Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B2B24A4221D711EB9CFAC46EC4F9AE02.roa
File: B2B24A4221D711EB9CFAC46EC4F9AE02.roa (raw, json)
Hash identifier: WopX8EPUj9ND6qcXFWft9CyuoZSX2+UxPu40b2aj+pc=
Subject key identifier: 15:2F:72:09:D1:2F:F8:81:27:84:1C:C5:A6:BE:A0:31:45:04:A8:F1
Certificate issuer: /CN=A9131690/serialNumber=3474C94C36E8F9A0D3A0D22E1DDA108CD340AB28
Certificate serial: 0F73
Authority key identifier: 34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B2B24A4221D711EB9CFAC46EC4F9AE02.roa
Signing time: Thu 06 Mar 2025 18:06:21 +0000
ROA not before: Thu 06 Mar 2025 18:06:21 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 135386
IP address blocks: 103.133.176.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3955 (0xf73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131690
Validity
Not Before: Mar 6 18:06:21 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c9e41d-050a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:3b:4a:b8:1a:f9:ca:06:76:c7:4c:6f:94:
cb:51:7a:62:fd:cb:e9:bf:0c:6f:08:a7:a0:f5:6d:
1a:97:b3:7e:e9:52:ac:b4:7e:a5:88:46:35:30:eb:
0f:d1:ed:24:0e:7e:05:e4:2b:3a:10:6b:98:72:cc:
94:88:23:2c:e9:bb:27:2d:d3:26:62:e7:b0:36:b1:
ff:9f:47:f4:cc:cc:e0:96:3d:20:30:eb:63:78:b6:
3b:41:b7:e2:dd:1a:c1:25:4c:7d:88:f2:07:64:02:
db:69:1a:36:51:d0:0c:53:f2:a7:0b:07:43:8a:75:
8a:0a:0f:49:20:92:55:a5:ba:2a:aa:37:ab:e3:51:
9d:02:b6:5a:33:20:ef:92:77:40:54:06:5e:3c:45:
ef:5f:02:f9:c1:d6:30:de:23:52:96:75:c0:17:ac:
b8:88:d0:5d:35:98:1e:6a:b4:32:e2:6e:34:c2:77:
a4:d5:2f:62:8c:dd:53:8d:cc:94:09:7d:d8:9c:26:
7a:c9:58:37:3c:97:38:12:71:ab:48:a0:0d:66:1f:
58:b3:cf:5f:d4:99:45:48:60:78:60:73:42:df:34:
d9:b0:21:d1:87:cc:4b:bd:b6:85:c0:8b:dd:55:12:
bd:db:4b:20:af:b9:05:d3:63:6c:02:dd:c9:39:e6:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:2F:72:09:D1:2F:F8:81:27:84:1C:C5:A6:BE:A0:31:45:04:A8:F1
X509v3 Authority Key Identifier:
keyid:34:74:C9:4C:36:E8:F9:A0:D3:A0:D2:2E:1D:DA:10:8C:D3:40:AB:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/NHTJTDbo-aDToNIuHdoQjNNAqyg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NHTJTDbo-aDToNIuHdoQjNNAqyg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131690/15B41B8863F311E9A0854C47C4F9AE02/B2B24A4221D711EB9CFAC46EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.176.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:e3:a5:a0:db:4b:43:c4:04:b0:b3:6a:53:26:5e:9f:d4:2c:
a5:01:39:3d:66:1d:63:5c:a6:c2:ef:84:67:34:60:db:83:24:
6f:19:6d:ef:51:31:3f:47:51:6e:89:8b:e5:f0:8d:25:52:fc:
f2:ea:74:bd:26:02:e8:16:47:ca:98:fc:b9:6b:a8:ce:48:f5:
85:4c:8e:86:fc:9a:2f:e6:90:2e:2f:6d:5c:96:2a:12:cd:be:
d5:86:e7:41:73:93:f3:20:7c:43:09:5f:ea:5e:82:dd:f5:58:
d6:60:14:ab:7f:98:56:c7:83:16:e7:7a:28:0f:ed:ef:05:c1:
8e:d2:ba:7a:06:8a:f1:58:4a:f1:71:0a:b1:d6:d7:94:0a:f4:
46:c4:d6:9f:10:24:17:42:9d:9d:b7:45:0a:77:a8:20:f9:b1:
eb:39:37:43:a0:da:7f:f6:85:39:24:67:ab:77:0d:4a:b0:dd:
85:67:98:a5:73:fa:f1:01:8d:b6:bf:98:3a:4b:03:29:27:49:
9d:ab:89:8d:bb:8a:64:7b:64:f1:49:e7:b4:47:d9:56:70:fa:
e7:ad:17:01:d8:a3:40:af:79:92:89:d9:02:80:16:0b:e5:b7:
38:d3:81:fa:59:ad:ea:64:56:95:78:1c:f4:d0:d9:1a:78:e6:
fc:ab:57:05
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICD3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE2OTAxMTAvBgNVBAUTKDM0NzRDOTRDMzZFOEY5QTBEM0EwRDIyRTFEREExMDhD
RDM0MEFCMjgwHhcNMjUwMzA2MTgwNjIxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2M5ZTQxZC0wNTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwhw7Srga+coGdsdMb5TLUXpi/cvpvwxvCKeg9W0al7N+6VKstH6liEY1MOsP
0e0kDn4F5Cs6EGuYcsyUiCMs6bsnLdMmYuewNrH/n0f0zMzglj0gMOtjeLY7Qbfi
3RrBJUx9iPIHZALbaRo2UdAMU/KnCwdDinWKCg9JIJJVpboqqjer41GdArZaMyDv
kndAVAZePEXvXwL5wdYw3iNSlnXAF6y4iNBdNZgearQy4m40wnek1S9ijN1TjcyU
CX3YnCZ6yVg3PJc4EnGrSKANZh9Ys89f1JlFSGB4YHNC3zTZsCHRh8xLvbaFwIvd
VRK920sgr7kF02NsAt3JOeaVCQIDAQABo4IClTCCApEwHQYDVR0OBBYEFBUvcgnR
L/iBJ4Qcxaa+oDFFBKjxMB8GA1UdIwQYMBaAFDR0yUw26Pmg06DSLh3aEIzTQKso
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTY5MC8xNUI0MUI4ODYz
RjMxMUU5QTA4NTRDNDdDNEY5QUUwMi9OSFRKVERiby1hRFRvTkl1SGRvUWpOTkFx
eWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05IVEpURGJvLWFEVG9OSXVIZG9Rak5OQXF5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzE2OTAvMTVCNDFCODg2M0YzMTFFOUEwODU0QzQ3QzRGOUFFMDIvQjJCMjRBNDIy
MUQ3MTFFQjlDRkFDNDZFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnhbAwDQYJKoZIhvcNAQELBQADggEBAErjpaDbS0PEBLCz
alMmXp/ULKUBOT1mHWNcpsLvhGc0YNuDJG8Zbe9RMT9HUW6Ji+XwjSVS/PLqdL0m
AugWR8qY/LlrqM5I9YVMjob8mi/mkC4vbVyWKhLNvtWG50Fzk/MgfEMJX+pegt31
WNZgFKt/mFbHgxbneigP7e8FwY7SunoGivFYSvFxCrHW15QK9EbE1p8QJBdCnZ23
RQp3qCD5ses5N0Og2n/2hTkkZ6t3DUqw3YVnmKVz+vEBjba/mDpLAyknSZ2riY27
imR7ZPFJ57RH2VZw+uetFwHYo0CveZKJ2QKAFgvltzjTgfpZrepkVpV4HPTQ2Rp4
5vyrVwU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:26:23 2025 by rpki-client