Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/DBFA5D12991511EBAD428141C4F9AE02.roa
File: DBFA5D12991511EBAD428141C4F9AE02.roa (raw, json)
Hash identifier: ZWhqO2hCrh7wEVTx04hjC4aXU7L2UDaY20IY/hvYha0=
Subject key identifier: 1C:DD:85:7D:09:96:8B:C5:BF:4E:AF:BB:84:68:A4:EE:DF:86:77:75
Certificate issuer: /CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
Certificate serial: 02
Authority key identifier: D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/DBFA5D12991511EBAD428141C4F9AE02.roa
Signing time: Fri 09 Apr 2021 09:27:53 +0000
ROA not before: Fri 09 Apr 2021 09:27:53 +0000
ROA not after: Thu 31 Mar 2022 00:00:00 +0000
asID: 137270
IP address blocks: 103.106.118.0/23 maxlen: 23
103.106.118.0/24 maxlen: 24
103.106.119.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262BD
Validity
Not Before: Apr 9 09:27:53 2021 GMT
Not After : Mar 31 00:00:00 2022 GMT
Subject: CN=60701e19-e295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:05:79:72:2f:dd:d4:02:b4:5b:b4:79:33:77:
94:bb:db:f3:2e:dc:72:32:12:69:30:f9:7b:18:92:
9e:dd:75:7b:b9:dd:58:aa:33:38:d1:0c:88:db:a0:
3c:49:e6:cd:af:2a:d9:11:c4:6a:8d:cf:96:65:64:
8b:88:f7:9e:29:ae:76:c9:83:17:82:07:df:a8:7d:
3d:24:50:32:5c:49:a5:6f:96:7b:ee:97:9c:f0:fd:
5a:fb:42:b2:83:13:c9:5b:24:ba:e7:77:d1:f2:f1:
24:eb:22:bd:36:24:0e:63:0b:05:11:46:29:fc:9e:
6f:3f:d8:27:3d:7d:61:5e:54:81:0d:95:06:1b:fe:
71:72:83:9d:34:2d:ee:16:56:54:ec:93:07:78:5a:
d9:d0:2b:9f:d4:9a:35:8c:f1:7f:6b:54:0a:3f:25:
d2:dc:2e:e0:50:aa:12:d4:83:7f:0b:72:72:6b:5d:
a5:00:be:99:a0:85:ad:66:12:2d:46:0e:d3:0f:e8:
9c:6d:c1:9a:31:3f:63:58:64:db:dd:fb:e0:b5:d9:
a6:d7:c7:fd:5f:fe:09:45:b8:17:4a:83:45:86:ba:
c4:ba:0b:d2:cf:ae:52:92:ac:11:e1:20:68:d0:dd:
3b:77:53:b0:52:b6:25:7f:36:35:5c:f7:94:fa:e3:
f3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DD:85:7D:09:96:8B:C5:BF:4E:AF:BB:84:68:A4:EE:DF:86:77:75
X509v3 Authority Key Identifier:
keyid:D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/DBFA5D12991511EBAD428141C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.106.118.0/23
Signature Algorithm: sha256WithRSAEncryption
89:53:2f:a6:5f:37:53:08:e3:0b:b3:11:5c:34:ed:21:07:b7:
c7:88:e1:0a:12:23:c2:be:5f:fe:ce:0e:4f:c4:38:0c:cf:f3:
5b:89:c7:1e:cb:0b:5e:42:f0:c0:fb:66:33:d4:19:86:87:15:
c4:ca:8d:d3:ac:50:53:1e:fd:57:57:cd:90:10:58:3d:ab:f0:
0c:ae:1a:6b:43:14:56:7b:20:88:ef:9d:06:28:57:4f:58:83:
c0:35:c1:de:8e:52:e8:99:1e:1b:57:6c:fc:dd:79:19:39:12:
54:ed:7b:34:35:77:da:fa:04:f6:2a:bc:c9:21:93:e7:57:c1:
89:8f:03:fb:6d:61:83:df:52:60:ea:8c:68:f6:48:85:cc:be:
5a:2b:e4:ac:56:55:a0:c2:ae:95:28:35:09:73:25:74:d7:8b:
b5:16:cf:61:7a:13:8d:d0:a9:7b:c2:d4:2e:ea:a9:98:2e:dc:
96:05:f1:56:f6:8f:fc:b8:03:b2:7b:b2:a4:cd:a3:c1:45:bb:
07:18:0d:d6:1b:a7:78:8e:f8:75:50:1b:01:18:18:04:e6:aa:
7a:8f:1a:cd:92:66:be:9e:54:5f:c7:4e:bd:81:25:aa:6d:62:
82:cb:c5:77:14:97:56:c8:b2:b7:c9:4b:f5:66:c9:dc:55:5b:
81:b5:23:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:02:48 2025 by rpki-client