Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C44DEE8E584111EE85E40820C4F9AE02.roa
File: C44DEE8E584111EE85E40820C4F9AE02.roa (raw, json)
Hash identifier: 3dgzTKNADS6dTaZ4Dns/R7NlRBp8ohyzR8flEwmQcfM=
Subject key identifier: 90:49:1E:40:F5:EA:D1:1D:16:EF:97:75:DB:8A:FE:30:B2:F4:12:25
Certificate issuer: /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial: BD
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C44DEE8E584111EE85E40820C4F9AE02.roa
Signing time: Sun 25 Aug 2024 01:43:59 +0000
ROA not before: Sun 25 Aug 2024 01:43:59 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 136038
IP address blocks: 103.151.172.0/24 maxlen: 24
103.151.173.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9170829
Validity
Not Before: Aug 25 01:43:59 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=66ca8c5f-fc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a3:4e:79:cd:0f:3a:2f:76:ef:38:9b:25:b1:
97:8b:20:78:da:65:43:03:4e:f6:a3:24:d7:28:56:
f8:b9:ec:d8:84:bd:cf:97:75:4f:43:b7:f6:07:07:
0f:6b:ab:19:32:6a:70:80:fc:bd:5e:23:ef:b0:31:
5e:a2:af:f1:40:c2:6a:dd:af:ed:55:51:70:16:67:
3f:cb:02:cf:35:3d:05:e4:2d:d7:91:56:c2:01:97:
24:62:9b:35:9d:a9:d6:f4:86:56:94:18:99:d1:21:
0b:c9:8d:ce:95:ac:10:49:34:b3:3d:07:50:c0:1d:
04:67:d7:3e:d9:30:56:21:b6:ba:f2:98:40:8c:86:
5b:a5:99:ec:05:c9:6e:b0:9f:91:d2:2e:7c:8e:4b:
a1:db:4b:6e:c8:8b:de:c2:c7:7a:1c:d8:71:46:4c:
56:c8:bb:14:b7:41:56:21:a3:fd:32:08:bf:c7:a0:
ad:8f:55:6e:ab:d3:a0:b8:8f:c0:74:ca:26:8a:f4:
f9:35:c8:ab:53:24:76:e9:d8:f4:8b:79:a8:dc:1f:
ce:e3:6c:b1:8a:e2:26:bf:fb:89:22:75:a4:01:42:
e5:f1:9c:5b:f0:d3:19:63:aa:72:41:eb:26:59:08:
72:1d:44:c4:1d:b3:30:64:b9:f2:bc:b0:38:cb:5f:
03:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:49:1E:40:F5:EA:D1:1D:16:EF:97:75:DB:8A:FE:30:B2:F4:12:25
X509v3 Authority Key Identifier:
keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/C44DEE8E584111EE85E40820C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.172.0/23
Signature Algorithm: sha256WithRSAEncryption
42:f3:29:cd:c1:31:bf:29:1b:fb:14:77:57:80:87:92:be:33:
9c:c6:e8:51:1a:a1:79:49:76:96:c8:8d:cc:69:a6:16:2c:83:
43:84:30:bd:a6:b7:7f:98:94:0b:6c:e7:d0:28:38:d2:32:30:
77:f5:25:d8:1b:b9:1a:e3:8a:56:ea:ac:ba:63:4b:39:a7:47:
8d:40:98:92:8e:3d:e3:ba:45:c2:3a:e2:f7:6a:f3:be:28:f7:
4f:1f:7e:34:3c:f4:90:26:cd:c5:e2:91:0e:e1:96:62:b5:b4:
c8:58:32:80:b3:aa:00:67:17:19:61:37:41:d9:58:60:56:2e:
cf:a4:d4:a4:d2:11:aa:24:7c:ee:23:20:7c:8a:9d:87:60:49:
de:38:f7:c1:2c:8b:81:36:b6:88:5e:4d:45:18:df:c2:4a:ed:
bb:a2:e2:ae:81:48:1c:3e:72:b1:1c:c9:d0:38:2c:e2:fa:30:
96:cd:51:00:ee:9c:8c:43:9c:f6:b5:b6:5f:39:21:a0:a0:c4:
5e:ec:d1:3a:46:f1:b7:81:5b:31:dd:a5:45:74:13:7e:63:c8:
41:32:df:ce:ab:cc:cf:de:2a:fa:ab:64:b5:3d:ca:55:74:a3:
2c:3a:03:37:ce:28:c5:86:ba:6c:ad:56:05:47:60:3d:fb:bf:
05:34:de:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:15:55 2025 by rpki-client