Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/EEADE2CE038711EE81157F3AC4F9AE02.roa
File: EEADE2CE038711EE81157F3AC4F9AE02.roa (raw, json)
Hash identifier: 2SWOj8P/v2WmcEvu5LXP2xEZxHVg8sbXWoOe+qvwI5o=
Subject key identifier: A8:A9:CD:A3:7F:6A:82:6D:51:D2:4B:ED:EE:7C:47:05:CB:2A:B7:51
Certificate issuer: /CN=A918B3C9/serialNumber=E925806615DDE5D9AA46AF75E67B5C1FB7146A6A
Certificate serial: D4
Authority key identifier: E9:25:80:66:15:DD:E5:D9:AA:46:AF:75:E6:7B:5C:1F:B7:14:6A:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6SWAZhXd5dmqRq915ntcH7cUamo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/EEADE2CE038711EE81157F3AC4F9AE02.roa
Signing time: Mon 17 Jun 2024 07:15:48 +0000
ROA not before: Mon 17 Jun 2024 07:15:48 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 150750
IP address blocks: 103.198.154.0/24 maxlen: 24
103.198.155.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212 (0xd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B3C9
Validity
Not Before: Jun 17 07:15:48 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=666fe2a4-1fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b2:6e:df:39:46:14:9a:d8:34:e9:96:0c:5f:
bc:4a:31:3a:4f:eb:ae:83:5f:12:d5:71:d7:72:a7:
73:46:21:f5:d9:48:3b:a9:b5:fa:3a:9b:34:90:f2:
26:47:9a:68:63:0e:34:e5:58:b6:13:23:a7:7a:fa:
ac:d8:0a:d3:85:df:07:ac:e5:cc:48:9a:b1:d3:25:
1a:89:f1:a5:a5:48:e4:c9:78:f0:5c:7a:27:d6:45:
8c:e8:c2:90:32:0d:e3:8b:43:fe:29:ce:2c:6d:a7:
23:ae:58:59:e6:7a:a5:f9:29:60:8d:a5:00:1d:b3:
27:06:5a:e5:19:f7:f6:0d:82:35:84:1a:66:2c:b8:
1e:f7:14:96:61:32:a8:e1:46:5e:ae:cf:ee:37:ec:
af:4f:9f:96:b4:27:7e:a6:32:e8:04:f8:56:be:34:
d8:2b:56:f9:c9:82:ae:03:c6:41:f1:c0:93:08:54:
17:eb:54:da:46:ff:5f:b2:23:1b:58:c5:51:07:3e:
fc:24:52:f2:84:c8:26:fd:7c:69:0e:95:98:16:b9:
f4:13:db:5e:ad:ed:28:41:a8:6b:88:be:51:fb:8a:
55:17:39:a4:f9:d9:ae:aa:86:a9:e8:e7:52:e6:62:
b2:f8:87:f1:06:02:94:05:8b:a5:71:7f:72:40:49:
5e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A9:CD:A3:7F:6A:82:6D:51:D2:4B:ED:EE:7C:47:05:CB:2A:B7:51
X509v3 Authority Key Identifier:
keyid:E9:25:80:66:15:DD:E5:D9:AA:46:AF:75:E6:7B:5C:1F:B7:14:6A:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6SWAZhXd5dmqRq915ntcH7cUamo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/EEADE2CE038711EE81157F3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.198.154.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:01:7f:6f:3b:90:c9:bd:ff:ef:39:46:02:5b:39:11:9f:28:
ef:19:6e:e1:80:0a:37:1e:74:23:69:d2:92:8f:86:0a:08:10:
75:2d:c9:2b:5f:59:d6:4e:bc:66:22:91:15:6b:f3:ed:30:49:
11:6a:b7:95:eb:6b:ac:8b:e4:b9:2c:71:b5:86:3c:db:9a:ab:
27:f6:08:96:03:64:58:c3:40:1b:1b:ac:53:06:d8:11:ca:69:
62:d5:68:4a:11:ee:e4:55:8e:57:1f:89:9a:b2:e7:b2:d9:eb:
e4:91:40:3b:80:e7:30:cb:96:53:14:39:9a:91:14:df:92:17:
20:4b:b0:6e:cb:74:1c:4e:8c:03:6e:8a:cb:92:db:53:99:7a:
ec:ac:63:cd:cb:d9:2f:50:2e:ed:8d:e0:e7:05:5a:30:ec:2b:
60:d2:93:0f:82:8e:14:47:56:83:48:f4:da:4d:52:b1:bb:4b:
d0:c4:f7:bb:4b:3a:36:cc:51:2e:f7:51:06:2b:f4:cb:eb:35:
75:29:0a:65:92:41:a2:7e:79:04:d9:12:ad:48:34:6e:4f:55:
d5:f8:2e:be:75:94:a2:47:4c:af:3d:16:2b:e3:da:f3:46:66:
68:7f:52:98:3d:b8:90:0b:8d:f5:fc:f6:2d:78:e7:b0:9b:01:
ab:ce:3d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:25 2025 by rpki-client