Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/EA266BB0965911EB9A717E21C4F9AE02.roa
File: EA266BB0965911EB9A717E21C4F9AE02.roa (raw, json)
Hash identifier: gli6G9isd7214k/XwPb4QWIehT/cx5I/c38k571CPVY=
Subject key identifier: A2:1C:04:A1:A9:96:79:1B:6E:81:87:CD:BA:69:D2:CB:8F:2F:99:59
Certificate issuer: /CN=A9178580/serialNumber=45C9B9BD47D821848599A67D7F22956E0913C7F6
Certificate serial: 056C
Authority key identifier: 45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/EA266BB0965911EB9A717E21C4F9AE02.roa
Signing time: Fri 03 May 2024 01:13:42 +0000
ROA not before: Fri 03 May 2024 01:13:42 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 135393
IP address blocks: 103.100.102.0/24 maxlen: 24
103.100.104.0/23 maxlen: 23
103.216.132.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1388 (0x56c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178580
Validity
Not Before: May 3 01:13:42 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=66343a46-6e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:b5:92:1f:07:c0:fc:ea:8d:d4:4d:b1:4f:
f4:19:be:ff:12:30:fd:2d:6f:0e:ca:23:7b:5a:59:
ab:3a:f0:03:4e:de:fd:61:8c:28:92:e4:51:93:b7:
2d:05:16:a5:a8:46:4a:94:43:8b:5d:4f:fe:97:72:
8b:76:d9:5d:5b:28:a3:2e:ad:42:db:61:54:4d:b7:
cc:75:0c:65:48:a9:34:7e:7a:86:b7:c8:77:0e:79:
43:b7:25:db:4c:8e:f9:03:30:7c:c7:7c:19:98:1d:
d6:66:13:cd:78:da:8c:15:34:02:df:ed:9b:9f:80:
67:02:63:2a:37:56:58:47:27:be:f0:5e:88:30:51:
cb:75:0d:b4:f4:4f:e4:20:5a:e2:d2:a1:6f:f5:9d:
36:da:8c:1d:b1:06:9d:12:90:a8:84:e1:42:35:79:
58:21:60:68:68:e3:94:1d:a9:d0:04:0a:f7:c6:b1:
27:95:43:24:72:5f:99:b9:23:73:dd:d0:ae:20:a2:
08:a9:7e:9d:13:cf:a2:a2:ad:d6:a3:60:bd:70:e3:
23:5a:4b:68:04:4f:66:80:93:17:02:23:55:8a:5f:
bb:04:02:18:2e:c5:85:4f:be:79:cd:9b:29:54:22:
96:4d:67:74:c0:0b:c8:08:31:36:8e:26:14:2e:ef:
79:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1C:04:A1:A9:96:79:1B:6E:81:87:CD:BA:69:D2:CB:8F:2F:99:59
X509v3 Authority Key Identifier:
keyid:45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/EA266BB0965911EB9A717E21C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.100.102.0/24
103.100.104.0/23
103.216.132.0/24
Signature Algorithm: sha256WithRSAEncryption
08:9d:39:a6:38:6f:5f:21:c4:11:18:0f:3e:2d:2d:9b:fb:a6:
5e:f9:b8:6c:e1:e3:47:7d:d8:50:ac:05:3c:66:59:41:a9:24:
d3:b6:51:89:32:b6:22:2d:55:d6:b2:f3:ae:a4:e4:27:18:fd:
f8:39:6b:b7:38:8a:7e:8e:ec:17:ad:9c:2d:7f:16:30:f0:77:
16:c9:9e:36:db:7d:08:de:ef:bf:2f:4c:d2:24:f9:05:b8:62:
0d:fe:08:82:af:c5:f5:84:09:4e:d7:68:13:4f:0c:30:8f:de:
ea:92:eb:c6:cd:07:09:e0:fa:e0:88:1f:b8:ec:bf:86:a1:68:
b1:39:4a:dd:f9:45:93:be:80:e9:c1:0f:1c:09:36:32:62:22:
c3:df:d1:a3:6a:74:8f:a5:62:f2:86:87:5b:df:fa:ef:93:50:
c4:82:3b:d0:d0:e7:36:34:31:c0:3f:92:12:dc:8b:67:0e:eb:
55:db:a4:d3:5f:ad:e0:85:85:32:1d:d4:88:ae:58:2a:ad:b9:
29:a0:34:3e:50:ab:a2:2e:35:39:2c:68:56:29:27:78:38:69:
cd:35:fb:d3:9b:89:f3:26:01:7d:a1:18:2d:e9:bf:b0:98:a0:
dd:58:7e:73:3c:91:cd:9f:77:b7:c8:13:f1:22:1d:48:93:a1:
8a:70:00:5f
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzg1ODAxMTAvBgNVBAUTKDQ1QzlCOUJENDdEODIxODQ4NTk5QTY3RDdGMjI5NTZF
MDkxM0M3RjYwHhcNMjQwNTAzMDExMzQyWhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjM0M2E0Ni02ZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz1K1kh8HwPzqjdRNsU/0Gb7/EjD9LW8OyiN7WlmrOvADTt79YYwokuRRk7ct
BRalqEZKlEOLXU/+l3KLdtldWyijLq1C22FUTbfMdQxlSKk0fnqGt8h3DnlDtyXb
TI75AzB8x3wZmB3WZhPNeNqMFTQC3+2bn4BnAmMqN1ZYRye+8F6IMFHLdQ209E/k
IFri0qFv9Z022owdsQadEpCohOFCNXlYIWBoaOOUHanQBAr3xrEnlUMkcl+ZuSNz
3dCuIKIIqX6dE8+ioq3Wo2C9cOMjWktoBE9mgJMXAiNVil+7BAIYLsWFT755zZsp
VCKWTWd0wAvICDE2jiYULu95mQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFKIcBKGp
lnkbboGHzbpp0suPL5lZMB8GA1UdIwQYMBaAFEXJub1H2CGEhZmmfX8ilW4JE8f2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3ODU4MC8zOUY5NjZGODk2
NTgxMUVCQURGNDY0MUZDNEY5QUUwMi9SY201dlVmWUlZU0ZtYVo5ZnlLVmJna1R4
X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JjbTV2VWZZSVlTRm1hWjlmeUtWYmdrVHhfWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzg1ODAvMzlGOTY2Rjg5NjU4MTFFQkFERjQ2NDFGQzRGOUFFMDIvRUEyNjZCQjA5
NjU5MTFFQjlBNzE3RTIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBABnZGYDBAFnZGgDBABn2IQwDQYJKoZIhvcNAQELBQADggEB
AAidOaY4b18hxBEYDz4tLZv7pl75uGzh40d92FCsBTxmWUGpJNO2UYkytiItVday
866k5CcY/fg5a7c4in6O7BetnC1/FjDwdxbJnjbbfQje778vTNIk+QW4Yg3+CIKv
xfWECU7XaBNPDDCP3uqS68bNBwng+uCIH7jsv4ahaLE5St35RZO+gOnBDxwJNjJi
IsPf0aNqdI+lYvKGh1vf+u+TUMSCO9DQ5zY0McA/khLci2cO61XbpNNfreCFhTId
1IiuWCqtuSmgND5Qq6IuNTksaFYpJ3g4ac01+9ObifMmAX2hGC3pv7CYoN1YfnM8
kc2fd7fIE/EiHUiToYpwAF8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:20:37 2025 by rpki-client