Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/073C2C80C4C411EEA7C8041DC4F9AE02.roa
File: 073C2C80C4C411EEA7C8041DC4F9AE02.roa (raw, json)
Hash identifier: +NoTiVoOFpuwdO/IMcCankOcyEeq0d7jzR0LbMB2Mow=
Subject key identifier: 9F:5F:CA:97:87:B4:68:A5:2F:38:DC:A3:BA:75:5D:AC:AC:2F:87:6B
Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial: 0D02
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/073C2C80C4C411EEA7C8041DC4F9AE02.roa
Signing time: Thu 26 Dec 2024 18:16:30 +0000
ROA not before: Thu 26 Dec 2024 18:16:30 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 151629
IP address blocks: 103.89.24.0/24 maxlen: 24
103.89.25.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3330 (0xd02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC44
Validity
Not Before: Dec 26 18:16:30 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=676d9d7e-cb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:97:2c:df:0e:18:79:7b:75:4b:da:ff:e1:
de:20:2e:8d:b7:3d:a3:3b:ca:82:63:54:4a:64:9d:
4d:2c:41:91:d0:ab:6a:f7:b5:7e:ae:97:e0:c9:65:
d3:73:a3:03:56:2a:bb:4d:5f:2b:8e:e3:6a:3a:9a:
99:04:55:cb:2a:3c:ea:ba:2b:ee:f1:74:c4:53:7a:
f8:5b:5f:4d:df:30:1d:fc:53:c9:24:07:6e:19:64:
c1:09:34:2a:fe:37:6c:49:e8:bc:7c:d3:e8:99:6f:
ae:f1:0d:51:d3:51:35:b0:f8:3a:85:80:b4:7b:e6:
b6:72:96:b4:9d:12:cd:1e:62:07:fc:95:53:de:a7:
d4:f7:2e:4d:07:1f:e6:6b:c1:0a:0e:85:ad:8d:c6:
ec:67:6c:85:23:39:04:ea:cf:e2:41:2f:c1:52:d7:
72:3e:86:f3:6b:44:a6:27:d0:a4:81:de:f5:cf:e8:
a3:de:9b:02:02:30:e5:27:3a:2b:7f:30:29:0c:95:
25:1a:bf:03:d4:56:fa:48:55:aa:be:0f:5d:c9:03:
cd:a6:5c:86:d4:80:a3:29:69:a6:23:55:11:5d:91:
b2:5c:43:e2:04:d1:e4:42:ca:5e:01:15:0f:45:6d:
e0:55:83:97:8f:b1:95:27:85:47:89:6d:2c:53:f1:
18:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5F:CA:97:87:B4:68:A5:2F:38:DC:A3:BA:75:5D:AC:AC:2F:87:6B
X509v3 Authority Key Identifier:
keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/073C2C80C4C411EEA7C8041DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.89.24.0/23
Signature Algorithm: sha256WithRSAEncryption
26:64:a0:57:0a:c3:0c:51:dc:3e:a2:d7:3f:44:d4:6b:d1:0b:
a8:b7:69:2f:71:8d:46:f7:8b:eb:56:c3:cf:cb:c7:02:dc:48:
98:6d:cc:ba:a9:07:5e:0e:24:47:bf:48:85:57:e0:8d:37:15:
8d:c4:9c:f2:fc:6c:94:0e:14:61:00:da:5c:6d:fa:82:e1:fb:
71:c7:65:40:f9:9a:f8:3c:84:a8:ce:60:05:7d:29:8e:ed:90:
2d:d1:66:6b:f5:59:b4:8a:75:41:85:20:d7:43:18:ec:db:c7:
4d:50:8d:de:17:5d:aa:7a:09:f3:2a:6b:cd:ed:18:8e:d2:ac:
8f:3a:8e:9a:49:95:c1:a3:b2:cb:6d:9a:af:ab:f3:38:70:d8:
22:2c:3e:64:53:39:ed:c0:21:aa:a4:cd:81:cb:96:3b:2d:2b:
e8:fb:86:dd:19:f2:72:12:77:8e:8d:20:50:8d:49:63:bb:c5:
93:6d:89:81:da:5d:bc:34:2a:0d:78:c9:ab:80:95:84:f2:af:
8d:b2:5c:34:6c:b3:d3:87:9f:75:21:9b:ef:45:92:ac:94:08:
f3:53:34:41:f7:de:eb:dc:66:42:62:46:f9:e2:6a:8f:22:f3:
96:8a:6c:a2:e4:a6:a8:4c:51:51:2d:2a:49:29:fe:ed:94:da:
87:fe:3d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:25:53 2025 by rpki-client