Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/226DEC1275D511E88D5FDF24C4F9AE02.roa
File: 226DEC1275D511E88D5FDF24C4F9AE02.roa (raw, json)
Hash identifier: u6zpvxkYkfd9Sgr+7nOb3bbbb/5Wjva0COGy2cz/Rk4=
Subject key identifier: 6C:9C:6B:E4:21:26:50:5F:7C:73:1B:B4:9B:73:84:54:0A:75:8B:F2
Certificate issuer: /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA
Certificate serial: 1949
Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/226DEC1275D511E88D5FDF24C4F9AE02.roa
Signing time: Fri 28 Feb 2025 17:25:29 +0000
ROA not before: Fri 28 Feb 2025 17:25:29 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 38851
IP address blocks: 103.246.208.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6473 (0x1949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91415FB
Validity
Not Before: Feb 28 17:25:29 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c1f188-d6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:9c:7a:05:d5:7c:a0:d8:39:0f:c3:09:ac:
8f:ba:c1:61:ac:d6:9b:94:43:94:47:e7:59:77:80:
d1:ee:13:d0:da:64:15:13:a7:05:1e:a2:83:eb:4a:
23:85:7e:92:71:57:b8:83:1d:c4:42:28:c7:f1:1b:
67:f0:bb:29:89:62:12:80:38:f1:7c:56:dd:fb:77:
3d:e6:d3:14:77:d2:e5:67:05:56:01:d5:b4:28:b6:
51:ac:c9:aa:01:33:7c:bf:11:7b:b5:95:81:f4:89:
2f:c6:8e:e0:9e:66:d4:95:0b:56:0d:07:a4:f5:c3:
23:04:26:e5:9b:9b:e6:c0:a1:63:3f:42:f8:54:03:
87:29:d4:38:fc:83:ea:54:30:6f:e5:a3:d7:07:d1:
08:b5:78:88:d7:72:e9:0d:a4:d9:41:c9:2f:42:f2:
f6:fb:2e:d9:6f:c8:ab:16:26:d4:dd:fd:a3:0a:ba:
22:7c:eb:39:61:fd:ff:bd:66:1f:28:63:ec:30:5d:
cb:58:f8:16:bb:c2:62:57:d1:af:ee:78:b7:e6:e7:
ac:36:b5:81:cd:9a:93:27:f3:74:44:61:f9:9c:17:
f8:30:95:6d:14:3f:14:9c:6d:46:df:f1:b7:a5:f9:
c0:4a:56:96:2d:e2:bb:38:db:02:bb:d3:02:a4:2e:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9C:6B:E4:21:26:50:5F:7C:73:1B:B4:9B:73:84:54:0A:75:8B:F2
X509v3 Authority Key Identifier:
keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/226DEC1275D511E88D5FDF24C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.246.208.0/22
Signature Algorithm: sha256WithRSAEncryption
79:b4:80:78:39:dc:ac:9b:3a:43:3d:c1:f9:1a:e0:09:f3:47:
ad:36:22:fb:71:98:11:68:71:c5:92:98:0e:e2:9c:ce:cb:78:
11:fc:9b:b7:2c:b0:59:20:f8:2f:c9:dd:1a:96:33:84:b0:c1:
d6:2c:82:98:e2:87:ce:b4:69:a6:a7:2d:41:0b:26:47:c9:2f:
3e:29:7b:a1:68:6b:39:55:a2:aa:63:df:a7:3f:05:99:52:d3:
0e:a4:1b:5f:e8:e4:29:62:63:38:84:fa:88:a2:69:d9:91:ae:
e3:4a:72:9a:fd:d7:33:a6:48:60:c0:97:a6:69:9e:82:d1:be:
0a:19:94:63:55:bc:70:ef:02:c1:0d:70:d9:cc:68:0c:b0:a5:
d5:a2:64:d7:cf:a5:ba:4f:2a:40:c5:37:ec:43:89:4e:56:80:
3b:51:ed:1e:0c:48:8e:3f:82:a2:ad:0c:67:d0:28:25:09:db:
15:49:96:44:ba:0a:7a:ed:58:fe:f6:00:83:ab:8b:fa:2a:90:
b0:8c:5a:5f:fe:c6:92:b2:a0:23:d4:a7:e5:b1:41:27:40:1c:
9b:f5:33:49:6d:9e:5b:49:64:00:a9:2d:3d:8c:76:31:e9:27:
97:28:23:74:50:cf:16:93:3d:16:9f:ee:26:2a:56:65:45:60:
bf:ec:a1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:08:06 2025 by rpki-client