Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/4AB7A910321C11EF9E87D582C4F9AE02.roa
File: 4AB7A910321C11EF9E87D582C4F9AE02.roa (raw, json)
Hash identifier: IWsNQTcMNZCIYRCXuETJFZmlLwkTa3oCDru3o4pBSFg=
Subject key identifier: 2A:A7:F8:29:DF:87:A1:67:28:F9:57:44:A5:2B:E7:B2:49:88:9D:CD
Certificate issuer: /CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE
Certificate serial: 044C
Authority key identifier: 8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/4AB7A910321C11EF9E87D582C4F9AE02.roa
Signing time: Thu 05 Dec 2024 00:03:19 +0000
ROA not before: Thu 05 Dec 2024 00:03:19 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 400619
IP address blocks: 43.251.224.0/22 maxlen: 24
103.43.8.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1100 (0x44c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C40D
Validity
Not Before: Dec 5 00:03:19 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6750edc6-af21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:f8:ea:62:c2:e9:53:e9:e7:b1:70:9d:bb:
22:a4:d3:c3:c8:d5:d7:76:45:40:b6:53:dc:a8:4a:
00:5c:17:d4:aa:21:eb:2d:15:61:b2:f4:de:94:69:
21:08:4d:10:83:18:a9:78:8c:50:97:10:82:aa:8b:
54:ae:83:b1:b8:c4:23:99:49:83:67:cb:29:e5:34:
1d:90:4d:67:4e:83:10:ee:27:8d:0a:bf:4d:a4:e1:
da:92:0b:48:1d:ca:08:d5:49:0c:4b:21:d6:d3:86:
d3:10:8c:cf:f2:ab:16:bd:0d:15:16:45:8d:75:23:
82:08:fe:64:51:2b:5f:28:b8:48:ae:4f:0a:ab:8a:
b9:75:17:83:93:85:2f:ea:be:31:79:7b:c4:df:65:
65:32:64:b4:d5:15:6f:2a:6b:36:c3:38:67:ea:30:
3b:7c:df:48:19:89:a6:55:2a:7f:c0:8d:a1:f6:74:
4f:41:56:93:fd:6b:9e:1b:c6:40:84:25:7d:a2:4f:
a4:4c:61:ef:d1:34:4b:98:5f:b9:53:18:3f:91:58:
6e:1e:fc:98:23:cf:8d:8e:37:8a:8a:80:21:97:56:
66:6c:2a:f6:f9:f3:33:3a:e2:e0:12:d2:92:8f:39:
72:f4:62:4a:34:15:04:f9:ee:75:a6:71:40:06:70:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A7:F8:29:DF:87:A1:67:28:F9:57:44:A5:2B:E7:B2:49:88:9D:CD
X509v3 Authority Key Identifier:
keyid:8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/4AB7A910321C11EF9E87D582C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.251.224.0/22
103.43.8.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:7e:8a:06:17:17:e2:0e:98:1d:86:39:7d:4a:20:25:c4:ce:
da:1a:08:3c:23:80:45:9f:8e:81:23:12:cf:f9:ed:ea:57:ac:
bd:46:a8:49:65:70:f5:0e:5b:fb:3e:e5:8c:e0:60:4e:aa:d2:
50:b3:c4:9d:cd:bb:a7:87:08:01:0d:6c:76:8e:5f:86:9b:2f:
54:14:b0:2d:c1:f5:a1:00:e3:b8:a6:7b:11:81:8b:a3:de:2c:
30:93:3f:f3:1f:e0:2e:52:ff:fc:eb:cb:8e:de:92:f0:8d:7a:
8b:58:22:34:65:6d:b6:a2:a5:79:71:80:ff:cc:0d:ca:01:cf:
36:37:6e:66:f2:4f:e4:4a:7a:46:89:ca:2f:f9:ab:a0:e7:a8:
9b:04:fe:20:4c:f1:ce:67:d4:2d:94:30:fe:4b:de:e9:5b:5d:
fa:0d:69:1f:1b:23:f2:37:63:be:9e:7b:49:a9:d4:f6:48:7d:
82:7a:ce:cb:2f:f0:78:ab:9f:89:3a:2d:6f:52:0d:e2:d0:94:
ce:0f:b4:e3:50:8c:f1:f1:47:4e:56:8f:2c:33:c0:c6:c6:68:
af:e0:57:5a:0b:84:d3:e1:94:05:70:35:6a:39:c5:c7:41:9f:
e7:0f:6c:01:24:cc:fd:ed:ce:95:23:69:33:c9:66:d4:1c:03:
f0:50:90:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:23:03 2025 by rpki-client