Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/6FDFF8D8C47911EF8CF7EA13C4F9AE02.roa
File: 6FDFF8D8C47911EF8CF7EA13C4F9AE02.roa (raw, json)
Hash identifier: bvJjjihdRZllOYuyplnAVAbIVDgRg3UyfIZ0OdgP/WI=
Subject key identifier: 28:40:09:FD:41:70:96:D6:30:52:93:CE:42:2F:8A:4E:2C:3D:E4:ED
Certificate issuer: /CN=A916732F/serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
Certificate serial: 0549
Authority key identifier: 1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/6FDFF8D8C47911EF8CF7EA13C4F9AE02.roa
Signing time: Fri 27 Dec 2024 17:38:52 +0000
ROA not before: Fri 27 Dec 2024 17:38:52 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 140068
IP address blocks: 103.161.46.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1353 (0x549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916732F
Validity
Not Before: Dec 27 17:38:52 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=676ee62c-beec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6e:84:4c:a9:2e:af:fc:5b:e5:47:cb:38:f8:
ea:11:5d:f1:38:29:cb:9d:64:bf:2a:c4:a3:bc:ab:
43:9f:19:f7:5d:ec:fc:76:18:bc:1e:60:a8:ad:f1:
a5:96:34:f2:d2:b2:cb:2f:a8:38:27:38:68:ea:b7:
40:b8:e9:e5:5d:26:91:a6:73:67:68:fd:6d:10:4a:
f3:a6:a1:ee:fa:0b:8a:c6:49:3b:b9:e6:fe:e7:ce:
5e:a7:90:f0:d5:a5:f9:41:de:a2:44:c2:07:ca:e3:
a3:da:87:2c:c2:c0:b9:f8:13:f0:6a:b6:b4:83:23:
d9:19:80:7c:b4:bc:9f:03:77:ef:ac:ff:47:2c:62:
26:8f:9e:14:92:d8:53:86:64:06:50:e1:b3:ab:97:
17:cc:82:9c:60:55:0a:36:e0:2b:26:3a:e7:4d:6d:
9d:ef:f1:12:c1:e9:9c:c3:4f:15:81:b6:83:e3:85:
e9:63:c6:09:10:41:96:e5:65:44:4f:8e:52:c3:d6:
f7:8c:f7:03:c0:a6:dd:94:13:3b:74:6f:71:c4:84:
d5:2b:31:a7:95:b9:2a:c9:f1:07:ec:55:aa:e4:d2:
64:a4:66:33:a1:93:83:eb:9b:2e:f4:1d:86:da:79:
f0:a0:d5:9e:bb:a1:64:27:ed:bb:6b:db:46:4f:bb:
8e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:40:09:FD:41:70:96:D6:30:52:93:CE:42:2F:8A:4E:2C:3D:E4:ED
X509v3 Authority Key Identifier:
keyid:1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/6FDFF8D8C47911EF8CF7EA13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.46.0/24
Signature Algorithm: sha256WithRSAEncryption
98:42:c8:8e:b4:15:00:2f:5b:a7:5d:13:aa:f9:2b:f9:10:8b:
78:88:ea:e8:5f:8b:c9:a1:ef:dd:8c:84:e5:ba:eb:82:8b:2f:
1e:08:04:be:4f:1c:43:91:e7:42:1a:56:cb:c6:6a:65:31:fd:
4e:f1:7a:28:46:46:19:d3:2b:f9:df:d5:e9:9c:b4:f4:9c:57:
9b:8f:85:72:a3:74:79:5d:6f:25:d2:4c:45:49:11:e0:ee:fe:
48:a0:6f:f8:9f:a9:74:81:40:ee:4f:be:30:f6:5e:41:15:bb:
65:d7:0c:29:0e:7d:fc:d4:8f:26:75:40:87:e9:45:aa:4b:70:
39:b9:d1:53:fa:80:27:eb:d4:f3:40:eb:c9:d8:f7:57:ce:eb:
87:50:8c:79:89:16:9b:56:27:20:13:f8:37:e6:e1:3e:1b:86:
cd:58:b5:23:5b:b6:07:90:b0:e1:f0:02:86:71:62:de:5a:58:
44:89:fa:8e:c4:85:13:99:c1:fc:a3:af:21:99:6b:0d:88:fc:
ad:18:3b:c2:e7:a8:31:0a:38:71:32:17:81:ef:63:0a:c8:10:
94:71:00:1e:28:e6:bc:c9:a2:7c:c3:bd:6f:d5:6e:c0:ce:5c:
07:89:78:8d:9d:8f:f8:33:1c:89:f3:26:fb:30:37:9a:2e:ef:
59:f4:29:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:57:53 2025 by rpki-client