Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/93A5581E549211EFB6D69465C4F9AE02.roa
File: 93A5581E549211EFB6D69465C4F9AE02.roa (raw, json)
Hash identifier: /XKYDQbxV7RTuAFLQ60S0WHAEqIIW0Ex8kIJdQHSD/g=
Subject key identifier: EC:AD:5D:94:1C:68:09:D2:08:ED:83:D3:8E:27:E8:53:A1:51:32:C5
Certificate issuer: /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Certificate serial: 0369
Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/93A5581E549211EFB6D69465C4F9AE02.roa
Signing time: Fri 11 Oct 2024 01:04:49 +0000
ROA not before: Fri 11 Oct 2024 01:04:49 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 7474
IP address blocks: 203.16.141.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 873 (0x369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148B19
Validity
Not Before: Oct 11 01:04:49 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=670879b1-81df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:f3:5b:d6:9c:e4:c4:08:17:a7:e0:fd:b9:
08:80:8c:90:04:88:f8:28:93:82:c9:f0:ea:a8:fe:
17:63:d3:2b:d5:a3:b1:b8:be:38:2d:41:e9:34:07:
6d:aa:5b:14:ae:f7:c7:99:c2:55:fd:1e:ab:63:92:
be:a3:52:52:32:07:d0:f6:64:03:2c:68:72:b0:56:
20:7f:f5:92:ec:f9:4f:11:63:dc:04:a8:56:e6:d6:
ad:57:64:5f:10:af:f8:6a:27:cf:ea:80:f6:03:fc:
f4:50:ea:85:bf:57:bc:fd:a2:1b:33:3d:f8:69:73:
5f:ce:2f:5c:6a:15:19:ec:b0:ae:9b:24:43:30:e4:
7e:f7:7c:d0:de:14:f5:69:4d:f2:7f:47:8c:44:66:
0b:dd:e7:a1:58:28:9b:f4:a2:ea:0e:b5:c5:10:cf:
fe:ff:1f:75:6a:ec:ae:64:b2:b3:07:84:31:cf:26:
6d:42:70:78:fb:e5:63:3f:2c:db:4a:c6:5a:ee:55:
ce:d5:ad:3f:82:c9:e4:2e:f0:b9:63:a1:dd:b2:65:
de:52:29:11:df:98:0b:66:96:9f:2f:f0:9b:ce:44:
36:11:82:eb:37:f7:6b:b9:f0:b8:7d:7e:28:a3:8e:
b2:b8:21:f8:67:d9:0f:42:ff:28:e4:03:44:16:56:
3f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:AD:5D:94:1C:68:09:D2:08:ED:83:D3:8E:27:E8:53:A1:51:32:C5
X509v3 Authority Key Identifier:
keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/93A5581E549211EFB6D69465C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.16.141.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8c:d2:f9:de:3e:d3:44:e6:8a:14:31:43:b7:3f:74:68:bd:
c2:17:50:eb:1b:ba:3f:6b:9e:cc:07:c8:ca:5f:0a:a0:fb:b1:
1e:d6:c1:1f:0c:02:22:08:27:95:b6:6a:dd:28:4c:19:7d:2f:
7a:36:da:19:41:74:1e:06:b4:e9:e1:d7:36:40:91:e7:a5:89:
4d:cb:a1:18:27:a5:10:c7:1e:1e:33:bc:32:8b:64:04:ee:97:
90:e4:76:ab:8c:26:36:4d:6c:1b:87:dc:4c:51:1c:b2:ca:83:
80:40:44:2a:a0:44:4d:78:2f:3f:2e:3e:6a:ec:8a:90:3f:3c:
1c:0b:b1:c6:06:ad:aa:ac:8f:c2:30:82:a9:df:eb:e4:7d:b1:
6c:24:95:d1:6b:2b:22:fa:87:40:83:f9:1d:b6:64:a7:28:f3:
81:d4:3f:2a:cc:a4:75:6f:19:ac:17:2d:89:ea:49:c8:20:b1:
34:83:f1:2d:eb:98:80:cc:15:8b:38:71:53:ea:87:67:c9:e1:
49:90:3b:94:28:af:91:78:5b:77:fa:27:c1:74:a0:00:95:3a:
62:ea:c1:09:92:30:7f:59:8d:b4:07:21:f6:aa:ac:0c:1c:8b:
cd:8f:5d:6f:a6:48:f4:9c:24:eb:2b:03:39:de:b8:6f:21:17:
26:03:8c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:06:38 2025 by rpki-client