Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/121437B45ABB11EF8C696E58C4F9AE02.roa
File: 121437B45ABB11EF8C696E58C4F9AE02.roa (raw, json)
Hash identifier: Sr1dJPYf4TMlmdyHmkZ3DvPV6/M5+cUFUvIXCjxQ2mk=
Subject key identifier: AD:89:CB:D4:94:76:39:A9:47:6B:FB:A2:CE:F0:45:E1:10:FB:63:AA
Certificate issuer: /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Certificate serial: 0302
Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/121437B45ABB11EF8C696E58C4F9AE02.roa
Signing time: Tue 11 Feb 2025 01:24:31 +0000
ROA not before: Tue 11 Feb 2025 01:24:31 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 133929
IP address blocks: 103.180.24.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 770 (0x302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91380B5
Validity
Not Before: Feb 11 01:24:31 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67aaa6ce-f66b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:fb:03:fd:9b:72:2c:5a:11:8e:15:07:72:
58:6a:b2:a8:78:bd:77:bb:24:2b:7c:62:d1:8d:a8:
a5:32:7e:5a:6d:7b:d8:70:5c:8f:9b:67:2d:f2:6f:
b4:75:47:3a:de:5c:1b:2e:fc:10:ff:a0:a3:41:a8:
0a:0d:42:cb:29:df:eb:1c:97:d3:70:c4:d1:1f:cd:
4f:1c:01:75:94:cd:09:6f:c9:21:98:9f:6a:fc:7b:
c0:15:e5:c0:b5:ec:43:40:96:a6:dd:55:2a:a1:aa:
a9:8a:18:7e:0e:26:69:21:6a:d2:87:44:22:f3:90:
e4:18:9b:f8:78:69:fe:b9:a2:0c:ee:39:63:82:61:
22:3c:62:da:96:15:4e:37:54:1b:44:e9:1a:89:9c:
1f:10:b7:32:0a:ab:24:1b:cf:d9:0e:73:96:29:92:
6f:67:22:b3:5d:12:1a:d1:e3:bc:5f:2c:e6:ef:b7:
e4:8f:24:d8:de:11:8f:30:8e:92:42:d9:bc:44:dd:
a3:4f:21:6b:48:32:30:5f:8d:b6:83:d6:a3:84:26:
dc:39:d0:f1:2f:f3:ee:3c:27:ec:a9:69:65:98:d4:
c1:93:f3:cb:19:26:0b:da:ac:97:3a:51:8a:23:8f:
48:ba:c6:f7:6c:1f:61:ab:56:39:3b:a1:58:b4:e5:
a3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:89:CB:D4:94:76:39:A9:47:6B:FB:A2:CE:F0:45:E1:10:FB:63:AA
X509v3 Authority Key Identifier:
keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/121437B45ABB11EF8C696E58C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.24.0/24
Signature Algorithm: sha256WithRSAEncryption
25:87:6e:35:b8:4a:26:27:08:47:dc:da:c8:73:9a:1d:2d:e3:
e5:44:31:3f:d9:83:18:bd:73:07:6f:87:49:84:4e:23:38:3c:
17:66:64:d0:29:85:3a:8f:b3:40:1a:da:46:01:91:0a:4a:61:
18:a5:09:7e:5c:19:6d:dc:c6:9f:52:96:b6:04:d2:8e:70:06:
fc:99:39:70:18:0f:59:5f:5c:39:c2:d2:72:59:6b:f0:d1:cb:
55:ec:bf:8f:57:82:bb:9f:ee:ca:cc:db:ef:4a:61:00:0c:86:
6d:74:8f:f0:75:b5:8a:44:6d:ae:31:15:5b:d4:06:b4:69:80:
02:96:0c:be:fb:ed:1b:9a:bc:73:af:74:89:bd:be:9e:0c:3a:
3a:eb:54:f9:5c:27:e6:3c:5f:be:2e:f0:22:4b:7d:bf:2e:ea:
d9:7e:a4:0d:ba:6f:b1:f7:70:44:11:e4:6b:ec:33:e5:d4:32:
9d:61:5f:11:b3:b3:3a:23:5b:91:e0:55:25:8c:c3:63:70:ce:
59:5f:e1:76:74:aa:73:3a:63:75:91:34:0c:e8:a4:c3:8d:32:
88:c8:0e:7c:71:41:72:c8:ca:db:59:f3:29:2f:80:49:8b:b9:
e0:84:dc:77:cf:5d:79:4a:e5:8f:27:ee:a5:1a:7f:5f:e2:81:
33:cf:d5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:00:51 2025 by rpki-client