Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/CEEBA382BD1511EB9E873260C4F9AE02.roa
File: CEEBA382BD1511EB9E873260C4F9AE02.roa (raw, json)
Hash identifier: SXzW5vEmVU+GCJ/5C4H8HxVaw63CXUsgN+mA1S8Q1HE=
Subject key identifier: 85:B4:95:16:FE:6D:92:02:04:1B:80:7C:2B:A9:E8:8D:D5:AB:28:F2
Certificate issuer: /CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7
Certificate serial: 0581
Authority key identifier: 04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/CEEBA382BD1511EB9E873260C4F9AE02.roa
Signing time: Sun 22 Dec 2024 22:51:21 +0000
ROA not before: Sun 22 Dec 2024 22:51:21 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 131202
IP address blocks: 103.103.218.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1409 (0x581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165B02
Validity
Not Before: Dec 22 22:51:21 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=676897e9-11dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:4b:b6:97:39:fd:8d:14:60:88:44:80:0e:
96:9d:30:0d:d5:b4:51:bc:47:52:7e:72:5b:2d:ae:
a9:60:d3:fa:0c:f6:44:fd:0e:2a:f9:24:e6:0c:63:
da:5e:68:7e:b7:9a:50:e0:b0:6e:9c:a5:29:3e:7e:
48:ae:38:93:ba:88:9a:ee:a5:e8:08:06:be:4f:06:
2e:12:67:63:1d:70:99:d7:87:30:2c:02:dd:d0:0c:
03:ef:30:b7:a0:13:da:37:ab:05:39:d7:4b:83:29:
91:46:bf:34:30:da:7b:44:52:53:aa:70:9a:f3:84:
bb:22:89:c0:e6:78:c9:b4:87:29:5e:47:d6:0c:95:
18:8c:05:67:39:d3:29:ba:cd:2f:ae:6d:a5:5b:78:
dd:e7:f0:c2:83:55:c7:b6:32:fe:7a:1f:38:ab:55:
f5:c9:86:70:6d:e0:8b:f6:35:4e:18:3f:c7:90:d5:
be:03:ea:df:8c:76:2e:84:bc:a7:7c:95:a4:24:55:
9b:c4:13:6e:06:00:72:66:49:5b:ab:4e:51:f2:cd:
b7:b0:7b:7a:a2:cf:f7:01:71:b0:4a:79:b6:01:07:
c7:b4:d5:f8:91:82:a9:b2:a4:b3:56:7e:d6:5e:ba:
50:40:c3:c0:bc:ed:80:51:b7:55:69:9a:40:ae:5d:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B4:95:16:FE:6D:92:02:04:1B:80:7C:2B:A9:E8:8D:D5:AB:28:F2
X509v3 Authority Key Identifier:
keyid:04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/CEEBA382BD1511EB9E873260C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.218.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:14:37:9e:38:33:cb:7f:24:4a:aa:64:0a:69:5d:8c:39:c9:
aa:4c:a4:d3:70:51:2c:6c:fe:9d:ef:89:06:a3:67:64:8f:00:
34:ec:b2:0b:74:6e:9d:51:2f:f5:f1:2a:fd:09:1d:6c:fb:3c:
25:81:98:22:f7:95:71:8c:ca:42:2f:57:3a:fa:00:22:ef:84:
3d:0b:da:3d:da:96:f7:af:56:fa:16:99:e6:5a:63:d0:fc:3d:
9d:af:ae:57:b5:ba:b0:89:57:66:a3:a2:d7:f4:18:c2:54:e1:
35:87:f8:d7:ee:56:62:94:eb:fc:b4:34:87:43:71:13:32:b4:
44:78:17:eb:59:58:96:c1:b1:aa:59:6a:ce:77:17:c7:a4:a6:
ca:45:90:dc:c4:c6:41:4d:6f:a1:46:67:4c:e9:8d:e7:3a:82:
3b:a3:e7:d1:b6:1f:4e:2e:62:f9:5b:34:e5:0a:78:f2:fd:f0:
14:a4:06:1c:d0:21:0a:db:9b:5f:34:ac:1a:a9:17:55:ce:43:
b4:a1:81:03:3f:96:16:fe:96:72:ec:86:48:50:f9:3c:1d:e2:
be:14:13:08:a7:b3:ce:be:19:b8:b7:82:19:a0:d8:2c:f6:8b:
e6:75:f6:19:e6:5f:29:88:f5:35:3c:ba:f5:58:90:83:e0:e4:
88:63:d2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:20:41 2025 by rpki-client