Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/51635E7E32B011EE89DFF774C4F9AE02.roa
File: 51635E7E32B011EE89DFF774C4F9AE02.roa (raw, json)
Hash identifier: PrshPG5oG7Q/ksTfEH95reK4a0iC1d8YmqXN8qzwXXM=
Subject key identifier: 70:B1:80:57:60:5C:2B:5F:E2:91:F1:2F:01:B9:E5:01:11:FB:88:39
Certificate issuer: /CN=A91478E2/serialNumber=C14853D9BD3F78F6480C63352076943BC79B9FC2
Certificate serial: 172F
Authority key identifier: C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/51635E7E32B011EE89DFF774C4F9AE02.roa
Signing time: Thu 28 Nov 2024 17:04:43 +0000
ROA not before: Thu 28 Nov 2024 17:04:43 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 17557
IP address blocks: 103.103.42.0/24 maxlen: 24
103.103.43.0/24 maxlen: 24
103.120.70.0/24 maxlen: 24
103.120.71.0/24 maxlen: 24
2402:2ec0::/34 maxlen: 34
2402:2ec0:4000::/34 maxlen: 34
2402:2ec0:8000::/34 maxlen: 34
2402:2ec0:c000::/34 maxlen: 34
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5935 (0x172f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91478E2
Validity
Not Before: Nov 28 17:04:43 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=6748a2ab-8f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:c3:5f:07:62:65:e7:3c:47:04:12:06:e7:
c4:66:d7:81:16:97:e0:c8:13:7c:65:b4:5b:8f:a6:
44:b0:9b:bc:44:fd:21:b3:11:fc:e1:76:12:66:85:
44:cb:28:1f:34:f8:df:13:4c:40:8b:52:ac:d5:0c:
da:d2:30:b8:c6:36:a0:3b:18:24:fb:2a:26:49:22:
2a:df:4a:ee:3b:59:82:e5:df:3d:1d:42:e6:c2:4d:
21:bd:22:9c:9f:c3:04:aa:ff:fc:8b:86:ec:c4:83:
2b:c1:b2:54:c0:ac:25:af:3e:ef:53:f5:7d:18:47:
73:1d:6d:e3:0a:06:90:08:c5:29:4c:11:65:1c:a0:
79:bd:bd:c0:89:52:43:b8:bf:e6:19:be:f4:44:77:
3d:da:01:61:69:99:6e:dc:02:97:a2:b9:a0:c3:4d:
58:e0:9a:a5:8f:94:af:86:2a:2e:82:b2:ba:8b:79:
b5:e3:95:b9:19:80:b1:ac:46:9c:d3:e6:4a:61:a6:
e3:a6:1a:b3:81:39:f5:6b:42:49:21:81:d1:e9:21:
d1:bd:ec:dc:d9:74:1b:16:6e:d0:57:1f:86:ab:15:
2a:3a:b4:a3:f1:6d:1b:40:af:67:11:23:fe:3e:b2:
1e:96:54:2c:4c:b8:74:1b:9c:9a:b4:1f:93:e8:f2:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B1:80:57:60:5C:2B:5F:E2:91:F1:2F:01:B9:E5:01:11:FB:88:39
X509v3 Authority Key Identifier:
keyid:C1:48:53:D9:BD:3F:78:F6:48:0C:63:35:20:76:94:3B:C7:9B:9F:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/wUhT2b0_ePZIDGM1IHaUO8ebn8I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUhT2b0_ePZIDGM1IHaUO8ebn8I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91478E2/4C908A22E0B611E7B2D0FD80C4F9AE02/51635E7E32B011EE89DFF774C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.42.0/23
103.120.70.0/23
IPv6:
2402:2ec0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:ab:24:15:f9:0e:46:f8:e0:af:83:de:02:ef:f9:18:04:d6:
0d:40:d8:ee:9e:03:64:a7:7b:5c:ee:50:f3:b8:58:75:37:41:
d7:41:89:28:ca:91:3b:22:ff:cf:be:13:9f:68:26:9e:ec:55:
fa:e4:fa:e2:9f:34:c4:ba:87:de:e9:3a:4a:54:07:a5:dd:cc:
2e:bd:17:33:2b:d2:2d:da:b3:e3:51:06:8b:0c:80:e6:59:79:
8d:94:27:12:01:c7:10:cf:43:16:95:e5:2c:13:e0:66:e6:ad:
4f:65:95:15:bc:46:51:08:82:a1:96:52:53:8a:e8:e4:d5:98:
da:ed:bc:1c:1a:04:7f:54:df:67:f2:27:18:46:84:3a:ec:18:
df:f2:3b:41:93:1a:3b:43:ba:21:f5:2a:89:86:ad:39:85:52:
0f:eb:d8:49:02:f3:0d:fe:1f:43:99:fa:a5:d8:94:2f:d2:69:
58:12:39:c3:4f:91:bb:d6:16:88:d0:e5:b2:db:d7:37:7a:c9:
5d:08:95:66:5e:e2:63:02:0b:17:a7:ad:2c:94:58:01:f6:4a:
70:2e:2f:0d:a1:42:6e:5e:00:9a:e1:d9:67:18:1d:99:eb:4d:
25:79:b8:2e:05:86:1b:70:06:28:68:67:76:7d:a2:57:9e:37:
fa:df:3e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:05 2025 by rpki-client