Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/9ADBEC30DA6411EF95F32A7FC4F9AE02.roa
File: 9ADBEC30DA6411EF95F32A7FC4F9AE02.roa (raw, json)
Hash identifier: ag70wfYgobotc0eBfgl6nwgFKbzwbxZlbSBpAf0e7ww=
Subject key identifier: 2F:76:61:94:9D:79:6D:C8:02:65:7D:F0:93:34:32:B6:C1:16:24:9B
Certificate issuer: /CN=A9142812/serialNumber=5C45AD000BBD50A70F93A5CB70B66680A528EDC0
Certificate serial: 062C
Authority key identifier: 5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/9ADBEC30DA6411EF95F32A7FC4F9AE02.roa
Signing time: Fri 24 Jan 2025 15:05:10 +0000
ROA not before: Fri 24 Jan 2025 15:05:10 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 137182
IP address blocks: 103.162.102.0/23 maxlen: 24
2407:1740::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1580 (0x62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9142812
Validity
Not Before: Jan 24 15:05:10 2025 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=6793ac26-97d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ac:be:7e:0c:c1:ac:71:3c:f7:20:e6:4f:57:
3a:8d:59:59:6d:28:3d:48:7f:20:50:f2:13:1d:ac:
2b:90:42:66:79:43:99:d1:6f:7a:6a:0a:07:78:96:
5c:3f:65:d3:c3:ee:56:6d:1e:a1:8a:00:9b:ff:a1:
5a:87:9c:41:24:94:80:e5:a4:a6:a2:06:21:82:f3:
94:52:a4:54:b4:10:cc:8e:72:ea:14:a2:6e:e2:ec:
5a:16:fb:d0:05:e2:a5:4f:87:89:72:5c:f3:87:a2:
a3:cc:cf:68:0f:d8:3c:17:5b:55:3e:99:01:0d:76:
97:53:4e:08:bd:a1:e2:44:59:21:fb:a0:8d:63:cb:
35:16:1a:fb:5a:02:a4:34:dc:20:32:fc:2d:bd:4a:
74:33:16:64:9e:54:79:3b:c5:86:b3:b7:d5:0f:62:
dc:dd:e9:51:e3:55:9d:e9:58:aa:f9:ce:74:78:71:
8c:87:2c:e8:fc:06:e4:2f:37:af:a2:47:4b:33:e9:
b2:c8:3c:5e:d2:00:57:e5:dd:cb:b2:43:43:bd:04:
5c:6e:1a:8e:5e:b5:14:2b:d7:81:e4:9e:b4:28:86:
8a:77:10:af:f7:4a:90:0c:98:4f:2e:75:ad:f2:26:
46:21:a1:3a:4c:fb:65:0c:48:cc:95:db:3e:72:89:
a6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:76:61:94:9D:79:6D:C8:02:65:7D:F0:93:34:32:B6:C1:16:24:9B
X509v3 Authority Key Identifier:
keyid:5C:45:AD:00:0B:BD:50:A7:0F:93:A5:CB:70:B6:66:80:A5:28:ED:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/XEWtAAu9UKcPk6XLcLZmgKUo7cA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEWtAAu9UKcPk6XLcLZmgKUo7cA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142812/C1E5DD1E807B11EBA83AC01DC4F9AE02/9ADBEC30DA6411EF95F32A7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.102.0/23
IPv6:
2407:1740::/32
Signature Algorithm: sha256WithRSAEncryption
77:4f:aa:1d:f0:57:9c:bc:7c:ea:62:dc:89:a1:cd:dd:a5:31:
a6:6e:ee:e4:e0:bd:63:d3:0e:ad:b2:e8:5b:f2:0e:4f:70:8c:
d4:b6:30:cc:01:6e:d5:85:46:ee:67:c4:b6:3a:6f:80:01:fe:
a0:11:fd:d0:29:56:0d:02:11:35:c1:ea:4c:03:ff:8e:6a:7f:
ab:5c:80:01:f8:0a:b7:aa:be:47:00:1c:91:ff:2b:ea:48:5d:
46:bc:d2:c8:a7:d6:aa:7a:1b:d9:20:a4:53:78:fb:dc:40:28:
5a:f1:7f:6f:35:24:a5:1c:e8:2f:3c:8b:7c:74:39:ae:c7:83:
2e:b9:4a:fa:45:72:7d:23:c0:72:cc:b5:e3:08:a9:39:10:49:
7b:36:a1:af:d9:54:86:8a:6d:4e:a8:07:72:28:38:f1:0a:33:
c7:7e:a5:25:70:75:dc:89:c8:1e:56:9a:88:72:96:5e:4c:82:
a9:19:11:58:1c:40:69:ce:d4:66:cc:2b:80:14:76:2c:0e:97:
af:0f:27:02:2d:15:3b:6d:98:a4:58:3d:f0:42:8d:19:93:67:
17:68:a1:3e:47:85:ed:c1:65:c4:63:4b:2c:5d:8c:59:ed:69:
da:d4:20:26:eb:f3:d9:5c:75:dc:e9:b5:46:80:8e:d0:37:df:
62:8f:71:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:08:07 2025 by rpki-client