Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/0DA4853256FC11EC8032440FC4F9AE02.roa
File: 0DA4853256FC11EC8032440FC4F9AE02.roa (raw, json)
Hash identifier: VvXC5qsmdR6YGob44Y/Iy57cV4LdW3QDFZsUSIeluVE=
Subject key identifier: A3:F4:A6:B4:EE:14:D3:DA:37:77:5C:57:8F:40:F9:B9:81:BD:A5:86
Certificate issuer: /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Certificate serial: 038F
Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/0DA4853256FC11EC8032440FC4F9AE02.roa
Signing time: Tue 21 May 2024 03:06:24 +0000
ROA not before: Tue 21 May 2024 03:06:24 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 133451
IP address blocks: 103.132.232.0/24 maxlen: 24
103.212.192.0/23 maxlen: 23
103.229.248.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 911 (0x38f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9138A50
Validity
Not Before: May 21 03:06:24 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=664c0faf-6c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:03:3f:f5:7f:b3:e5:5a:68:42:42:7b:70:
a5:f4:0b:32:9b:d0:09:95:98:ea:ac:bb:4b:a2:0a:
79:e2:a4:bd:50:ff:e4:1f:31:e9:95:29:5f:e5:2a:
71:33:64:8c:10:5b:e8:92:13:ca:3f:cf:af:85:11:
04:67:80:66:99:26:2d:3d:ce:05:df:ee:2c:b7:73:
82:6c:49:36:2e:64:eb:5a:65:7c:46:4a:e7:0b:61:
f8:47:2a:52:7f:fb:03:e2:bc:ed:da:11:42:99:fa:
c5:66:38:af:8a:69:55:b1:c2:7c:c9:b2:8b:29:f4:
5f:a5:bc:f8:93:ae:cc:34:7c:ac:01:de:9d:3b:be:
d7:0b:d8:af:e2:bc:c5:5c:3c:55:81:5b:22:87:12:
8a:f1:e7:4a:e2:bb:64:af:65:07:af:c0:50:16:ce:
72:3a:f2:6f:0b:51:d7:e6:5a:61:63:b2:3a:2e:cc:
12:70:ff:04:9b:0a:df:27:5e:f2:d9:0f:f5:00:82:
91:c8:76:d7:1d:13:19:a9:af:17:29:e2:16:49:ad:
12:cf:fb:5f:41:93:52:c5:05:b2:86:bc:91:f4:3b:
93:69:7e:eb:83:ac:21:1f:f3:10:41:f0:28:79:43:
47:2a:1c:4d:97:33:fb:d5:34:02:2f:f1:bb:a0:a2:
fc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F4:A6:B4:EE:14:D3:DA:37:77:5C:57:8F:40:F9:B9:81:BD:A5:86
X509v3 Authority Key Identifier:
keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/0DA4853256FC11EC8032440FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.132.232.0/24
103.212.192.0/23
103.229.248.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ce:d1:66:54:7f:84:08:81:0c:36:ce:aa:9a:cb:63:1f:bc:
73:67:76:95:99:fd:79:4e:f8:73:01:27:57:4a:71:16:92:dd:
aa:3a:e4:57:44:9d:4d:d7:9a:c9:d6:5a:7a:76:7d:68:9a:a7:
8c:92:7d:97:38:fa:a8:95:20:40:fa:bf:72:3d:ce:3c:40:f1:
ea:ff:2c:c8:21:5e:96:af:32:b6:22:d2:09:3c:44:1e:ea:97:
6c:8f:f0:58:43:0e:68:f1:d0:37:8e:14:26:e9:02:19:c7:62:
58:c6:c5:9b:3b:64:6d:62:e7:d3:ee:39:4d:60:c0:e1:a4:d0:
dd:90:a7:d8:ff:b2:38:f4:8b:c8:48:e6:ba:3e:b9:e6:0a:e0:
56:3d:91:7d:3b:00:6c:e8:85:61:3b:bc:51:09:39:31:4a:b6:
9e:e1:1e:ad:eb:03:9e:fd:0a:79:f1:70:53:b0:ce:16:ea:aa:
b9:ea:de:81:59:35:37:02:dc:d8:dd:82:27:43:13:02:f7:dd:
5d:94:53:d9:cb:01:32:1a:9d:02:ae:9b:40:a2:0e:f2:18:1f:
63:b6:6c:ad:37:78:88:98:73:2a:dd:87:35:b6:d7:cf:84:e0:
c3:24:22:a4:9f:79:e5:0e:28:a4:36:3e:9e:e7:ca:32:33:d0:
60:af:83:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:58:04 2025 by rpki-client