Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/0E677936853811EEAC9D230CC4F9AE02.roa
File: 0E677936853811EEAC9D230CC4F9AE02.roa (raw, json)
Hash identifier: Kojx3EQvXZce9VKFNEMNI2SECFOh/Zpl+d+xhc6JD68=
Subject key identifier: 8C:31:69:24:1C:B8:59:FF:6A:1C:F2:D2:CA:61:7D:54:CD:98:82:54
Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial: 0501
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/0E677936853811EEAC9D230CC4F9AE02.roa
Signing time: Tue 14 Jan 2025 23:42:37 +0000
ROA not before: Tue 14 Jan 2025 23:42:37 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 212238
IP address blocks: 103.46.142.0/24 maxlen: 24
103.46.143.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1281 (0x501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BFA
Validity
Not Before: Jan 14 23:42:37 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6786f66d-0081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:64:5f:0b:31:70:84:02:55:5b:64:d3:fb:
e6:f5:39:7f:78:2f:18:83:b6:2b:fa:8c:41:ad:af:
19:3e:2b:2b:38:d5:85:57:86:76:06:bf:9d:3c:41:
83:f6:ff:71:6d:27:3a:74:08:33:36:eb:32:f7:01:
dd:29:f6:58:36:c2:55:2a:78:da:68:79:98:e0:4b:
56:82:40:fc:be:f5:42:6d:31:7d:e1:75:97:14:4d:
2b:d2:ca:8b:bf:e1:10:9d:b0:a5:a5:23:8c:2e:e3:
99:66:ce:c5:5d:76:25:92:f4:00:a2:80:57:d9:b0:
75:28:c0:6a:f5:c6:58:a9:34:25:62:af:00:0e:64:
aa:52:8b:40:9e:17:a3:16:56:a9:31:4c:32:f7:15:
7c:eb:7f:80:e1:79:f2:07:8a:2e:92:3f:a7:fa:6e:
17:ff:c8:78:62:5d:0f:e5:1f:06:28:8a:e2:67:8a:
bb:2f:17:98:6e:c8:64:d2:82:11:df:74:73:d9:14:
14:6d:f4:7f:16:5c:b3:87:17:95:41:57:c0:a9:d6:
07:6e:9f:98:ce:bf:d3:d6:23:fc:5d:14:a7:d3:ee:
0b:d4:a8:8b:56:4d:38:a0:f8:46:ff:1a:01:cd:72:
8e:b6:05:32:dc:83:2e:b2:c5:7a:8f:fe:b8:aa:bd:
ff:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:31:69:24:1C:B8:59:FF:6A:1C:F2:D2:CA:61:7D:54:CD:98:82:54
X509v3 Authority Key Identifier:
keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/0E677936853811EEAC9D230CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.142.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:44:93:12:37:fd:ff:cb:bf:bb:be:75:a4:4a:37:21:44:d9:
80:f9:a7:9a:2e:ca:c4:a3:f9:a8:97:36:e2:b6:e5:78:0d:05:
0e:a6:fa:44:31:98:6d:ec:e8:62:b6:e5:64:d7:35:5a:bd:71:
38:7b:69:de:4a:ca:1a:b0:98:f9:aa:e9:60:a4:c5:ba:d3:17:
a9:12:7d:66:de:a2:59:6d:7e:d1:3f:84:98:fc:11:f0:af:37:
4c:8a:93:df:f5:50:82:49:27:b4:7b:06:99:f0:d2:68:ff:d5:
41:53:18:c1:37:16:6e:5c:29:58:dc:af:38:72:55:ad:f4:8b:
4a:94:23:c2:a8:8c:40:29:b4:e2:f0:92:c5:d3:3f:7f:50:d8:
8d:c0:51:65:f5:50:eb:85:99:f4:f6:c7:24:78:03:32:b3:d3:
dc:a1:32:78:4d:82:6d:a6:ed:99:48:b4:a2:3f:b8:60:e6:32:
1d:cd:df:c2:e1:ff:4f:8d:68:16:26:5d:1e:f0:c5:8b:a5:80:
35:86:83:4d:99:c8:19:bb:e8:11:58:6a:8f:36:be:2c:bb:23:
67:5a:ba:e9:2a:09:37:eb:df:b9:77:4f:6d:22:d0:64:a3:65:
7f:9d:73:3a:58:60:e0:39:ca:7a:f2:7f:a4:8c:ab:fe:82:8d:
28:58:5f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:15:36 2025 by rpki-client