Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/A74C3132F49211ED8659177BC4F9AE02.roa
File: A74C3132F49211ED8659177BC4F9AE02.roa (raw, json)
Hash identifier: 306udLdXsDXkERPewXDbNH98O47h8mfNTv4RCgj1cHQ=
Subject key identifier: 2D:22:6B:B3:B6:C0:83:84:6A:46:CC:EE:8E:2A:B8:71:25:B8:12:16
Certificate issuer: /CN=A9166123/serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18
Certificate serial: 014F
Authority key identifier: 7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/A74C3132F49211ED8659177BC4F9AE02.roa
Signing time: Mon 03 Feb 2025 03:26:35 +0000
ROA not before: Mon 03 Feb 2025 03:26:35 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 59349
IP address blocks: 103.234.168.0/22 maxlen: 24
2001:df6:b800::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 335 (0x14f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9166123
Validity
Not Before: Feb 3 03:26:35 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67a0376b-1d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:a2:76:f3:34:6a:e9:12:63:0e:78:75:8c:
f9:30:6f:ea:93:75:84:a5:7b:61:ff:e5:a9:93:ee:
d0:a6:0d:bc:78:82:9b:af:b3:a1:51:ac:1c:3b:b3:
67:ea:ad:28:b8:84:b2:12:fe:21:b0:68:4e:18:09:
7e:39:4a:1d:16:30:69:cf:6d:2b:87:c6:8b:88:e0:
c1:3d:7b:59:d0:33:64:14:81:6f:9b:2d:1b:92:df:
4f:2d:17:00:2c:f4:8b:0d:e2:8a:1e:ff:fb:11:9a:
d8:5a:78:2c:b4:11:71:77:05:bd:e3:0f:b2:3c:86:
f6:dc:64:d6:eb:82:87:d0:61:33:bb:eb:ec:39:bf:
98:a2:0f:aa:3b:b5:6a:0a:71:38:a1:2f:b6:42:aa:
ed:75:d5:f1:ba:86:84:18:87:cc:bc:63:a0:4b:f7:
13:ef:9e:9e:bf:59:b1:05:f2:58:be:a5:eb:24:d7:
c5:53:86:f4:cd:aa:b8:db:c2:dd:41:51:d9:e3:2e:
09:f9:93:58:78:45:a0:68:2b:b2:6b:17:86:81:b7:
0a:0c:a0:52:d5:93:9e:90:cb:c6:e2:1d:c7:67:d2:
4e:8c:c3:77:4f:71:7e:3f:67:2f:96:dc:7f:02:18:
12:bc:2a:cd:9c:7c:57:6e:1b:7f:79:a5:47:93:da:
05:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:22:6B:B3:B6:C0:83:84:6A:46:CC:EE:8E:2A:B8:71:25:B8:12:16
X509v3 Authority Key Identifier:
keyid:7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/A74C3132F49211ED8659177BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.168.0/22
IPv6:
2001:df6:b800::/48
Signature Algorithm: sha256WithRSAEncryption
55:9f:59:09:c3:09:49:d5:a5:df:f7:85:a0:ef:06:ee:7f:d2:
2c:98:2c:0d:64:a0:14:6d:b2:4b:f4:f4:31:16:1f:19:70:a9:
b2:a4:b7:67:cc:39:fb:1e:dd:ff:48:fb:87:a1:50:99:bb:2b:
9c:d6:72:af:4f:bc:c7:33:24:f5:f9:f8:50:2e:c3:18:5b:41:
7a:85:fc:c9:0c:b3:9f:29:c3:7a:82:cf:58:84:d8:dc:a0:ac:
34:60:db:42:b3:7e:18:89:f3:bc:9c:5d:f8:2b:98:18:2a:37:
b5:45:2d:fb:2c:c0:5d:e3:c4:ca:8e:39:c8:44:d5:ca:b6:3d:
e3:ae:2a:b1:2c:10:4d:0b:3d:7c:32:5e:f5:c8:db:e0:32:36:
6d:f0:fa:4a:04:98:8b:a5:2f:c5:bf:16:78:39:6b:e4:2b:5f:
07:a3:b7:59:6f:49:e5:ba:01:0c:19:29:db:f7:d1:b2:c9:40:
48:28:6d:40:a6:59:20:49:0d:f6:4f:64:44:2e:1f:8e:f7:c4:
8f:01:5b:ca:69:87:a3:97:93:69:f3:14:bc:f6:70:21:8a:c9:
95:12:b3:e6:2c:c3:7f:08:84:82:9a:b7:c9:3d:b1:09:13:a9:
7c:90:ce:3c:7e:74:be:df:a4:d7:96:f1:62:65:6f:53:59:96:
59:1b:72:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:16:01 2025 by rpki-client