Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/6466C8EC580611ED80380F1FC4F9AE02.roa
File: 6466C8EC580611ED80380F1FC4F9AE02.roa (raw, json)
Hash identifier: GU/qaQfL49PoNvELPGcK9qRHGiHAAoPMeXt0zdyWObw=
Subject key identifier: E0:D9:06:E8:13:F8:AD:BA:16:EE:C1:A0:07:7C:46:55:24:6B:26:B2
Certificate issuer: /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Certificate serial: 017D
Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/6466C8EC580611ED80380F1FC4F9AE02.roa
Signing time: Tue 07 Feb 2023 05:14:15 +0000
ROA not before: Tue 07 Feb 2023 05:14:15 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 136050
IP address blocks: 103.180.25.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91380B5
Validity
Not Before: Feb 7 05:14:15 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63e1de27-8016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fc:c7:a7:f8:27:cb:88:80:b8:92:60:5d:22:
4b:fe:bf:08:9e:68:08:ae:cf:58:e9:1d:49:b7:fd:
30:22:2e:ca:1b:ef:f5:b1:f1:f8:ab:7e:0c:8a:82:
b8:09:30:f1:df:5a:4b:d6:21:8f:56:1a:65:47:fb:
d5:28:15:2c:ff:72:d1:ae:a5:82:0a:3f:f7:8c:3b:
1e:37:9b:c1:63:19:40:f9:78:20:06:18:79:e6:44:
a0:39:0d:10:67:0b:7d:e0:e2:f1:45:ee:2a:10:f1:
ed:18:78:48:02:f1:97:ab:be:97:55:0b:69:68:f8:
61:7e:37:23:1c:20:15:03:d1:cb:61:75:fc:32:93:
e4:6b:3c:21:b0:eb:8c:78:4a:bf:32:62:8c:e7:63:
a4:cc:c5:1e:b7:fb:60:5d:20:49:00:84:30:3d:7b:
77:d8:62:74:b2:5d:85:ce:de:c8:0b:01:18:93:23:
4b:a1:a6:8c:9e:53:28:cb:f1:b3:bb:b9:7f:f8:6d:
9f:af:d3:fd:07:85:c0:7e:e2:23:01:fd:9a:7c:bc:
ab:35:da:ce:fc:c6:4f:f4:34:d3:bb:6d:45:27:a6:
cd:91:50:cd:fe:16:b8:0f:62:d5:f4:33:55:cd:5e:
f9:93:3a:79:f2:85:e9:55:a5:a5:65:62:da:4c:c6:
b8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D9:06:E8:13:F8:AD:BA:16:EE:C1:A0:07:7C:46:55:24:6B:26:B2
X509v3 Authority Key Identifier:
keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/6466C8EC580611ED80380F1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.25.0/24
Signature Algorithm: sha256WithRSAEncryption
29:e2:ad:90:7e:aa:ca:d1:14:93:a9:71:3e:ee:d0:cf:1b:c6:
70:09:5c:68:09:91:b2:17:ae:f8:1b:ca:b2:63:94:12:d4:b5:
ff:9c:e6:e2:ad:2a:87:c6:f1:ed:fd:ba:9f:ab:bd:03:2b:4a:
5c:7c:e9:6b:46:e3:7b:e1:08:bf:e3:d5:17:11:7a:9e:39:e2:
2d:c7:97:31:10:08:e9:0d:36:2d:73:5d:7b:dc:91:0f:e3:b5:
52:da:17:31:3c:97:63:91:ac:56:41:d1:48:2e:d7:5e:5f:8c:
df:e6:bb:ed:83:39:25:f5:eb:c4:3f:57:dd:49:b3:cf:36:99:
93:a4:32:ac:6c:27:f6:cf:f3:f9:ae:e2:d1:e6:cc:3f:84:c3:
e8:c9:dc:8b:6e:bb:71:b7:e3:84:73:c5:b4:4d:76:0c:cd:fc:
db:0b:47:d4:69:22:90:98:52:ab:5c:ec:b0:76:3c:a9:b2:ca:
f3:36:80:64:53:06:91:d7:d1:ec:a1:6a:64:ad:4d:e8:ca:e4:
2e:93:c0:6a:0a:ed:e8:64:ce:63:10:c1:87:e0:66:ad:64:ce:
38:48:c1:7e:52:91:7a:a4:e9:f3:6d:50:24:e5:d3:3f:2a:52:
c9:0c:9e:f6:43:24:f8:84:f6:7a:35:25:2f:9e:74:e5:7d:5f:
f7:a6:86:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:15:36 2025 by rpki-client