Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/D353090841F711ECB1465157C4F9AE02.roa
File: D353090841F711ECB1465157C4F9AE02.roa (raw, json)
Hash identifier: hyTgYf3yNb3P1osKlb2mkzCC43nsvagjPiYm8g/bHPk=
Subject key identifier: 9C:E3:35:57:82:C5:5D:34:41:9E:5B:CB:B3:D1:82:43:A0:58:26:5A
Certificate issuer: /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Certificate serial: 0A94
Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/D353090841F711ECB1465157C4F9AE02.roa
Signing time: Sat 08 Feb 2025 19:38:11 +0000
ROA not before: Sat 08 Feb 2025 19:38:11 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 63889
IP address blocks: 103.148.150.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2708 (0xa94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913258C
Validity
Not Before: Feb 8 19:38:11 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67a7b2a2-acc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1e:1f:91:82:fb:6f:01:1c:fb:7f:c4:b6:f6:
71:c1:de:ea:61:35:c4:e2:14:7f:34:0f:61:75:0b:
be:1b:77:9f:56:c2:3d:60:f9:af:69:3d:c1:35:da:
86:af:62:03:1c:a9:bd:47:53:b4:0d:b7:cb:66:77:
e1:d1:06:84:7c:fd:31:38:a4:b3:98:95:6c:ab:07:
dd:ad:c0:e1:70:4f:39:de:f3:cf:94:c6:c1:61:4d:
59:79:c6:31:e8:2d:b1:f1:7e:0d:62:3d:50:e1:11:
08:8f:bc:60:51:59:bf:0f:02:b1:74:39:73:fd:44:
3d:17:b1:df:94:6a:dd:9f:d4:36:f9:9c:22:11:47:
cb:2f:20:98:ed:b1:f3:9f:ce:43:f0:00:a5:cf:be:
6a:a6:1d:34:44:38:04:9b:34:58:1b:56:08:51:48:
28:05:a9:40:55:72:12:75:e4:04:dd:b6:ba:95:31:
af:25:35:db:ce:6c:5e:68:e7:c6:12:c7:c6:78:57:
50:89:1b:7d:8c:53:34:b6:04:b8:a0:06:1d:0d:65:
5f:fd:9a:0c:2a:93:d3:32:88:b7:24:25:c8:e0:c6:
c1:ca:de:12:46:b3:73:72:2a:fc:6f:de:b3:88:7b:
31:83:80:86:4a:f7:79:67:1d:0f:38:0f:7b:99:6a:
15:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E3:35:57:82:C5:5D:34:41:9E:5B:CB:B3:D1:82:43:A0:58:26:5A
X509v3 Authority Key Identifier:
keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/D353090841F711ECB1465157C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.150.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:9a:f0:31:36:54:12:0a:02:7f:ac:fb:28:09:d4:b3:21:25:
de:40:ec:a4:05:d5:ff:63:44:1e:e2:64:16:ec:30:6b:53:61:
f8:be:ca:b9:a9:e4:65:85:18:df:d3:22:39:e0:8c:0a:3f:81:
5b:5b:e5:e1:c2:05:72:92:bc:e1:2b:6d:fb:b5:28:78:9a:ba:
81:e5:f9:ba:3f:ba:3a:6a:f2:56:cc:a2:d0:44:38:8e:a7:12:
c1:e8:1b:a6:e6:ce:7d:cb:ac:90:d3:2e:59:f9:08:00:ae:b0:
32:58:73:b4:44:fc:18:c0:dc:c4:05:b8:18:6a:f9:19:43:60:
1d:10:e7:3b:00:c5:85:98:6d:73:28:74:92:f7:21:d5:ad:24:
48:09:82:c1:4f:f8:40:93:be:68:1d:db:66:4a:3e:09:e0:17:
9d:a3:2a:13:f9:23:88:47:11:21:2b:1b:79:50:0a:24:4f:9e:
d9:0c:bd:a8:9c:e1:a9:fd:b9:64:40:02:0b:c0:68:c7:3a:8a:
c1:68:6c:69:8c:ee:63:7e:6c:ad:ec:47:10:fd:4d:90:b0:e6:
2c:e4:a2:80:2a:2d:dd:7f:fb:ad:b4:f9:b2:7d:5f:64:e8:87:
87:5a:ff:1c:ae:c0:4b:44:55:83:e0:0d:71:bd:fe:41:89:16:
84:0a:bd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:37 2025 by rpki-client