Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/CA08C348098D11EDAB30E934C4F9AE02.roa
File: CA08C348098D11EDAB30E934C4F9AE02.roa (raw, json)
Hash identifier: aPI8mVL7Dstx7y3IRo2S4CN1FA4wN8FwOnV7yts7LdY=
Subject key identifier: BD:8B:B9:23:51:F8:B8:01:38:DB:BC:71:40:9B:EA:55:8A:9B:43:98
Certificate issuer: /CN=A9141586/serialNumber=AC23F54D30150B46009C1A029E5EECDB6E055656
Certificate serial: 01F5
Authority key identifier: AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/CA08C348098D11EDAB30E934C4F9AE02.roa
Signing time: Sun 25 Aug 2024 03:05:28 +0000
ROA not before: Sun 25 Aug 2024 03:05:28 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 137817
IP address blocks: 103.191.140.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 501 (0x1f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141586
Validity
Not Before: Aug 25 03:05:28 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66ca9f77-fe8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:17:ea:e5:1a:70:48:bb:ea:b6:b8:07:5f:2b:
8d:d6:91:44:de:38:bf:9e:43:7b:d9:94:67:1a:32:
8a:7f:47:4c:6f:91:dd:95:4e:d4:45:04:17:b4:e2:
4b:30:d6:b8:ab:60:cf:dd:dc:a2:aa:61:6e:d3:00:
01:1b:ad:e4:45:15:d9:54:ad:f0:ca:2a:bf:59:9a:
20:3f:63:09:29:ff:1c:84:6b:05:cb:45:c1:6f:31:
65:99:53:56:73:33:cf:26:db:e3:9d:c1:55:2c:83:
07:af:be:ef:4d:93:84:81:c1:24:70:4c:98:62:80:
c0:ee:d7:3f:69:6b:4e:06:cf:45:e7:70:01:9e:b1:
52:a0:24:f5:8c:35:8e:03:d3:7d:29:56:0a:85:fd:
6b:52:ad:5c:68:93:ca:c7:5b:40:48:e7:7e:20:7a:
60:81:92:2a:54:f0:08:25:7c:6e:2d:35:fe:b4:2a:
88:eb:93:44:20:45:73:77:f6:3c:05:0c:4a:d3:27:
f9:e2:25:c5:1a:c2:4d:da:be:23:d6:26:51:47:d8:
01:9c:9e:22:ff:87:10:3d:84:0d:36:93:ae:08:6a:
89:8b:61:26:8a:c5:47:9c:e2:3c:29:7b:f6:be:e1:
08:4f:73:75:1d:0d:ee:33:f3:88:2c:a4:88:d7:aa:
0f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8B:B9:23:51:F8:B8:01:38:DB:BC:71:40:9B:EA:55:8A:9B:43:98
X509v3 Authority Key Identifier:
keyid:AC:23:F5:4D:30:15:0B:46:00:9C:1A:02:9E:5E:EC:DB:6E:05:56:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/rCP1TTAVC0YAnBoCnl7s224FVlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCP1TTAVC0YAnBoCnl7s224FVlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141586/0D619168098B11EDAC8FCF2FC4F9AE02/CA08C348098D11EDAB30E934C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.191.140.0/24
Signature Algorithm: sha256WithRSAEncryption
72:3e:28:3c:26:90:38:63:28:9f:75:d4:14:a7:47:55:d8:06:
ac:97:8d:11:bc:3d:4b:ce:74:9c:a5:8b:0c:6c:a9:f0:b7:e0:
bc:a8:3a:3f:c3:c6:3a:f3:79:98:a6:02:5e:2a:b6:6c:e5:dc:
5b:57:76:76:dc:c8:89:41:d3:bf:7e:58:b4:f3:41:c5:59:23:
ef:7e:19:72:7f:5f:91:6b:a7:5a:51:0c:00:13:86:d3:57:5e:
10:f1:70:da:59:85:aa:a0:3e:41:89:c6:db:45:94:fa:4c:b7:
17:4f:88:00:86:5c:ec:97:c9:80:8a:34:c6:1a:1b:26:85:43:
2b:bc:34:5c:ba:68:e4:bd:d4:5b:26:e8:32:33:4f:11:8d:36:
0d:92:b1:5b:51:f1:49:67:48:92:f4:4b:85:42:03:4b:17:b3:
8d:aa:d4:d5:04:a5:a4:ab:07:6a:4d:e7:b8:49:c0:b6:e4:55:
51:b6:a4:ef:4a:40:4d:69:f5:66:62:b4:8c:a4:88:6d:2c:be:
d8:63:5b:1e:08:d0:9b:70:21:46:31:db:17:74:45:6e:1a:90:
7a:f2:77:ba:fa:93:ce:83:b0:03:27:a2:f3:4f:1a:81:99:41:
91:96:dd:88:2b:37:93:a2:fd:9d:ce:05:22:af:27:b3:81:c2:
0f:c2:a5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:03 2025 by rpki-client