Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/E57312C6F59611EFAAD00555C4F9AE02.roa
File: E57312C6F59611EFAAD00555C4F9AE02.roa (raw, json)
Hash identifier: EmtXDOBjG/CTXXgvoV50JSRMSQiLY5QLi6KhGxpJhT4=
Subject key identifier: DA:5B:39:CA:F9:68:9D:79:4F:3E:B0:73:A0:0C:E9:F9:3A:3D:9B:DC
Certificate issuer: /CN=A912A455/serialNumber=0FAD1BD346184C71927C82C61D3FA6D7E472EE9E
Certificate serial: 08A6
Authority key identifier: 0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/E57312C6F59611EFAAD00555C4F9AE02.roa
Signing time: Fri 28 Feb 2025 05:43:12 +0000
ROA not before: Fri 28 Feb 2025 05:43:12 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 38887
IP address blocks: 103.240.222.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2214 (0x8a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A455
Validity
Not Before: Feb 28 05:43:12 2025 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=67c14cef-8e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:84:52:cf:3c:59:99:f3:7e:a1:03:3c:22:f1:
7a:e5:1f:43:46:73:27:bc:f5:00:a9:94:d3:c1:cf:
a0:a8:52:03:1e:c1:eb:96:d8:d4:ec:6e:dd:e1:ba:
d4:f8:7e:6d:44:34:17:5a:45:d5:78:20:03:79:14:
30:f3:62:ea:3c:40:54:50:04:1f:9b:4f:8b:d4:24:
91:26:64:78:69:63:65:6e:bf:ac:84:dd:ec:58:49:
9c:70:49:98:ee:62:bd:0c:a7:81:99:42:d9:a0:40:
d0:d4:26:77:f7:ea:51:e3:79:37:0c:c6:3f:49:9d:
79:24:98:2f:83:5c:36:8a:65:a7:05:e0:60:6a:20:
57:39:66:aa:b8:8e:8d:da:04:09:fb:05:37:57:93:
e8:56:ee:9e:76:d8:47:3d:ef:05:04:05:a2:e3:ce:
d1:2c:3a:c6:32:9a:2b:06:d9:3d:24:65:21:69:2f:
f5:52:de:59:ab:d1:eb:a2:ce:9e:f6:d9:c8:4e:f4:
8f:61:a3:b2:ad:bb:e2:f2:c3:c1:50:57:9e:8e:93:
ce:7d:e9:81:ff:7f:3b:3d:d3:ca:16:f3:d4:c5:19:
aa:53:8f:dd:e2:61:3b:0a:ce:17:26:13:43:f4:eb:
ac:e5:f6:12:cd:2f:9e:1e:18:05:50:df:81:4f:56:
ea:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5B:39:CA:F9:68:9D:79:4F:3E:B0:73:A0:0C:E9:F9:3A:3D:9B:DC
X509v3 Authority Key Identifier:
keyid:0F:AD:1B:D3:46:18:4C:71:92:7C:82:C6:1D:3F:A6:D7:E4:72:EE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/D60b00YYTHGSfILGHT-m1-Ry7p4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D60b00YYTHGSfILGHT-m1-Ry7p4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A455/841C8DDCB1D411EA92F6AA1BC4F9AE02/E57312C6F59611EFAAD00555C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.240.222.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:2a:fb:92:38:d1:f4:56:e9:1f:c9:45:04:38:68:5c:82:6c:
38:08:02:ad:1a:69:7d:35:70:86:e5:03:3a:79:3f:a7:ca:6f:
b7:06:ad:d0:c4:a8:3c:24:36:4d:9d:60:1d:c2:22:2a:ec:d2:
2d:1f:ee:ae:d2:68:65:8f:8d:2d:3d:e7:ce:65:ac:64:37:14:
ad:35:d6:00:b2:e5:5f:d6:e8:51:70:2e:7b:22:a6:89:0e:6a:
ab:01:46:21:10:fd:e9:f2:19:16:6e:b2:1c:5b:67:1d:d2:1d:
02:0a:24:04:10:06:8e:cd:58:6b:23:e8:ca:b8:4c:6b:00:c6:
0a:86:f6:f3:e8:71:08:b3:9b:f6:f4:96:7e:0b:33:c4:31:8f:
03:a0:02:49:c3:93:36:27:00:17:1d:dd:75:6f:99:24:ec:ca:
2c:3a:6b:f7:d4:0c:99:78:29:50:db:c0:e9:13:7f:64:39:cf:
12:e6:d4:c1:4b:2d:1f:49:db:9e:07:f6:7a:5d:6e:12:5a:ac:
ad:19:32:3f:91:81:7d:ea:9d:25:a7:84:ec:8a:18:31:20:5e:
f9:77:95:67:5a:d4:b3:2c:fc:76:26:15:06:29:f9:99:b6:a8:
40:a6:b2:5d:58:ca:33:ca:e4:9e:12:bc:f7:5c:19:6b:bd:22:
84:bb:ae:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:23:04 2025 by rpki-client