Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A82E420250011EDB7A3C114C4F9AE02.roa
File: 5A82E420250011EDB7A3C114C4F9AE02.roa (raw, json)
Hash identifier: SxnUSsXRWc34iNcU8184TEOOqVsD4puALUb2KZkyn1I=
Subject key identifier: 05:49:9A:14:E7:DA:33:6D:8D:0E:B5:54:58:6F:99:33:25:B0:8C:5E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6EB5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A82E420250011EDB7A3C114C4F9AE02.roa
Signing time: Wed 10 May 2023 16:35:18 +0000
ROA not before: Wed 10 May 2023 16:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141495
IP address blocks: 103.160.186.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28341 (0x6eb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 10 16:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc7c6-bd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:20:4c:01:e6:eb:bd:fe:6e:0f:f5:d3:f7:fb:
4c:d0:49:01:7a:ce:fb:38:19:55:36:90:8c:f7:ee:
e6:13:5d:f5:ad:39:08:28:be:b8:88:e0:4b:77:0e:
59:f1:97:bd:e2:b3:99:58:06:b0:27:35:d7:a4:4a:
ca:62:ee:ed:d9:9b:19:9a:a8:b1:f6:da:79:6f:23:
1b:46:8e:32:3c:f9:e9:f9:53:7e:1a:02:b6:2d:03:
be:ce:32:3f:ca:5c:b6:4f:e3:a3:80:0a:6e:80:8e:
cc:7e:ed:03:0c:db:01:c9:f8:51:54:59:75:39:a6:
86:f1:c8:ba:c3:9a:41:0e:ab:d1:e1:cf:f5:a0:5c:
7c:3b:15:c7:6e:94:d1:f9:cd:80:27:b8:24:2d:6a:
cb:6d:c2:3c:60:36:eb:a8:95:77:06:4f:01:93:f1:
32:fb:2d:ca:74:68:97:bc:2f:b3:23:1a:31:e4:5b:
6c:fc:bf:8d:87:66:ee:f4:46:8c:35:58:9b:1b:f4:
19:de:3c:20:22:f5:8a:c9:89:51:4b:32:9e:30:1a:
20:6a:b4:a5:60:0f:92:b8:b4:88:b2:be:3c:f6:32:
3e:65:db:d5:d1:52:9a:c0:61:4b:16:f1:51:d4:65:
b5:79:1e:8f:a6:b8:3a:64:dc:ad:fb:fa:7f:3c:03:
0b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:49:9A:14:E7:DA:33:6D:8D:0E:B5:54:58:6F:99:33:25:B0:8C:5E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5A82E420250011EDB7A3C114C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.186.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:57:d9:e3:11:ac:36:db:cc:2b:32:95:89:b1:50:a7:cf:53:
52:36:e5:68:1a:13:7c:97:01:9e:f2:be:9c:bd:33:2b:fc:3c:
76:03:b0:df:4f:5f:b2:47:28:f8:70:5e:4d:6e:71:d8:8d:32:
be:23:b9:21:e1:59:c9:50:2c:11:50:db:c4:e2:de:4f:d2:f9:
29:9d:ac:07:0f:90:33:cc:8f:12:76:20:3a:ae:67:b9:e1:b1:
4c:04:60:7c:59:c0:e3:cb:7d:75:63:ac:66:04:6f:ec:0c:d7:
1b:27:84:80:d6:09:a3:c2:0f:e0:82:3d:6d:a5:1f:ad:a7:ee:
d0:93:72:9f:89:46:29:1b:7d:cd:5b:76:7e:ca:80:8b:52:14:
a6:50:ab:82:95:2c:16:14:cf:bb:63:91:3d:9a:53:74:23:3a:
53:a0:a0:31:56:ac:fe:e7:28:f0:a6:cc:95:d0:24:8b:31:a4:
bb:a2:01:11:69:97:49:3a:b3:4f:77:cb:4a:87:a1:0c:cf:b0:
c9:19:b2:97:01:b2:72:d5:83:9e:77:af:9a:c0:fa:6d:80:b8:
5c:45:34:aa:69:18:4b:13:7b:e1:42:ef:07:c4:42:db:02:08:
96:43:a2:17:b8:f1:2d:0d:9f:22:7e:21:b1:00:d9:f0:c4:25:
2d:23:10:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:20 2025 by rpki-client