:3b:88:db:65:0d:1b:37:90:
f9:8c:0e:6e:4c:00:d9:90:18:fd:61:9b:07:90:a5:
ba:60:28:02:87:9f:96:08:3d:cb:14:b7:76:21:f7:
7c:59:eb:01:b6:e7:d3:ad:2f:d3:4a:c8:e8:c6:cb:
ec:24:9f:2d:2a:9c:70:42:9c:32:84:a1:d6:06:37:
f0:bb:84:0f:bd:8c:44:48:bc:84:62:ca:1c:78:37:
fe:21:a3:32:c3:ee:a8:22:60:5e:4f:8f:44:d9:25:
aa:81:57:b1:7c:1c:bc:9f:bc:83:a9:a1:89:00:e4:
f5:6e:a2:0c:83:3c:7b:cf:ed:7e:50:28:ce:b7:54:
a8:d7:72:d2:2e:38:54:01:fa:29:ea:27:43:eb:b3:
72:06:d2:cc:10:0d:dc:d8:72:74:23:e1:ae:c8:7e:
23:07:b9:fd:dd:3c:af:e0:1d:e0:23:4b:5f:64:ee:
1c:10:70:ec:7c:f1:48:50:64:29:97:38:69:fb:dd:
f6:2d:a0:eb:e3:d8:70:9f:a4:c4:91:0a:a8:0b:0e:
3b:bb:98:a3:8a:eb:46:06:48:05:48:a4:cb:9a:df:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D2:D9:98:AB:A4:4B:C2:BB:2F:71:7E:7A:02:18:63:C1:B3:5C:1B
X509v3 Authority Key Identifier:
keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/D510745CEDB011EF8DFB1285C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.44.0/24
Signature Algorithm: sha256WithRSAEncryption
72:03:f1:a6:1a:87:52:02:1c:13:ba:10:1d:db:5a:48:8c:dd:
c5:a0:a3:c3:a2:6a:db:be:b5:4e:e7:91:6d:0d:47:f0:cd:6a:
b8:11:5b:be:6c:17:58:bc:f9:d8:ee:de:b9:0d:2b:35:91:4c:
ac:14:86:f2:37:9b:de:cd:26:53:dc:e4:e4:ad:83:2d:d3:53:
d3:dd:b6:f0:84:28:54:10:2c:0a:ad:ea:f9:f8:4a:77:14:a5:
af:f4:d1:cf:23:4e:6b:14:60:97:12:44:5d:ae:96:dd:7b:7e:
ba:80:35:fb:4f:f0:cf:cc:14:09:e6:3c:14:89:32:b6:05:89:
51:c9:18:df:22:63:6b:a9:0c:d2:99:7b:b5:f8:c0:f6:9e:13:
6f:1c:41:af:4f:5a:32:64:8b:12:df:30:dd:d5:d6:2d:72:22:
df:55:b2:96:fe:11:b3:c2:cb:d6:1a:54:6d:b0:c7:c5:d6:4e:
50:22:c9:69:a5:82:b7:db:7f:44:da:31:93:00:88:10:7c:0f:
20:df:34:5d:11:ea:47:80:95:a7:f8:1a:06:82:d2:1a:34:73:
7d:63:23:49:c5:ba:b7:41:e9:ef:76:49:65:26:13:4c:64:88:
d5:7a:2e:80:de:91:36:44:9e:b5:45:a6:21:48:da:44:96:88:
ff:9b:a3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:08:06 2025 by rpki-client