Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/A6EF086637E411EC9BA3E20AC4F9AE02.roa
File: A6EF086637E411EC9BA3E20AC4F9AE02.roa (raw, json)
Hash identifier: K2Zxx9ME49vXDeg1Ffdf+j0UFdQqBnMUQi0IozP8thk=
Subject key identifier: DD:BE:C9:2B:B4:93:8F:31:6C:31:37:7A:4F:C5:05:9C:12:D4:BB:72
Certificate issuer: /CN=A9169E9B/serialNumber=97495816D6DB49DFEDEAC4C17429126FE3DF97FB
Certificate serial: 0B3C
Authority key identifier: 97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/A6EF086637E411EC9BA3E20AC4F9AE02.roa
Signing time: Mon 14 Oct 2024 19:27:58 +0000
ROA not before: Mon 14 Oct 2024 19:27:58 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 63969
IP address blocks: 103.129.115.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2876 (0xb3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E9B
Validity
Not Before: Oct 14 19:27:58 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=670d70be-8363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:16:03:96:f3:86:09:a9:bb:1f:88:89:d1:
59:aa:d7:d3:60:eb:70:84:61:56:62:bf:5e:82:b1:
72:de:e1:9a:05:28:a9:f8:17:db:b4:20:b3:10:12:
c1:db:bd:07:47:62:70:5b:2d:a3:ca:f2:68:d7:42:
56:af:48:d5:fe:6b:82:97:6a:66:5c:9f:6e:a8:cd:
75:e4:15:71:8d:ed:2b:1f:41:3b:07:af:73:ac:9d:
d6:3b:43:7b:e0:dc:7c:70:e2:58:27:5d:82:7c:e8:
c8:68:08:61:a4:98:11:39:9c:f4:ec:6a:d9:f5:f2:
e0:a5:fb:06:f1:22:ef:04:05:02:d6:c8:ad:a3:8b:
2e:40:de:d8:8d:a5:91:34:2d:01:86:58:a5:5a:a0:
b9:b8:d4:b3:73:12:00:8c:be:f8:2e:7f:89:08:ef:
5b:9d:f2:1d:7d:b6:8f:6e:0a:38:13:31:04:94:aa:
82:92:c2:52:13:da:66:10:1b:bc:24:67:e1:16:6d:
ea:21:63:8e:c3:b3:e1:39:a5:89:aa:c9:03:b7:46:
21:89:86:25:05:2a:b9:fa:17:52:db:42:20:4d:95:
a4:e3:56:74:57:e6:e4:6c:90:e7:f4:52:37:68:67:
26:75:9e:43:05:f0:ef:9b:b2:ca:61:3e:78:e1:05:
7b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BE:C9:2B:B4:93:8F:31:6C:31:37:7A:4F:C5:05:9C:12:D4:BB:72
X509v3 Authority Key Identifier:
keyid:97:49:58:16:D6:DB:49:DF:ED:EA:C4:C1:74:29:12:6F:E3:DF:97:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0lYFtbbSd_t6sTBdCkSb-Pfl_s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E9B/7A53A61825A311EAA47F0527C4F9AE02/A6EF086637E411EC9BA3E20AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.115.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ee:d4:c3:37:7a:cb:d8:39:96:84:a0:10:33:8e:30:39:c4:
2b:3b:40:28:3e:10:8b:2d:b1:2d:22:e8:cd:8e:fd:73:7c:fa:
5b:4d:70:6b:aa:98:ef:a8:b2:d8:70:d5:44:38:96:18:82:8e:
6a:4a:87:a9:40:2d:1e:d7:30:31:83:f1:c9:01:ac:0a:22:6d:
f9:12:f6:e8:e9:56:f6:f4:34:52:e6:fc:0e:b2:ed:c6:b5:a7:
2f:77:ff:3d:1f:22:6d:15:43:14:eb:44:9b:0e:00:80:be:1d:
59:b5:2b:af:ff:51:ef:7e:41:48:b8:75:da:d1:95:af:ec:19:
83:1e:35:01:05:4e:d7:7d:c2:03:11:aa:d6:2a:61:3f:48:d9:
f2:94:4a:8d:f8:12:98:4e:0e:13:64:35:72:48:65:fd:ea:07:
a2:df:a8:0c:69:ea:18:b3:cb:37:f3:b5:05:78:0c:c5:ed:97:
57:dc:36:d6:8b:e9:97:94:be:ed:4c:14:3c:6b:f5:a9:5e:0b:
81:d1:34:6f:77:8c:10:ea:98:1c:b4:92:ae:cd:d3:59:c1:07:
b7:17:0b:d2:82:fa:0d:1b:c3:a6:6c:7c:c0:c7:e0:5c:ba:62:
df:e3:ba:4e:c5:00:32:cf:94:74:a4:0e:00:00:3f:bd:64:e6:
6e:78:61:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:30:58 2025 by rpki-client