Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/54365208708411EDA8B14246C4F9AE02.roa
File: 54365208708411EDA8B14246C4F9AE02.roa (raw, json)
Hash identifier: mCCSZ+9WYvhaMFX9tC0Iaz2gMx4GH4ZGb0UPoAirqT8=
Subject key identifier: A5:B8:8D:9B:EF:95:A0:5C:38:CF:99:6A:89:04:55:4A:E8:14:21:18
Certificate issuer: /CN=A91285E3/serialNumber=1DEFB20A7A51EE18DD7AD06ADAAC4911E3E2F794
Certificate serial: 018F
Authority key identifier: 1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/54365208708411EDA8B14246C4F9AE02.roa
Signing time: Fri 27 Dec 2024 02:16:36 +0000
ROA not before: Fri 27 Dec 2024 02:16:36 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 147181
IP address blocks: 103.42.4.0/23 maxlen: 23
103.42.4.0/24 maxlen: 24
103.42.5.0/24 maxlen: 24
2001:df1:8f40::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399 (0x18f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91285E3
Validity
Not Before: Dec 27 02:16:36 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=676e0e04-b3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:56:d5:29:16:50:bf:a3:8b:76:d5:58:c8:b2:
52:72:68:2f:ac:96:32:93:79:41:ad:f3:a1:43:b4:
e2:ab:32:d2:a4:75:bb:53:0d:fb:c7:53:eb:90:f8:
8e:d2:2a:cb:b8:92:fb:07:72:0e:4e:cf:4a:41:1d:
84:dc:55:99:39:78:ab:fa:98:e1:b1:76:cc:c2:43:
58:76:a3:5b:23:b0:13:33:d5:1a:1c:62:d5:6d:4c:
ef:05:15:1c:be:8e:04:d4:06:12:5a:01:28:0b:6b:
a7:56:4b:3a:8a:1e:19:40:b3:73:98:fe:67:2b:dd:
07:97:e1:3d:4a:7b:8b:67:a7:27:2b:60:51:6f:fc:
80:70:52:f4:9a:a7:8d:1b:5e:27:fb:b8:12:c1:29:
5e:53:71:27:fa:7d:7b:ca:c2:9f:3b:2c:1b:f0:39:
0b:42:c1:73:5b:82:72:4a:db:da:97:e3:49:9b:03:
3d:d5:82:12:ce:99:30:1c:47:2e:6d:82:79:dd:c7:
77:fa:de:43:30:b4:b3:af:8f:fd:6a:ac:66:cb:4d:
a6:c4:22:19:a7:3f:83:c7:d1:52:b8:0c:3b:35:cb:
13:53:06:f8:a3:0f:1a:e7:2d:e6:7d:4a:98:f0:ca:
33:26:4d:31:6f:1c:97:d4:cd:70:2c:78:4e:21:80:
af:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B8:8D:9B:EF:95:A0:5C:38:CF:99:6A:89:04:55:4A:E8:14:21:18
X509v3 Authority Key Identifier:
keyid:1D:EF:B2:0A:7A:51:EE:18:DD:7A:D0:6A:DA:AC:49:11:E3:E2:F7:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/He-yCnpR7hjdetBq2qxJEePi95Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/He-yCnpR7hjdetBq2qxJEePi95Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91285E3/1B12A824707911EDBAA7CD26C4F9AE02/54365208708411EDA8B14246C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.4.0/23
IPv6:
2001:df1:8f40::/48
Signature Algorithm: sha256WithRSAEncryption
b5:a7:1c:67:0a:3b:9c:59:d7:59:70:b1:75:e8:c9:8f:1a:bc:
54:39:1f:be:23:a4:f1:93:b7:57:52:6a:2c:e4:ff:4a:76:06:
68:56:a2:b2:70:c5:9c:7f:c9:ef:17:b1:5e:c6:08:dd:be:22:
00:ae:95:5a:4e:8b:34:df:8d:c9:5d:11:a2:8f:f1:81:50:d7:
fb:67:37:b5:b4:96:53:83:60:c0:20:34:3e:09:71:40:2e:2d:
75:0d:d7:48:09:3f:fd:98:35:be:82:67:cb:fc:bd:78:aa:d5:
6b:f9:34:c8:43:17:c9:85:b0:04:3c:e9:77:8a:6a:3b:b2:95:
ec:82:a2:21:7a:c3:4e:54:78:a2:dd:ef:0e:ad:f6:7d:c8:11:
b5:c6:ce:80:15:f1:20:bf:bb:f9:58:60:52:3c:2a:bd:49:5b:
c7:a8:6a:ec:ab:40:8a:58:77:93:a1:cc:f2:ba:39:a9:64:c9:
07:09:53:54:44:bc:85:ef:ae:2c:fd:37:2f:bd:b3:94:14:f0:
c7:f6:e6:83:c9:9d:c2:ed:ef:ca:39:74:a1:4a:46:10:80:62:
8c:50:40:17:95:73:14:a9:91:34:35:82:44:70:20:29:ee:19:
59:54:a6:a7:7a:0a:6e:c9:31:87:71:15:2e:79:ee:3a:fe:95:
ba:fd:74:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:13 2025 by rpki-client