Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/3A6CB168758811EA93AADD3FC4F9AE02.roa
File: 3A6CB168758811EA93AADD3FC4F9AE02.roa (raw, json)
Hash identifier: vZA2+KWBR1wDSvH4IKxEBdO5KRub7QRUaZOldm9+tP8=
Subject key identifier: 79:FF:12:A5:22:E1:59:D3:B7:FE:D0:FA:65:78:3C:0F:FE:F2:13:EA
Certificate issuer: /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
Certificate serial: 312E
Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/3A6CB168758811EA93AADD3FC4F9AE02.roa
Signing time: Mon 18 Mar 2024 15:51:56 +0000
ROA not before: Mon 18 Mar 2024 15:51:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58890
IP address blocks: 45.120.38.0/23 maxlen: 23
45.120.38.0/24 maxlen: 24
45.120.39.0/24 maxlen: 24
103.19.130.0/23 maxlen: 23
103.19.130.0/24 maxlen: 24
103.19.131.0/24 maxlen: 24
103.62.144.0/23 maxlen: 23
103.62.144.0/24 maxlen: 24
103.62.145.0/24 maxlen: 24
202.74.48.0/24 maxlen: 24
203.82.218.0/24 maxlen: 24
2404:6180::/32 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12590 (0x312e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9155447
Validity
Not Before: Mar 18 15:51:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65f8631c-bc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:64:0b:39:00:5e:fa:f4:27:32:54:b0:de:25:
59:79:b0:af:1a:7d:0b:59:ac:97:5b:23:dc:6f:b5:
f8:1f:5e:d0:67:20:0b:7f:75:aa:6d:d3:bf:96:d8:
e1:cf:d2:ea:3b:bd:36:14:fc:a1:89:18:18:c8:74:
a5:fd:5d:34:53:38:ee:b9:d1:c0:8f:7c:96:02:8f:
02:cb:24:3c:99:9d:dc:6b:dd:14:a2:67:fd:5b:b3:
90:e1:a8:1b:6f:4d:72:e0:b3:33:a0:09:fc:26:ab:
2d:36:1e:c0:a7:8e:9a:b0:d8:8d:4c:03:ab:62:02:
38:1a:a2:19:fe:5c:32:d6:bf:24:2e:82:10:15:ac:
64:92:9b:c6:5f:22:51:b0:f8:92:29:45:8c:f3:39:
61:93:eb:07:1f:a5:e4:08:98:b4:d0:e9:7b:2c:98:
00:c8:29:cd:44:67:d8:40:c4:1b:8c:d9:11:94:e9:
39:eb:68:bf:ad:43:64:7a:e5:9e:10:9f:9e:fd:eb:
74:81:05:f7:cb:ab:53:13:fa:7e:8c:2c:03:18:18:
9c:00:51:85:f8:0c:b2:1f:15:82:37:45:c4:2a:07:
4b:a1:d6:e8:41:88:75:e0:a6:4b:4b:33:19:9e:7b:
a9:f3:3a:bc:c7:a0:cb:49:1b:bb:f0:14:74:d1:ad:
ec:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:FF:12:A5:22:E1:59:D3:B7:FE:D0:FA:65:78:3C:0F:FE:F2:13:EA
X509v3 Authority Key Identifier:
keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/3A6CB168758811EA93AADD3FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.120.38.0/23
103.19.130.0/23
103.62.144.0/23
202.74.48.0/24
203.82.218.0/24
IPv6:
2404:6180::/32
Signature Algorithm: sha256WithRSAEncryption
74:a4:57:f1:12:f1:fa:ca:19:38:c2:11:56:19:d2:25:b8:da:
48:59:52:18:86:1c:53:a8:70:6c:c6:cf:ad:c1:90:45:33:92:
95:53:ff:d0:d8:fa:0f:54:61:7d:c8:fe:c9:18:86:f3:45:97:
dd:54:16:fc:46:a4:b8:b2:99:02:b1:87:c3:5d:70:00:49:7e:
2e:c8:10:95:1f:fd:e5:c4:47:b6:5e:d5:1f:04:ec:c5:42:a0:
5a:aa:ed:19:a7:27:1f:6a:2b:88:1b:09:41:40:5e:39:c6:ca:
8a:04:39:a7:24:32:38:9b:d6:ff:f6:89:0f:e8:a0:8a:d5:8f:
47:ce:35:ed:ce:de:f7:ee:b0:f4:66:ff:7b:99:59:72:52:55:
14:e2:89:5f:b8:e9:80:b5:93:a0:03:bd:22:47:96:fb:76:4c:
8e:84:9d:55:4e:7d:64:c9:b6:91:67:b8:1a:0d:4a:a4:4c:cb:
aa:b8:e2:9a:30:ad:7a:7b:41:6c:6f:47:fd:15:10:82:54:28:
df:59:f5:30:47:38:0b:d1:e7:83:0c:58:6e:05:74:4e:e2:73:
c7:ec:3b:2e:a7:52:60:30:0c:8b:5b:b9:1b:40:22:8c:db:f5:
f1:99:df:9e:2c:d0:85:08:c3:30:dc:0a:d8:d0:6a:79:21:68:
24:7a:57:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:30:53 2025 by rpki-client