Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/73A482FC9A8C11EAB72EA56DC4F9AE02.roa
File: 73A482FC9A8C11EAB72EA56DC4F9AE02.roa (raw, json)
Hash identifier: ZywlM5GpBNObiLKXkyaLQIw8TaELpknwXgtbraf7xO8=
Subject key identifier: 6B:EA:17:94:1E:61:8E:81:2B:8A:14:69:C3:9F:6F:A3:2D:A1:A9:C6
Certificate issuer: /CN=A913DA4A/serialNumber=6B732DF0884AAD66A5D5A1EFE9A60DCDE3B9BE55
Certificate serial: 08FB
Authority key identifier: 6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/73A482FC9A8C11EAB72EA56DC4F9AE02.roa
Signing time: Tue 31 Dec 2024 20:28:48 +0000
ROA not before: Tue 31 Dec 2024 20:28:48 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 37973
IP address blocks: 203.176.191.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2299 (0x8fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DA4A
Validity
Not Before: Dec 31 20:28:48 2024 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67745400-3848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:60:08:c1:71:00:77:37:8b:6e:ff:13:64:
48:cb:87:44:ea:1d:1d:31:3c:5c:30:37:c1:94:4c:
3d:ed:86:68:a2:4d:d2:76:a2:99:31:7c:bb:4c:78:
d6:61:3a:96:07:f8:df:fc:50:59:46:56:f6:fb:d3:
82:7b:53:83:e4:80:b3:a5:bf:9f:61:ed:4c:85:a7:
e3:19:82:3c:92:a5:55:6b:90:cc:e3:74:8e:f0:87:
11:5a:a8:16:11:9a:56:96:ab:98:62:61:3a:bc:4c:
27:92:7d:b9:03:19:f9:c8:e5:0b:13:df:e9:a2:b0:
4f:ca:3c:73:bb:ec:9f:29:a5:2c:7f:a6:8d:cc:69:
cf:cd:c3:90:ea:1d:c4:a9:24:d3:a8:78:e3:0f:35:
f7:cc:29:f3:9d:5b:05:84:a6:db:6e:97:c3:17:79:
1f:8c:cd:b0:69:39:ba:2e:6f:6a:bc:c3:49:7e:4f:
78:b9:c7:9c:e3:00:96:df:85:e0:aa:6a:d2:70:c9:
f7:65:11:bd:b6:f2:1e:da:f5:5d:b6:4f:62:01:95:
67:d8:71:09:82:82:b1:fa:69:f7:6b:5e:42:8f:57:
d7:8c:80:dd:9b:68:72:45:4b:43:65:93:84:a7:6d:
a7:b4:79:61:d4:d8:d7:d7:2a:05:ed:4e:0b:aa:c1:
21:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EA:17:94:1E:61:8E:81:2B:8A:14:69:C3:9F:6F:A3:2D:A1:A9:C6
X509v3 Authority Key Identifier:
keyid:6B:73:2D:F0:88:4A:AD:66:A5:D5:A1:EF:E9:A6:0D:CD:E3:B9:BE:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/a3Mt8IhKrWal1aHv6aYNzeO5vlU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a3Mt8IhKrWal1aHv6aYNzeO5vlU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DA4A/1BA4A6F29A8911EA8EC54264C4F9AE02/73A482FC9A8C11EAB72EA56DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.176.191.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:6c:c2:dc:58:23:95:9c:c1:f9:88:76:30:24:2c:a7:19:00:
ec:cd:f3:76:e2:aa:dc:33:a0:58:cd:25:8d:c6:0f:55:ee:63:
ae:3c:b7:52:6a:9c:3a:90:21:09:7c:ef:a1:f0:b4:de:ae:e6:
9a:4f:b6:ad:d2:78:ea:a1:93:c1:c1:69:f9:3a:d8:92:39:8d:
19:74:f5:12:c2:ed:32:f5:c1:83:22:5e:c9:e7:ad:80:7f:fb:
73:f7:f3:52:21:46:9f:b3:97:1e:0f:e1:33:12:e5:d9:d7:57:
e8:19:74:ab:cd:1f:e1:8a:26:ff:6a:90:b3:4b:24:94:46:0b:
32:0a:2b:06:d2:24:13:bf:18:43:d2:ba:3f:09:e6:47:85:40:
31:42:04:99:f5:49:01:0a:70:a3:9f:1f:ba:d3:0a:fe:df:99:
86:2f:15:12:c9:1d:41:75:6f:d4:ec:4c:15:5d:2c:ed:34:63:
b0:9c:6b:08:43:71:1b:33:1e:d6:8d:19:d3:69:dd:db:8d:f0:
42:f1:5c:37:d9:60:c8:a4:e6:95:73:c6:0a:0e:e6:19:9e:b0:
0a:12:81:58:e1:3e:4d:ec:97:f6:dd:01:98:aa:cf:68:3a:2f:
a4:3e:cf:98:bf:f0:82:74:03:6c:58:7a:d4:b3:68:87:18:b8:
ba:ac:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:02 2025 by rpki-client