Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa
File: 195EA596AC8711EEAC4B2427C4F9AE02.roa (raw, json)
Hash identifier: hhO5y4e/DFpdPdaj49uvYHcFr1O6lkR5HUgMp+6rOns=
Subject key identifier: 1D:37:33:33:B9:0E:22:BA:60:35:CB:2D:11:16:97:30:8C:A9:A9:CF
Certificate issuer: /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Certificate serial: 01E4
Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa
Signing time: Wed 03 Jul 2024 03:45:09 +0000
ROA not before: Wed 03 Jul 2024 03:45:09 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 38136
IP address blocks: 103.188.234.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 484 (0x1e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91447E7
Validity
Not Before: Jul 3 03:45:09 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6684c945-91d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:3d:6b:98:e4:ae:7a:8c:63:66:b1:9c:ad:
61:d8:98:36:2b:53:13:b8:02:95:6b:20:16:43:c3:
24:0c:a3:47:28:98:be:43:3d:79:3a:78:6b:dc:63:
3f:cb:9d:0a:22:b5:ed:3f:82:49:f1:ef:b3:e3:3f:
f6:8b:92:4e:83:d5:82:7c:16:07:0c:fb:34:94:a3:
79:d5:d5:67:20:32:9b:2b:ff:2c:55:4a:12:31:9e:
1a:a0:20:e9:53:e3:af:76:d7:67:67:42:78:10:71:
b7:2d:48:44:8e:48:e5:d3:82:47:4e:7c:bb:04:e1:
3d:05:aa:3b:88:11:8b:6a:8a:f6:10:c7:d0:b2:3f:
06:a6:9c:15:7c:f4:4c:12:d1:ff:19:e3:15:c7:38:
e2:29:fa:08:e5:54:a6:a0:6c:fb:57:bd:fe:5c:67:
71:b7:95:52:a0:75:3e:60:d0:89:62:a8:56:8b:92:
91:b8:05:c7:de:46:ae:a5:ed:6f:9f:ca:bd:5c:91:
89:0e:41:a8:d8:30:75:f9:8f:e0:24:1d:f6:c7:11:
ca:cf:3b:16:8c:39:85:08:12:84:cc:88:ba:14:30:
f1:b5:6c:23:da:5e:31:4d:13:81:6d:11:50:32:a2:
d2:64:a2:fa:68:c0:50:eb:83:66:2b:6f:d8:3c:8b:
8f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:37:33:33:B9:0E:22:BA:60:35:CB:2D:11:16:97:30:8C:A9:A9:CF
X509v3 Authority Key Identifier:
keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/195EA596AC8711EEAC4B2427C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.188.234.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:da:09:04:d2:81:3d:30:6a:e6:9f:0d:c4:db:10:93:bf:d6:
a7:93:72:51:ad:e3:2b:95:b4:1a:b0:98:fe:81:42:65:b9:dd:
2d:f0:02:56:6c:9b:07:b8:a8:6c:06:4d:31:b9:e8:e6:47:d4:
99:f9:d8:1c:ea:9e:98:da:56:a7:c5:b7:c7:76:a5:24:3a:49:
d9:23:2f:85:44:f7:2f:55:57:e5:cc:7f:c0:5f:f3:68:cf:49:
b2:f8:d6:1f:2a:9d:1c:c0:97:e7:6e:89:79:88:22:3f:09:2e:
07:05:54:f8:c4:12:5e:77:d7:8c:93:4a:bd:59:fa:24:13:d5:
0e:b8:c5:4f:fa:6d:e1:38:c9:b7:4d:e9:ca:bc:5b:52:da:48:
7d:23:49:f6:c2:54:09:3f:4c:91:ef:51:18:b3:5f:a4:39:8d:
a7:7c:80:48:99:91:4c:57:2c:fa:18:14:7a:c6:c6:79:c2:eb:
7b:d8:35:c2:b5:36:d1:d2:ec:5c:a8:c0:16:ac:03:f1:66:7a:
b5:de:e4:52:b4:8d:68:4b:8d:3d:7d:26:da:58:51:c7:8a:c9:
f6:97:b6:56:78:c2:cd:f5:20:d3:b0:b5:37:18:7c:02:fc:97:
ea:a3:f1:40:b7:de:f0:93:7a:d4:f7:97:00:1f:c6:fa:89:ff:
c5:bd:a1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:21 2025 by rpki-client