Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/187415DE3E6F11EEA236AD17C4F9AE02.roa
File: 187415DE3E6F11EEA236AD17C4F9AE02.roa (raw, json)
Hash identifier: oCp4PWI4KP913wPG7fBsv0AeBkh1JffMER8sLvsvQsc=
Subject key identifier: 22:9F:0C:ED:03:85:FE:11:9F:E8:29:9C:63:31:53:DC:6D:36:B3:61
Certificate issuer: /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
Certificate serial: 077B
Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/187415DE3E6F11EEA236AD17C4F9AE02.roa
Signing time: Tue 24 Sep 2024 21:10:58 +0000
ROA not before: Tue 24 Sep 2024 21:10:58 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 141154
IP address blocks: 103.155.98.0/24 maxlen: 24
2001:df4:c080::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1915 (0x77b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912918B
Validity
Not Before: Sep 24 21:10:58 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66f32ae2-e0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:bd:ae:ff:03:c8:2a:2e:64:40:4c:df:78:
bb:4f:34:92:af:3e:c5:97:9e:22:ff:2f:09:20:3a:
0d:77:ce:40:fe:2c:7e:76:b9:2e:a7:e7:f8:da:79:
79:b6:6a:d1:b1:3c:b7:cf:90:ca:a8:48:3f:6e:df:
94:c7:b0:8b:45:0b:18:76:b6:e5:50:13:f7:03:18:
c3:f5:92:20:ce:c4:05:c0:f7:f1:ef:bf:b0:0d:21:
b0:4a:15:e4:08:bd:ed:ae:73:91:72:b4:86:23:13:
bd:a4:11:fb:14:49:55:6c:3a:d0:6c:37:b8:cc:02:
83:d0:61:49:08:50:ca:a5:ad:32:5d:fd:63:a9:a9:
ed:c4:34:f3:e0:cf:88:c8:3a:a6:81:17:56:64:ec:
87:d8:20:30:9b:cb:29:65:8c:93:65:a3:ee:ec:67:
9c:67:7f:15:0e:b4:be:df:71:4f:ab:58:57:fc:89:
d3:2a:a3:ae:d2:3a:49:4d:fa:1f:d6:15:5b:b3:52:
3a:e5:87:64:0b:82:36:26:77:ca:53:8a:2d:73:97:
0b:97:a3:8b:49:20:f8:59:a1:25:79:e2:a3:41:f5:
f3:df:cd:ef:15:c1:20:fd:09:4f:bb:22:8a:07:71:
20:e3:c3:e2:47:53:5b:ef:48:21:f3:96:47:37:54:
1e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9F:0C:ED:03:85:FE:11:9F:E8:29:9C:63:31:53:DC:6D:36:B3:61
X509v3 Authority Key Identifier:
keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/187415DE3E6F11EEA236AD17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.98.0/24
IPv6:
2001:df4:c080::/48
Signature Algorithm: sha256WithRSAEncryption
82:6f:11:ed:5c:ee:3d:62:00:ac:0e:da:12:de:a1:70:b0:c2:
18:a3:03:9f:bd:a7:f4:9b:1f:22:49:63:9f:29:b3:b7:49:ac:
6a:2c:a4:9e:72:6b:45:40:ef:be:e7:e8:e6:a6:1c:46:a6:94:
50:29:6e:60:f7:81:3e:56:a8:b9:2a:33:70:38:fd:31:11:e9:
ee:40:16:e6:36:7e:f7:a2:a9:4a:39:50:bb:eb:dd:23:a8:24:
ab:c0:d7:a9:d9:4b:98:a2:a2:a2:8d:a4:bd:61:a0:78:84:47:
89:c9:3a:4a:88:01:ad:cc:73:25:6b:09:e4:4e:28:15:9a:9a:
47:43:e4:57:27:52:02:ff:82:7b:84:ba:29:c3:59:42:c0:7f:
d2:b1:a7:39:8a:81:b6:fd:7a:c5:65:e4:d3:61:67:5d:4a:aa:
39:6b:a8:99:21:92:36:af:d4:e3:8f:24:f8:48:fb:e9:eb:60:
12:6e:ea:90:80:88:5e:71:49:ad:50:35:97:85:63:d0:da:62:
8f:9c:7a:14:5c:92:06:41:05:c8:1b:2d:b2:54:b8:42:43:33:
65:fa:bb:a6:e9:50:bc:e1:3b:3e:44:ae:d8:22:3d:9d:25:77:
93:31:43:9c:a3:16:e4:b1:d5:26:10:1b:6f:e8:77:9a:4a:f2:
86:0a:d1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:45:06 2025 by rpki-client