Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/0F291AFE9D2811EC83448E6FC4F9AE02.roa
File: 0F291AFE9D2811EC83448E6FC4F9AE02.roa (raw, json)
Hash identifier: guTq71O2LSxBtq9wp1j3np+TPnuYZq23yDrd9yyvAgk=
Subject key identifier: 24:21:E7:FC:07:F4:4E:9D:39:64:04:8C:3A:70:0D:21:FC:B9:D0:A1
Certificate issuer: /CN=A9118B32/serialNumber=B61103A5C9CC60EAD188A2F9FD11E63D5233D995
Certificate serial: 02BE
Authority key identifier: B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/0F291AFE9D2811EC83448E6FC4F9AE02.roa
Signing time: Sun 17 Mar 2024 03:05:10 +0000
ROA not before: Sun 17 Mar 2024 03:05:10 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 149521
IP address blocks: 103.182.118.0/23 maxlen: 23
103.182.118.0/24 maxlen: 24
103.182.119.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 702 (0x2be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9118B32
Validity
Not Before: Mar 17 03:05:10 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=65f65de6-b284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e3:80:b2:77:35:f6:ac:66:97:7e:d3:f8:9f:
6f:49:15:46:1e:79:9e:1b:f0:2a:db:30:84:ab:d6:
9a:fe:b3:26:33:d5:1c:1c:d6:7f:2b:cc:c1:dc:8c:
74:9b:77:b7:bf:ac:09:e4:82:97:24:b3:4d:23:e7:
fa:35:19:ba:14:82:06:22:7c:92:40:53:c8:3b:ab:
2e:d4:77:b1:76:0e:fa:ac:e7:f6:d4:02:81:8d:5c:
74:36:81:34:46:93:6b:26:f6:da:0c:79:41:01:8b:
85:3d:52:0a:d3:ca:47:87:79:e8:b4:4d:e0:5f:a9:
1f:8d:d3:0a:04:a7:ee:ef:61:38:9d:92:91:4c:39:
4e:2d:9a:e4:2b:af:58:1a:8c:6f:ff:ab:e9:82:59:
4a:2d:83:8f:ac:4c:dd:37:59:6b:88:3c:29:dc:ad:
b6:3e:c4:ca:3b:c3:f4:91:e2:3d:20:85:ef:b6:0c:
93:9f:1a:13:c4:35:19:7c:66:8d:8e:84:62:30:cf:
07:b1:4b:c4:8d:3b:78:b4:9d:92:3c:4d:71:73:c0:
59:70:c1:93:6a:11:f5:a6:a5:9f:ce:5b:e1:be:d4:
71:a5:65:88:58:c9:d5:cd:f4:a6:59:76:3f:1a:4b:
43:55:29:37:a3:ba:49:f8:ee:49:05:78:f1:e9:6a:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:21:E7:FC:07:F4:4E:9D:39:64:04:8C:3A:70:0D:21:FC:B9:D0:A1
X509v3 Authority Key Identifier:
keyid:B6:11:03:A5:C9:CC:60:EA:D1:88:A2:F9:FD:11:E6:3D:52:33:D9:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/thEDpcnMYOrRiKL5_RHmPVIz2ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/thEDpcnMYOrRiKL5_RHmPVIz2ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118B32/FF771BBC9D2511EC85FDF36EC4F9AE02/0F291AFE9D2811EC83448E6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.118.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:94:39:32:85:95:ed:64:e9:a3:25:18:b9:b8:53:ad:fb:a7:
e7:bd:7f:d0:17:29:56:bc:4e:e7:ab:52:e4:a1:bc:5a:47:99:
95:ad:30:60:87:38:cd:1a:9b:2f:08:69:9a:53:77:53:9c:3e:
a8:e8:0b:9e:d4:ef:02:fd:e4:e6:8e:4c:70:f0:a4:ac:da:f0:
41:1d:ce:6a:e5:67:26:41:b7:a8:91:9c:24:ce:0c:f7:3c:de:
a8:df:7e:02:bd:19:74:fb:31:da:2c:9c:97:36:f1:a3:b4:ee:
11:30:61:90:01:2f:bb:1d:4d:92:39:fa:34:82:1a:b7:39:6e:
40:06:34:39:71:97:4b:85:75:23:57:d9:c3:29:40:e8:ce:6b:
e4:1b:d1:63:ec:d1:57:da:75:31:d3:6e:55:21:0e:4d:67:c3:
c4:59:e3:da:1b:10:5e:f6:b6:48:f2:33:f2:00:2c:76:5e:2a:
6e:ca:fe:43:50:64:0c:53:f8:38:17:15:41:51:a6:f0:4b:bb:
db:3b:42:17:8f:29:32:86:85:e3:6d:94:6a:01:82:4b:da:54:
cb:e2:2e:d9:55:4b:14:48:22:14:a3:b7:14:a5:4e:6d:3d:3a:
db:6b:88:fc:3a:a5:d2:17:90:55:b0:5b:57:ba:c8:eb:4c:99:
58:dc:75:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:45:04 2025 by rpki-client