Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/B546EBFEA2F811EFA29F873AC4F9AE02.roa
File: B546EBFEA2F811EFA29F873AC4F9AE02.roa (raw, json)
Hash identifier: MqzzAzr1z8WUt2hgwcYlQRzSoFaRw0QC63G+ODEmE5c=
Subject key identifier: A9:CE:58:1B:05:27:36:8A:5F:24:39:83:AE:34:F9:83:1D:58:36:F6
Certificate issuer: /CN=A9144C70/serialNumber=0289E1E082B6DA1ABA5552840C0CAB02C2A3B74E
Certificate serial: 02
Authority key identifier: 02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/B546EBFEA2F811EFA29F873AC4F9AE02.roa
Signing time: Fri 15 Nov 2024 02:24:15 +0000
ROA not before: Fri 15 Nov 2024 02:24:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149644
IP address blocks: 103.183.116.0/23 maxlen: 23
103.183.116.0/24 maxlen: 24
103.183.117.0/24 maxlen: 24
2400:62a0::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144C70
Validity
Not Before: Nov 15 02:24:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6736b0cf-f4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:9a:67:71:b7:96:59:56:35:e7:00:37:82:
79:33:46:21:1b:5a:ae:1a:42:9d:69:19:5a:67:56:
f8:0d:e5:8e:c5:7e:a2:f4:73:a3:b3:4f:b6:66:82:
49:c0:50:b5:ba:bc:7e:c7:f7:cf:eb:75:5c:aa:43:
4a:7d:78:7e:c6:6a:7d:54:e5:d5:db:9f:94:05:ed:
6d:89:52:aa:bb:43:63:67:04:39:65:3e:9e:56:80:
95:e0:4f:5d:66:8f:69:b4:dc:a1:77:bc:f5:ba:ed:
7b:1e:f7:f7:32:cb:0b:72:ad:61:45:12:14:7f:40:
e7:d4:14:d9:1a:ae:7f:33:84:42:6f:97:e8:cf:4d:
0f:07:cc:8a:58:b5:a0:34:26:7a:4e:b2:26:67:fe:
22:3f:0f:6a:3f:95:91:74:a0:2e:3e:f8:62:fe:10:
41:02:e1:e6:1a:5e:93:c1:bf:76:a4:78:a3:9d:70:
98:b6:ba:36:59:08:42:f0:7b:f1:d9:25:37:6a:1d:
f6:5d:3a:e7:0a:4d:78:74:12:58:87:1a:b8:8f:35:
ac:37:20:49:e8:27:e7:66:97:9e:d5:98:46:46:03:
fe:3d:d7:a1:67:0b:61:98:95:16:76:7e:36:83:33:
e3:29:c4:fa:ac:2d:65:3f:16:ff:a9:ad:6d:36:96:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CE:58:1B:05:27:36:8A:5F:24:39:83:AE:34:F9:83:1D:58:36:F6
X509v3 Authority Key Identifier:
keyid:02:89:E1:E0:82:B6:DA:1A:BA:55:52:84:0C:0C:AB:02:C2:A3:B7:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/Aonh4IK22hq6VVKEDAyrAsKjt04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Aonh4IK22hq6VVKEDAyrAsKjt04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/B546EBFEA2F811EFA29F873AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.183.116.0/23
IPv6:
2400:62a0::/32
Signature Algorithm: sha256WithRSAEncryption
82:39:6e:ab:9f:06:a6:27:9d:4f:d4:ff:d6:c5:b4:35:94:ad:
c4:b8:7c:41:64:cc:d1:65:4e:0b:8f:bc:35:17:d5:66:84:d4:
c3:91:2c:7a:99:47:df:80:ba:4a:b6:a6:c8:3c:f0:c5:0d:db:
dd:67:23:35:ab:a3:71:47:40:96:26:c0:ab:aa:38:a1:f8:cb:
f1:3a:e7:57:8c:bd:24:74:dc:a5:3b:23:8a:c7:53:e5:c7:83:
a7:d6:aa:cf:a7:4d:f1:f9:4b:b0:3a:18:e2:84:e0:ec:1a:fc:
b1:8b:44:8f:f1:ba:53:84:2a:29:cc:4f:84:00:87:26:c0:c4:
32:dd:c3:ea:a6:d5:07:c2:1b:8d:e0:73:2b:ef:9a:b3:79:0b:
88:11:a4:10:64:6e:c6:d1:25:7b:7c:a1:d0:29:c6:40:e3:9b:
a5:3c:85:38:7b:db:02:ac:ff:c6:8a:7b:d8:c9:7f:14:b0:8e:
2f:5f:c0:07:15:3a:f8:1f:9f:f5:10:b9:3c:c6:5b:8c:f5:c5:
62:6f:16:34:86:49:40:de:72:0b:41:31:3d:20:df:6f:fd:3f:
db:5c:8b:77:df:2a:bd:71:c1:f0:01:09:84:81:fd:dd:3c:5c:
a0:6a:85:53:15:44:d9:85:4b:fc:3d:de:be:16:ff:92:cd:9a:
0d:93:27:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:54:58 2025 by rpki-client