Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/04758F0AA43411EAA22B0871C4F9AE02.roa
File: 04758F0AA43411EAA22B0871C4F9AE02.roa (raw, json)
Hash identifier: gLtq1uRfz9P1m1h8+/+e4fI782kx3+paUmd4vGjKTlg=
Subject key identifier: 4C:67:F7:E4:77:D5:97:C7:B2:DC:88:56:1D:2C:6A:65:B5:D9:8B:B3
Certificate issuer: /CN=A913E9AD/serialNumber=416A544CB50AEA47039F13BC58C3410C7FE688CE
Certificate serial: 08F4
Authority key identifier: 41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/04758F0AA43411EAA22B0871C4F9AE02.roa
Signing time: Sat 22 Mar 2025 20:40:24 +0000
ROA not before: Sat 22 Mar 2025 20:40:24 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 7642
IP address blocks: 103.87.188.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2292 (0x8f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913E9AD
Validity
Not Before: Mar 22 20:40:24 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67df2038-7c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:aa:89:8e:92:fe:49:c8:8d:a1:4d:21:f3:3c:
17:ec:77:4a:e0:be:fe:ba:f8:6f:71:87:b2:a1:73:
36:10:ad:05:2e:6b:15:2d:72:50:50:52:ce:65:00:
ea:a2:1f:ab:62:58:f6:56:c0:20:ab:e2:6c:aa:3d:
ac:c2:8f:9d:7b:99:46:b4:f8:d3:b7:05:70:2d:e9:
88:07:2c:a4:c6:1d:54:e6:98:25:bc:a1:b9:29:5c:
e6:01:8d:e5:8c:a8:da:45:ff:62:a8:42:84:bb:d4:
9b:86:8a:54:ae:3b:de:8a:31:8e:99:1d:3c:cc:e7:
8f:e7:09:4e:77:f1:66:34:21:21:33:05:19:fe:0a:
bc:9a:9e:0d:69:84:04:e1:12:46:74:c4:57:6a:67:
a2:b8:f8:51:ed:90:ee:1a:37:c3:8a:bd:37:69:31:
c1:d6:07:4a:b0:23:be:ed:06:67:24:4f:19:f1:09:
c7:5d:48:a7:45:36:0b:91:f5:09:4b:8f:ba:4b:04:
82:51:de:5b:66:20:5d:22:2a:7e:df:1d:99:13:92:
0b:91:c0:2d:e8:5d:40:03:39:10:ef:05:15:51:42:
d1:cb:06:9c:ac:94:1e:4a:ef:21:1a:a9:3c:97:b1:
22:03:6d:c2:26:08:35:aa:2f:ee:b0:e3:46:c3:f6:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:67:F7:E4:77:D5:97:C7:B2:DC:88:56:1D:2C:6A:65:B5:D9:8B:B3
X509v3 Authority Key Identifier:
keyid:41:6A:54:4C:B5:0A:EA:47:03:9F:13:BC:58:C3:41:0C:7F:E6:88:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/QWpUTLUK6kcDnxO8WMNBDH_miM4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QWpUTLUK6kcDnxO8WMNBDH_miM4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E9AD/FD723C50A43111EAB7721E6AC4F9AE02/04758F0AA43411EAA22B0871C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.87.188.0/24
Signature Algorithm: sha256WithRSAEncryption
98:7f:24:f7:f1:e4:bd:59:8c:5d:44:62:18:6e:a0:7b:47:9a:
76:ef:69:cf:16:5b:a4:f6:db:91:46:79:3f:fc:58:5b:18:01:
23:3b:ab:77:7f:a6:9f:84:8d:1d:db:2c:4c:f3:b1:be:6f:2a:
d8:ab:6e:ae:c8:07:89:0a:f7:b8:a2:37:64:2c:b5:e6:39:56:
14:df:fb:ba:05:b0:c1:23:9c:d6:ee:34:d9:9a:09:cc:fd:ab:
a9:3c:82:f7:ae:83:b8:ed:c8:b0:d4:5f:a4:0e:c6:13:a7:bc:
48:29:75:55:b2:ac:83:ec:d8:d0:c4:dd:e9:af:2b:33:3e:24:
59:6d:86:03:7d:95:7e:34:b1:3e:4b:7c:fd:96:21:8b:da:a0:
7f:22:1f:69:6b:80:28:42:46:fd:dd:35:3c:4a:ec:f6:70:e0:
0b:00:5a:8f:92:eb:eb:aa:47:d2:42:1c:99:37:0a:67:12:6e:
9d:df:c0:ac:e4:96:28:c9:30:19:50:9e:2d:9d:bd:ad:d0:af:
94:57:54:55:9e:d1:9d:10:ad:56:81:bd:7a:72:ef:16:50:27:
8f:ea:76:56:ce:e1:29:7e:3e:c4:f7:ed:71:7c:4c:83:b6:e2:
78:ca:26:98:62:27:63:57:a6:7f:2d:92:cc:f5:7e:df:bf:e3:
dd:eb:b4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:15:54 2025 by rpki-client