Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/2EBCD6C6CCF311EC86719729C4F9AE02.roa
File: 2EBCD6C6CCF311EC86719729C4F9AE02.roa (raw, json)
Hash identifier: erIavO1BEA6yuxW1Ddxiq0YuolkG7uHYxff0nzGvNyU=
Subject key identifier: 44:D8:A0:35:BB:D8:B0:33:D4:6F:AA:BB:E2:75:80:B6:A2:3B:49:09
Certificate issuer: /CN=A9180386/serialNumber=B83E0AE8F82BFA061E8C4BC7BE73E9B803540D63
Certificate serial: 0283
Authority key identifier: B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/2EBCD6C6CCF311EC86719729C4F9AE02.roa
Signing time: Sat 13 Jul 2024 03:24:28 +0000
ROA not before: Sat 13 Jul 2024 03:24:27 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 135391
IP address blocks: 45.255.124.0/22 maxlen: 24
103.65.36.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 643 (0x283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180386
Validity
Not Before: Jul 13 03:24:27 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=6691f36b-bbe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ca:75:09:35:a6:4b:aa:be:90:ac:5c:ac:9e:
45:0b:51:ce:98:a6:e1:18:64:1d:24:ca:93:63:d0:
49:37:94:4d:ed:94:3c:07:74:16:86:ae:20:d1:61:
2f:83:f3:c6:59:30:4d:53:94:2f:b7:40:32:56:b4:
87:1b:10:e3:12:e5:a4:7c:ba:4c:3b:6f:97:50:a6:
71:ae:c2:20:a3:42:3b:45:4a:27:2a:cc:5d:4c:a9:
14:aa:bf:b4:da:b6:1e:94:da:86:e3:bc:8c:55:d6:
74:30:50:8d:f0:0a:e5:95:c0:41:24:4d:63:f2:0d:
90:cd:2f:e6:18:fe:60:17:ac:68:91:3a:b4:7f:93:
91:75:b7:29:2b:2f:28:bf:ea:63:52:20:39:12:0a:
37:85:db:f9:00:63:cd:a7:cc:84:1d:4e:43:0a:4d:
2e:cf:43:d5:92:a8:2a:0f:38:28:13:9b:1f:bd:e2:
c8:91:f9:13:a1:dc:de:89:8a:64:d3:fa:c3:1a:0e:
fd:50:e1:89:c2:8f:22:22:a8:23:79:44:18:bf:a6:
0a:5f:da:09:96:e5:25:2b:ff:24:08:1e:87:26:31:
be:1b:f1:ab:8d:97:84:59:a1:74:ea:df:75:55:8c:
29:12:98:ab:be:a6:87:9f:4b:31:2f:9b:01:df:e0:
83:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D8:A0:35:BB:D8:B0:33:D4:6F:AA:BB:E2:75:80:B6:A2:3B:49:09
X509v3 Authority Key Identifier:
keyid:B8:3E:0A:E8:F8:2B:FA:06:1E:8C:4B:C7:BE:73:E9:B8:03:54:0D:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/uD4K6Pgr-gYejEvHvnPpuANUDWM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uD4K6Pgr-gYejEvHvnPpuANUDWM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180386/06F8408CCCF111ECBEA96F29C4F9AE02/2EBCD6C6CCF311EC86719729C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.255.124.0/22
103.65.36.0/22
Signature Algorithm: sha256WithRSAEncryption
16:6d:e8:8b:33:4e:32:20:63:ac:c1:bb:df:d4:21:e5:7c:2b:
4a:dd:53:a4:7e:27:f0:09:17:34:2a:c6:48:e0:ae:90:a9:db:
b5:62:92:2c:04:e2:6e:db:6e:b7:b4:96:91:56:f4:69:6f:70:
27:ea:9b:4a:4c:2b:3e:1b:21:dc:74:e4:26:66:d5:e4:07:f3:
d4:ec:4e:ef:c4:02:50:57:a1:6c:28:7b:0a:6a:ef:56:1e:2c:
a4:e8:4f:c0:de:08:18:c7:fc:da:ee:82:99:8c:a3:3b:b1:dd:
51:50:26:55:4c:20:26:41:d7:c1:66:30:da:a8:db:d5:fa:84:
c1:ad:ef:12:61:de:dd:1d:5c:95:a5:c4:1e:e5:b4:c8:09:a8:
32:27:b8:8b:03:1c:ca:e2:00:b4:31:21:d8:c3:ac:d9:63:8e:
00:b3:ee:76:22:c7:f4:e1:74:59:c9:81:16:5b:d0:16:82:50:
c6:bc:da:87:fa:7a:68:8c:c8:16:ec:a8:52:0c:61:93:63:aa:
1f:29:72:fb:19:17:13:57:b7:05:47:ab:f8:e6:bb:c0:1f:cd:
68:66:99:e8:5a:a8:ce:cb:0b:ad:f8:78:1b:e0:74:d0:66:ce:
a4:9f:ad:16:c0:99:3e:06:25:0d:9f:d5:a2:1d:e2:5e:f9:5d:
83:1a:63:61
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzODYxMTAvBgNVBAUTKEI4M0UwQUU4RjgyQkZBMDYxRThDNEJDN0JFNzNFOUI4
MDM1NDBENjMwHhcNMjQwNzEzMDMyNDI3WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjkxZjM2Yi1iYmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnsp1CTWmS6q+kKxcrJ5FC1HOmKbhGGQdJMqTY9BJN5RN7ZQ8B3QWhq4g0WEv
g/PGWTBNU5Qvt0AyVrSHGxDjEuWkfLpMO2+XUKZxrsIgo0I7RUonKsxdTKkUqr+0
2rYelNqG47yMVdZ0MFCN8ArllcBBJE1j8g2QzS/mGP5gF6xokTq0f5ORdbcpKy8o
v+pjUiA5Ego3hdv5AGPNp8yEHU5DCk0uz0PVkqgqDzgoE5sfveLIkfkTodzeiYpk
0/rDGg79UOGJwo8iIqgjeUQYv6YKX9oJluUlK/8kCB6HJjG+G/GrjZeEWaF06t91
VYwpEpirvqaHn0sxL5sB3+CDXQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFETYoDW7
2LAz1G+qu+J1gLaiO0kJMB8GA1UdIwQYMBaAFLg+Cuj4K/oGHoxLx75z6bgDVA1j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDM4Ni8wNkY4NDA4Q0ND
RjExMUVDQkVBOTZGMjlDNEY5QUUwMi91RDRLNlBnci1nWWVqRXZIdm5QcHVBTlVE
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VENEs2UGdyLWdZZWpFdkh2blBwdUFOVURXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAzODYvMDZGODQwOENDQ0YxMTFFQ0JFQTk2RjI5QzRGOUFFMDIvMkVCQ0Q2QzZD
Q0YzMTFFQzg2NzE5NzI5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAIt/3wDBAJnQSQwDQYJKoZIhvcNAQELBQADggEBABZt6Isz
TjIgY6zBu9/UIeV8K0rdU6R+J/AJFzQqxkjgrpCp27VikiwE4m7bbre0lpFW9Glv
cCfqm0pMKz4bIdx05CZm1eQH89TsTu/EAlBXoWwoewpq71YeLKToT8DeCBjH/Nru
gpmMozux3VFQJlVMICZB18FmMNqo29X6hMGt7xJh3t0dXJWlxB7ltMgJqDInuIsD
HMriALQxIdjDrNljjgCz7nYix/ThdFnJgRZb0BaCUMa82of6emiMyBbsqFIMYZNj
qh8pcvsZFxNXtwVHq/jmu8AfzWhmmehaqM7LC634eBvgdNBmzqSfrRbAmT4GJQ2f
1aId4l75XYMaY2E=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:03:06 2025 by rpki-client