Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/D9B56C8A7AB211EB99DAFE83C4F9AE02.roa
File: D9B56C8A7AB211EB99DAFE83C4F9AE02.roa (raw, json)
Hash identifier: F8NUI5IF7FjRVcKD/tqhJ5Q4QNzh0QGai7XMrRHjkus=
Subject key identifier: D5:58:5B:5A:F2:22:EF:01:8F:2A:80:BB:AA:97:A3:E9:76:9D:D3:5D
Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
Certificate serial: 08AB
Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/D9B56C8A7AB211EB99DAFE83C4F9AE02.roa
Signing time: Wed 26 Mar 2025 17:26:38 +0000
ROA not before: Wed 26 Mar 2025 17:26:38 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 136215
IP address blocks: 103.49.201.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2219 (0x8ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B09
Validity
Not Before: Mar 26 17:26:38 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67e438ce-78a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:96:6f:14:0d:02:5f:ce:eb:76:e0:e4:55:
05:c2:7d:bb:ce:4d:72:3f:21:78:81:d7:a1:b5:61:
d4:4b:78:80:b6:c3:bc:23:9d:cf:50:7b:9e:b7:4e:
8f:63:6e:dc:c2:a8:09:81:ef:51:fd:13:c2:b9:f0:
3d:b2:4a:10:92:47:cc:cf:40:bb:de:22:8a:53:50:
34:f7:f9:9a:5f:10:23:2b:f3:46:ad:b1:ad:b8:de:
a1:9b:f7:4e:fd:88:29:4c:b0:f2:90:8b:f6:8e:61:
ac:09:e3:3e:db:6c:ae:59:dc:dd:a6:b0:fc:6a:92:
71:23:50:05:0a:40:73:f6:3a:63:d3:30:4b:9b:38:
8e:ed:5c:cc:65:17:65:31:9a:a9:79:91:31:c3:20:
91:14:ac:f1:3f:25:37:a6:f6:5b:fb:1a:ff:f9:ba:
08:f0:e6:b9:33:1f:22:a8:4f:82:72:e2:25:b0:31:
f1:ed:34:fc:a4:48:37:ec:0c:25:6f:d1:ea:db:7a:
2d:c4:c1:5e:50:15:d8:d3:29:67:93:3a:6a:86:6a:
07:09:9b:76:a3:03:55:0d:48:fe:41:2a:df:1e:bd:
92:41:3d:1d:c3:ee:e2:17:d4:64:34:e5:b0:b4:61:
42:01:fc:3e:6b:cd:b0:3a:53:26:34:79:de:48:2f:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:58:5B:5A:F2:22:EF:01:8F:2A:80:BB:AA:97:A3:E9:76:9D:D3:5D
X509v3 Authority Key Identifier:
keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/D9B56C8A7AB211EB99DAFE83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.49.201.0/24
Signature Algorithm: sha256WithRSAEncryption
14:3a:69:81:d3:25:07:37:44:09:29:a0:55:e0:d2:4b:7c:02:
ce:3b:68:01:7d:21:ce:4a:61:02:d5:bc:a2:89:fa:a0:ff:41:
9d:78:c7:0e:66:44:00:79:7f:fe:54:18:9e:1a:b5:b3:be:66:
80:c4:2b:d5:06:e1:3d:bc:35:96:e2:eb:0f:43:de:55:f8:38:
7c:dd:c9:22:49:5a:3f:10:f9:16:e7:0c:4e:2c:e3:27:f8:6e:
36:dd:aa:44:65:c5:af:08:46:e5:bf:4b:54:66:80:7b:ce:08:
6d:89:2c:7d:91:f2:a6:e6:79:a1:39:e5:5b:37:e3:55:81:d3:
6b:87:fc:d7:5e:31:d9:be:d1:3f:97:ce:2b:05:e2:c1:62:d6:
26:1b:a2:3f:d0:fa:84:62:0a:be:ea:0c:f0:99:55:03:2d:88:
89:bc:80:df:db:e3:8c:2d:c6:9d:00:0a:45:2d:52:7e:96:c1:
75:59:d7:21:02:90:0d:d5:6f:1e:2c:59:b7:5b:7b:f8:22:76:
35:54:53:38:87:79:27:87:2f:91:08:b3:fe:41:1b:c8:d9:ae:
a9:57:55:f1:48:29:6c:13:0a:cb:3e:26:68:69:27:4b:cf:a1:
cb:69:70:09:0e:3e:88:a7:5a:03:fd:59:9e:70:df:3e:d8:6f:
61:3c:f6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:13:13 2025 by rpki-client