Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DBC63D8E63011EBA7DA8C4FC4F9AE02.roa
File: 5DBC63D8E63011EBA7DA8C4FC4F9AE02.roa (raw, json)
Hash identifier: W3qH8/hBI8Cpyfv0IHR60ZqcvUYzTXR+/GZPQOIoO48=
Subject key identifier: 63:DD:36:F5:3D:E6:79:CE:02:2E:99:B8:39:C5:8F:B0:80:53:D4:9A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 90B1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DBC63D8E63011EBA7DA8C4FC4F9AE02.roa
Signing time: Thu 30 May 2024 16:29:00 +0000
ROA not before: Thu 30 May 2024 16:29:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20454
IP address blocks: 103.168.217.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37041 (0x90b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:29:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a94c-eb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ad:cc:32:1c:e3:29:da:fc:0a:4a:67:e2:66:
89:e9:24:7a:a9:67:ea:4f:cd:27:15:76:e3:94:3a:
19:7d:54:d0:06:25:b5:b6:d6:97:1c:f9:68:66:68:
c6:d5:35:7f:9c:c8:ce:ab:fd:5c:70:d2:7c:0b:2b:
23:d7:c0:0c:49:0f:de:57:a6:85:40:f6:f0:4d:aa:
c2:34:ec:a7:3d:2a:33:51:77:22:80:c2:46:41:0a:
43:05:93:ed:ec:50:be:e2:c4:2b:64:c5:fc:f9:3a:
8e:1e:b6:cd:5a:7c:b4:00:b4:13:4c:c4:25:28:8a:
2a:bc:04:d5:65:a5:c0:39:b1:d1:a8:18:76:80:67:
aa:ea:94:d5:09:82:0c:fd:1a:66:3f:63:13:3e:71:
f3:07:03:eb:ac:1e:63:9b:10:11:70:ac:9a:22:f7:
b2:6c:2f:ef:64:93:1b:d4:56:81:ba:5e:6c:45:38:
25:89:2b:b2:17:25:ee:d0:9b:75:83:c3:89:a3:5e:
2c:7e:99:24:ef:0d:d5:2e:ee:f8:d8:c5:86:c0:33:
86:6b:89:4f:be:f4:60:a4:b6:a6:6a:95:62:cf:ae:
0c:61:48:c7:c0:7c:81:c8:e7:bd:af:73:9f:85:5a:
68:0b:0c:38:0a:0d:a5:e8:e2:01:8e:a9:20:f7:95:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DD:36:F5:3D:E6:79:CE:02:2E:99:B8:39:C5:8F:B0:80:53:D4:9A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5DBC63D8E63011EBA7DA8C4FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.217.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ec:50:78:b4:a9:72:9d:19:56:91:22:54:05:ca:2a:53:68:
b6:b8:3e:fd:f3:97:5b:1c:b3:8c:e3:f7:13:1a:ca:e3:1a:7f:
94:b0:65:ea:b3:a4:b7:45:39:f1:00:f1:07:39:20:06:3e:a7:
0d:8b:5e:4c:c8:3d:3f:e7:39:cd:f2:a1:9c:45:9c:b6:d6:1a:
6e:29:4e:e8:be:b7:86:7c:5a:f0:59:2c:8b:fe:37:44:64:b1:
31:fd:a8:0d:8c:d8:f1:c3:e7:bf:a6:ad:b3:27:44:a4:30:4f:
7b:b2:d4:b0:9d:c6:94:a0:d8:75:1c:eb:3a:6b:65:ef:03:74:
c1:33:f7:a0:31:85:f9:28:d8:59:75:c3:24:66:57:26:e6:16:
b0:12:b4:f6:9b:93:74:02:19:aa:54:4a:ec:d2:06:e2:51:3e:
6b:72:1b:69:35:5c:e5:b7:e7:65:9b:81:a0:78:cd:af:40:db:
76:f6:a4:57:33:61:db:74:64:32:32:6e:3a:20:0f:9b:a0:cd:
ff:0e:63:d9:c7:43:8a:00:d6:82:d6:56:4b:c6:a4:f8:c8:94:
7a:64:a2:cb:54:e0:87:fa:f6:7c:d2:63:14:08:78:4d:24:91:
48:bd:c9:a9:06:e8:68:4d:dc:07:65:48:43:61:a1:53:bb:e1:
71:45:1d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:18 2025 by rpki-client