Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/779A1664D48511EFABA10B27C4F9AE02.roa
File: 779A1664D48511EFABA10B27C4F9AE02.roa (raw, json)
Hash identifier: 06v/+JgoTxLy7fFu5scIatjdz5rZKByWanFm2Be8AGY=
Subject key identifier: 85:A8:92:28:65:56:B1:AD:47:D5:89:01:A0:EC:95:12:FB:7F:6A:A3
Certificate issuer: /CN=A914FC2C/serialNumber=1AD9BD9DC77315BD102DAF5AA9F92566B2C2FB99
Certificate serial: 02FF
Authority key identifier: 1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/779A1664D48511EFABA10B27C4F9AE02.roa
Signing time: Fri 17 Jan 2025 03:45:18 +0000
ROA not before: Fri 17 Jan 2025 03:45:17 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 131192
IP address blocks: 43.242.44.0/22 maxlen: 22
103.37.248.0/22 maxlen: 22
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 767 (0x2ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914FC2C
Validity
Not Before: Jan 17 03:45:17 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=6789d24d-5c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1e:78:b4:f9:8e:c1:d1:eb:0c:a2:66:a0:2e:
29:6b:6e:87:b5:e7:6f:fe:32:d3:3f:a3:4e:9e:eb:
7b:59:69:db:00:64:a4:c9:70:fb:91:82:57:c4:d1:
75:e4:6e:f5:5e:3f:fd:43:ec:db:10:8c:d6:6f:d7:
3e:8a:d8:05:85:6e:f7:b1:94:09:69:0e:df:ce:b2:
49:c9:f3:5d:c9:9d:20:36:31:5c:d5:43:5a:a7:5c:
2e:e5:fe:3a:9f:07:f4:02:b7:0b:3a:e5:76:5f:f7:
28:c1:d4:23:9e:40:a3:c1:88:2e:be:86:93:55:0e:
b0:14:f6:77:f4:69:e6:38:51:a4:ab:ec:ad:b5:31:
31:1a:56:92:41:5f:e4:9e:32:16:f0:bc:63:47:a3:
ff:36:20:c0:c1:73:b6:11:3b:75:35:84:2f:54:3c:
a4:a6:0d:3d:b7:7d:f7:22:7a:fd:ce:c7:95:36:c9:
7a:74:5f:19:a6:69:47:3f:39:67:5d:51:3d:06:44:
80:01:de:e1:bb:d3:76:76:33:7e:ef:93:cb:43:33:
e2:cc:66:e3:55:70:d6:38:c3:d3:43:eb:87:4c:eb:
59:aa:ad:74:d3:23:d0:e4:8a:c1:5b:8e:50:52:ee:
ff:2b:e3:13:71:cc:16:7c:f7:b5:23:cf:ae:f9:55:
54:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A8:92:28:65:56:B1:AD:47:D5:89:01:A0:EC:95:12:FB:7F:6A:A3
X509v3 Authority Key Identifier:
keyid:1A:D9:BD:9D:C7:73:15:BD:10:2D:AF:5A:A9:F9:25:66:B2:C2:FB:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/Gtm9ncdzFb0QLa9aqfklZrLC-5k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gtm9ncdzFb0QLa9aqfklZrLC-5k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FC2C/B04E919CC53311EC96DF310FC4F9AE02/779A1664D48511EFABA10B27C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.242.44.0/22
103.37.248.0/22
Signature Algorithm: sha256WithRSAEncryption
31:8b:2e:10:a5:1c:80:84:13:a8:5d:7f:fd:8e:cb:10:3c:db:
4a:84:f8:f6:de:f0:10:cf:40:f4:b8:d9:5b:a1:ce:96:dd:4e:
e2:13:25:2a:2a:c0:4f:42:af:30:e7:6c:24:ab:7b:59:9e:98:
6c:7b:e5:7e:6a:38:d8:56:85:39:3c:5d:bc:0b:30:f8:a7:c6:
5d:34:41:6d:42:a5:d0:6e:00:29:7b:a9:c9:a8:79:19:17:5e:
3d:a9:28:ac:35:64:3d:0e:be:b6:4a:51:fe:8d:56:29:6b:c8:
37:ce:14:0f:2a:12:15:5e:1e:19:e4:b8:98:bc:54:3b:aa:77:
13:51:0b:01:e9:2f:25:21:21:48:5b:a4:81:94:ac:09:9c:93:
22:02:cd:ac:b5:bb:5c:7f:ca:35:56:d7:46:a5:ec:d1:e4:3c:
c9:07:53:45:4d:72:9a:55:0d:82:cb:ba:89:78:4d:6e:0e:3b:
80:1c:18:52:b6:f3:8d:54:77:59:7d:f3:f4:b5:27:93:ae:91:
a9:80:12:80:63:db:57:3d:e8:55:2a:77:b3:46:06:e8:eb:12:
7b:cf:ed:a8:f0:06:d2:5f:d7:92:67:26:c9:60:bc:a0:46:18:
96:1d:43:69:45:f1:bc:2c:c6:c3:56:f0:b9:e1:62:74:63:c2:
90:b1:81:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:15:35 2025 by rpki-client