Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07ACCDB8DF5411EF8D7B2572C4F9AE02.roa
File: 07ACCDB8DF5411EF8D7B2572C4F9AE02.roa (raw, json)
Hash identifier: tKdPHCiLx5CjeREDGObvAPyI6IS3CXqzCnnQXJ2JeYY=
Subject key identifier: D1:ED:9E:28:BA:6D:EA:F9:DF:62:08:5C:F2:8B:F7:94:43:2A:62:4B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: A431
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07ACCDB8DF5411EF8D7B2572C4F9AE02.roa
Signing time: Thu 30 Jan 2025 21:49:07 +0000
ROA not before: Thu 30 Jan 2025 21:49:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 835
IP address blocks: 103.38.150.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42033 (0xa431)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jan 30 21:49:07 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=679bf3d3-be60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:1a:da:31:c2:c2:0c:dc:f6:9a:a5:f4:32:
83:35:33:9b:d6:b2:bb:19:56:69:2f:1d:48:4e:79:
d0:5f:bb:8f:d4:29:4d:1f:df:ca:a2:d3:e1:c2:3f:
98:4a:31:d2:85:d9:cc:2c:5a:bd:1b:11:7a:f9:1b:
67:cb:57:da:f0:5a:23:f0:cd:e9:e4:95:64:b8:f9:
e0:ae:e4:00:15:4a:13:2c:d0:4b:a3:93:9b:d5:1e:
97:a1:81:d2:72:30:50:67:60:2b:93:9d:94:66:76:
cb:fb:37:d9:db:1f:7a:8b:da:a9:77:95:e0:8d:f3:
20:4b:52:e7:c2:b6:a8:f2:3f:5f:11:30:6f:7a:2d:
6e:62:75:6b:2f:b4:58:90:d2:54:fd:0f:24:a5:78:
e8:a5:a7:16:17:a3:c3:41:8a:dd:ed:b5:8a:2d:43:
c4:fe:75:21:27:eb:1d:24:57:52:2c:81:7b:c4:7d:
25:1f:85:8e:da:f8:b5:91:dd:8a:5b:9f:3f:e5:47:
bd:bc:7a:19:d1:2e:69:bb:b6:76:8e:d8:d7:5c:27:
5b:4f:fb:0d:e3:ee:03:62:88:16:ef:fc:6d:c9:36:
a3:da:a9:b0:87:fd:46:c8:c8:df:3c:a6:38:29:69:
f9:04:a7:fe:8c:ae:65:33:71:37:bb:61:60:c0:d3:
e1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:ED:9E:28:BA:6D:EA:F9:DF:62:08:5C:F2:8B:F7:94:43:2A:62:4B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/07ACCDB8DF5411EF8D7B2572C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.150.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d6:f3:8b:d7:fb:59:3d:08:70:9c:f5:58:40:69:86:0e:70:
15:eb:b7:b4:0b:ca:56:a3:4d:cd:6e:b8:81:31:36:eb:b9:d6:
44:0a:9f:e5:0c:cd:06:97:71:9a:0f:fb:87:a2:e0:97:ef:fb:
e6:cc:76:3a:cf:35:4c:b2:48:16:c9:b3:fe:80:23:1f:06:2d:
e8:86:de:02:be:b2:fd:48:a6:d8:3c:8a:e1:e8:a3:2b:6f:f6:
6c:81:cc:3c:77:c2:d1:23:7e:aa:88:bd:21:7d:45:1b:f9:e3:
88:53:13:08:5a:a2:0b:59:98:9d:ec:ff:5d:1d:a4:a0:16:13:
73:26:72:ea:47:bd:f8:6c:11:ac:dd:f2:ed:b3:b6:66:bd:59:
68:60:1f:eb:c6:55:5e:b1:9a:d9:8c:1b:de:8b:fe:18:3d:b7:
98:a7:98:01:4e:a5:dd:cd:1b:d7:ae:18:2b:22:6f:22:ff:a8:
f3:f2:e3:66:fb:3f:6c:4d:3f:28:be:00:f5:b0:55:20:f8:cc:
fe:90:d9:e1:ac:2d:f2:6d:e1:96:42:93:6e:f7:46:cc:61:04:
fc:00:2c:2d:bb:7c:1b:6a:77:3a:2a:e1:70:38:e8:d3:07:c6:
04:54:33:3a:65:f0:80:99:aa:bf:05:03:7a:ff:58:75:d1:25:
16:73:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:54:02 2025 by rpki-client