Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/3773DD32D5F911ECA822DD1EC4F9AE02.roa
File: 3773DD32D5F911ECA822DD1EC4F9AE02.roa (raw, json)
Hash identifier: lj2GFqOuVUjcTznq2cobNxeWbQDkulINRdaDZRfoupQ=
Subject key identifier: 13:FE:8D:D6:3C:07:16:8C:FA:77:7B:63:02:E5:D4:6C:87:0C:DE:7B
Certificate issuer: /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Certificate serial: 0392
Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/3773DD32D5F911ECA822DD1EC4F9AE02.roa
Signing time: Thu 19 Jan 2023 18:11:43 +0000
ROA not before: Thu 19 Jan 2023 18:11:43 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 203120
IP address blocks: 103.210.244.0/23 maxlen: 23
103.210.246.0/23 maxlen: 23
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 914 (0x392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9153CE9
Validity
Not Before: Jan 19 18:11:43 2023 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=63c987de-4dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:29:9d:78:23:25:0a:bc:59:68:5e:f5:f3:
ef:30:d5:29:7f:f0:30:65:db:9c:0b:49:1a:f8:0b:
20:21:7d:7b:32:2e:9a:a7:bc:aa:cd:35:2d:ac:8a:
96:c6:e3:34:18:bf:72:0d:a9:0e:a6:e3:74:9c:66:
ff:ae:8a:60:89:cf:e1:84:cc:e0:61:e0:c9:8d:00:
87:cb:55:3e:79:62:cb:da:81:43:d5:ad:3d:81:09:
5e:80:01:92:2b:cc:72:56:8b:58:da:ab:ea:43:58:
a6:38:77:ae:98:64:ac:97:5a:f7:6a:44:a7:54:ee:
b7:63:6b:a2:2d:42:c8:7c:32:05:d1:85:49:05:c6:
8f:6c:76:c4:b7:e3:61:fb:9b:68:f4:c4:8c:13:b6:
ee:eb:14:b7:eb:b3:73:54:37:45:71:ec:4a:66:05:
1d:98:ee:67:c6:fa:47:45:22:bb:2e:56:29:8b:d6:
a6:5e:be:6d:f4:d3:54:53:ef:79:2b:c0:dd:89:80:
30:18:6e:18:49:5a:a5:f6:e3:90:3c:fe:6a:e4:41:
68:64:b4:26:fb:5b:cb:72:a3:a5:95:44:95:ea:fe:
9a:d8:7d:ab:a2:3b:2f:39:44:76:81:b9:1d:04:8d:
7a:0f:67:a5:aa:f1:6a:bd:26:46:3c:d4:89:3d:d2:
c8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FE:8D:D6:3C:07:16:8C:FA:77:7B:63:02:E5:D4:6C:87:0C:DE:7B
X509v3 Authority Key Identifier:
keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/3773DD32D5F911ECA822DD1EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.210.244.0/22
Signature Algorithm: sha256WithRSAEncryption
59:5e:20:9d:a3:d1:f5:b4:6a:ae:cb:25:56:b5:52:1b:01:df:
7c:37:71:51:f4:56:d2:a1:39:b1:17:19:5d:3e:d6:d6:76:e9:
e4:3f:7b:cb:e7:52:22:43:3e:36:42:f9:ee:5c:20:c2:55:fc:
9b:d6:32:a8:ae:40:7c:68:bd:6d:21:0f:5e:55:c3:57:65:f4:
10:ad:b5:88:c4:99:ea:c6:32:96:f7:99:9b:d8:d6:7b:dd:ce:
b9:c8:77:0c:b3:18:6a:21:cc:cd:8e:c0:87:59:6a:b6:06:e6:
ed:b7:ff:6b:3a:7e:a3:83:f3:91:87:97:bf:f7:3e:0b:06:55:
aa:ce:b0:8f:e2:01:fb:ef:07:ab:d7:c0:78:ce:ca:fd:61:99:
50:0e:e1:03:77:3f:e5:eb:7b:12:5b:6a:3d:44:eb:24:4b:96:
45:d6:0e:2e:81:f1:45:27:9d:cc:a3:0c:a6:a0:13:22:61:24:
fe:17:0e:48:22:5e:f6:4e:28:6f:61:8c:ee:cb:17:ac:fc:3b:
9e:40:b3:02:35:30:ba:6b:d8:b3:8e:27:ff:a4:56:08:02:1e:
09:e6:b6:8c:d9:25:95:45:0c:14:d1:75:fb:a4:9a:23:2c:40:
b4:47:c2:1d:49:d0:89:41:23:26:5d:f5:62:68:cc:4f:6e:f9:
e6:4b:53:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:15:37 2025 by rpki-client