Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/141F86F437EA11ECA7D1B309C4F9AE02.roa
File: 141F86F437EA11ECA7D1B309C4F9AE02.roa (raw, json)
Hash identifier: sqwRRmaJwuQFiN3xLvOQrdUvxWPfQqgc0sMkOZ08KEg=
Subject key identifier: 43:AB:EF:10:9C:9F:80:A7:83:1D:66:36:1B:E5:F0:23:87:C5:71:B5
Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial: 0DA7
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/141F86F437EA11ECA7D1B309C4F9AE02.roa
Signing time: Fri 26 Apr 2024 18:37:25 +0000
ROA not before: Fri 26 Apr 2024 18:37:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137263
IP address blocks: 103.136.32.0/24 maxlen: 24
103.136.33.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3495 (0xda7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912698E
Validity
Not Before: Apr 26 18:37:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=662bf464-816e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:4b:1f:da:db:8c:d4:0a:85:c0:21:80:ab:9d:
24:82:5d:a1:6d:1b:f8:5b:36:74:45:c4:20:92:3a:
80:92:a9:48:46:1d:3f:87:19:b2:c1:31:54:34:c4:
67:be:4e:b0:70:66:94:37:4e:5b:d4:6a:df:ec:f4:
80:7c:c5:ff:4e:4a:52:bc:5f:e1:40:e6:2e:8e:7f:
3b:ff:ad:6e:7f:34:dc:84:b6:e3:2e:93:e3:b9:b1:
46:83:ce:fb:e0:ac:f4:02:a5:72:34:cb:aa:9e:c4:
e0:60:70:32:b7:fe:ae:a3:c1:0f:75:fb:72:b1:2f:
3e:f3:af:b0:66:14:e8:e8:6d:66:ff:7f:dc:18:84:
45:36:c1:6f:94:a9:90:15:a4:54:91:d7:e3:8f:95:
20:a2:06:6e:95:c5:fc:98:f8:3b:9c:d6:e6:34:5a:
71:92:9d:8c:ab:2f:cd:dd:31:70:8c:62:29:c2:f5:
3d:6d:fc:80:28:b2:d2:c6:3f:00:83:fe:64:5b:d3:
79:78:c5:f5:f8:61:8c:c8:1b:c4:73:43:a5:5a:79:
01:7c:a2:4e:3f:e1:a6:67:79:f1:5d:ac:de:cc:dd:
15:3f:cb:6b:40:ef:fb:06:99:9b:27:3c:f3:81:b8:
df:e7:5e:c8:20:31:6a:ea:bb:15:a9:d6:ab:d8:68:
90:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AB:EF:10:9C:9F:80:A7:83:1D:66:36:1B:E5:F0:23:87:C5:71:B5
X509v3 Authority Key Identifier:
keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/141F86F437EA11ECA7D1B309C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.32.0/23
Signature Algorithm: sha256WithRSAEncryption
59:64:eb:b5:09:85:61:20:ba:71:50:af:b1:00:29:b4:55:12:
b4:9c:4b:49:85:51:21:59:31:7c:6b:f3:5f:b2:02:9b:f6:cb:
09:e2:8a:ea:b2:f3:c5:37:ff:21:2a:d9:fc:9c:d7:a9:63:fb:
9a:3c:15:c7:12:42:40:47:1a:40:37:51:9c:d5:a2:33:dc:e9:
dd:fb:25:2b:90:ed:ff:1a:00:67:f9:72:65:62:5a:93:b3:f4:
5d:ce:7a:a2:62:60:59:8d:12:27:7b:f2:74:c5:15:4f:74:a2:
c7:05:16:e6:1b:76:9f:d8:2f:b5:b6:44:91:35:ac:cd:b0:a5:
0d:14:51:b3:e2:ec:cd:f7:93:a6:43:4a:cf:d5:fc:26:32:7c:
ff:b2:07:72:e9:c4:c4:55:6e:b8:26:10:06:7b:de:9e:58:77:
21:b2:62:8d:8f:43:f9:86:7c:2c:d6:f2:42:78:c4:80:d4:0d:
b7:d9:da:a8:b5:d1:dd:74:b4:b1:87:41:ea:95:1a:37:1d:2f:
43:76:3e:2b:b0:dd:1c:1f:eb:73:e4:6f:09:46:87:13:bf:fe:
e7:8e:7b:15:18:d4:0e:c6:45:2a:69:68:2d:f4:5a:61:0c:21:
a4:9d:ee:0f:6c:9a:42:d9:0e:c2:3d:37:64:00:c5:5a:08:d9:
bd:e7:10:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:36:44 2025 by rpki-client