Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4630FCA0689511EC8FBB5A68C4F9AE02.roa
File: 4630FCA0689511EC8FBB5A68C4F9AE02.roa (raw, json)
Hash identifier: SlibrshVY5shapVIPORxjvZkgmmKmtnhXZgJ2avaCtE=
Subject key identifier: E2:A7:37:A0:2B:77:94:67:E7:7B:83:2B:55:48:D5:39:0D:62:4A:D2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 89DB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4630FCA0689511EC8FBB5A68C4F9AE02.roa
Signing time: Thu 30 May 2024 16:00:35 +0000
ROA not before: Thu 30 May 2024 16:00:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134892
IP address blocks: 103.209.88.0/24 maxlen: 24
103.209.89.0/24 maxlen: 24
103.209.91.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35291 (0x89db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:00:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a2a3-eca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ac:24:f7:47:af:ae:44:5a:ea:d9:8d:c0:e8:
08:da:ed:a3:4f:e9:25:2d:ca:75:cc:18:c1:a9:92:
5a:5f:25:89:d6:9a:a1:98:ec:1d:46:c6:80:6b:17:
d9:24:e4:7b:55:bc:4c:87:94:6a:50:0d:bb:3c:ac:
fb:e2:f3:3a:54:ce:56:a4:bc:d3:27:64:b7:28:0a:
66:d1:18:b7:e4:3f:3b:52:7e:f4:57:58:17:ea:60:
08:05:f9:f8:06:81:ac:88:ce:6b:6f:e5:1c:8e:5f:
f4:3f:c0:88:82:13:d0:1d:72:0f:7f:72:e5:6d:56:
4d:00:16:87:86:ff:e3:58:d5:51:be:9a:49:da:4e:
c4:bd:fb:8f:26:aa:4c:95:25:55:fa:28:05:55:8a:
5e:67:96:6e:9b:92:a8:01:84:98:89:c6:1c:d3:47:
c3:43:3e:90:26:80:4d:17:83:ce:f6:91:3f:60:61:
da:f8:0c:5e:19:8d:c4:8c:af:93:e9:91:4e:af:13:
c0:b1:f4:13:88:57:66:33:a5:73:98:80:c5:96:0c:
29:af:9e:cf:39:2d:a8:40:af:7d:03:bd:9b:ec:75:
20:20:db:e3:62:49:13:bd:18:b3:ed:23:1f:53:86:
ad:e3:52:12:4c:c7:a3:b8:1f:a9:98:89:17:e6:5f:
7e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A7:37:A0:2B:77:94:67:E7:7B:83:2B:55:48:D5:39:0D:62:4A:D2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4630FCA0689511EC8FBB5A68C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.209.88.0/23
103.209.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:af:9c:cc:67:aa:5d:2d:9e:e5:f9:41:3a:1e:41:c6:73:16:
bc:29:74:af:e9:70:47:f6:b8:8c:36:5b:3f:56:b6:3f:18:5f:
36:ac:1f:a8:20:1e:e7:49:39:92:39:48:31:cd:13:d3:ec:9d:
8c:63:ba:1b:37:eb:99:e0:38:15:b7:71:2f:29:45:eb:1f:aa:
72:8c:64:0d:f4:ff:63:e6:1b:f2:d5:e0:98:87:06:ea:0e:e6:
b4:19:10:7d:18:f7:13:f4:f9:07:9b:f0:a4:34:a5:31:e1:68:
5d:5d:fc:27:d3:7a:43:e9:3c:7b:8f:2f:ce:cb:f4:0b:6f:a9:
46:31:49:2a:b0:a9:8b:66:78:1a:3b:11:da:de:3e:3f:8f:e0:
41:bb:0c:78:06:f1:17:9f:ab:83:7d:0e:dc:af:d0:fa:eb:cd:
ae:45:b1:81:71:de:00:cc:d5:bd:2b:c9:e1:38:fb:43:44:5b:
3a:c7:77:ed:0c:ee:40:29:e7:c5:46:3d:78:d1:d8:e0:8a:18:
e0:09:76:c8:90:db:bc:94:6f:f2:9a:7d:1e:1e:de:55:ce:76:
fc:ef:29:45:2f:bd:11:68:69:d7:df:19:76:f4:6f:bd:04:85:
2e:23:85:ac:c0:41:fb:21:ce:bb:6c:77:7b:9e:b5:f4:07:14:
be:db:9f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:52:47 2025 by rpki-client