Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/604A83EA9EBE11EC83AFA71AC4F9AE02.roa
File: 604A83EA9EBE11EC83AFA71AC4F9AE02.roa (raw, json)
Hash identifier: o988Xi9KKQqb5RhbEpV2U7mipM1KOf57BMV848CuJ8E=
Subject key identifier: C7:6F:E9:FF:94:BC:98:12:99:7B:06:31:D4:14:C1:D4:FD:A8:36:8B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 9261
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/604A83EA9EBE11EC83AFA71AC4F9AE02.roa
Signing time: Thu 13 Jun 2024 05:59:36 +0000
ROA not before: Thu 13 Jun 2024 05:59:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138766
IP address blocks: 103.129.194.0/24 maxlen: 24
103.129.195.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37473 (0x9261)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 13 05:59:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=666a8ac8-2054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:22:92:6d:90:73:55:23:86:a1:bf:9e:d0:63:
76:76:22:d3:fd:47:0c:ee:06:f2:42:5e:01:39:74:
e2:63:eb:12:20:a0:ab:c0:d1:2d:4e:9a:d6:11:49:
7b:42:b8:d1:1e:df:84:ed:33:a3:76:86:4e:c7:bb:
0d:c6:c6:c8:02:6c:ca:25:ce:45:e2:05:aa:9a:b9:
70:02:d6:35:06:b4:a1:b4:41:c4:d3:c7:42:89:cc:
51:31:f0:94:82:0b:6e:be:b8:99:d3:86:c0:2c:1e:
d2:62:2b:7b:a2:42:83:e9:81:f0:b4:a0:ce:71:61:
62:24:7d:a3:e0:67:af:d2:ce:1b:b5:7c:b6:a7:b3:
83:86:ca:17:ed:a2:cc:0d:10:65:ce:11:51:93:16:
80:52:9f:5b:9e:50:40:64:5d:05:93:fe:e5:f5:82:
99:1b:70:47:59:5d:35:d6:b8:cc:1d:8e:86:98:4f:
25:6a:90:68:f1:51:5b:56:47:60:32:80:33:ec:7e:
09:3e:12:f7:9c:1c:7a:b9:f8:fe:3e:63:12:a7:d0:
08:cc:8e:75:e7:af:a1:98:55:77:10:87:14:83:31:
93:7c:ca:9d:79:99:0a:eb:d6:44:d5:6b:c4:38:3b:
0b:dd:31:da:ca:a6:2b:f7:e8:15:9c:86:12:03:a3:
66:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:6F:E9:FF:94:BC:98:12:99:7B:06:31:D4:14:C1:D4:FD:A8:36:8B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/604A83EA9EBE11EC83AFA71AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.194.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:b4:05:61:2b:85:d9:a3:c3:4f:2d:2f:38:b6:eb:34:9e:ef:
96:d8:2d:cb:29:a4:9f:40:77:8b:83:c3:65:0a:4e:d5:09:c7:
9c:d9:65:f2:bb:99:f4:28:0c:b6:7d:58:94:bb:c0:c9:6f:68:
68:8b:d1:69:50:29:22:0e:c1:ec:5d:f0:ba:dd:68:3b:63:95:
f6:9b:92:b9:ae:ba:5c:e3:40:4f:4b:55:5f:e1:60:51:a9:0c:
c8:49:82:dc:79:06:a6:71:76:bb:42:67:c7:4d:31:d4:d9:15:
18:f5:2f:3c:c3:cd:6e:1d:52:b2:6a:20:60:4f:62:9c:5b:fe:
45:c3:e1:c4:68:f7:d5:f5:7c:2e:6b:3e:89:4f:bb:f3:c6:46:
f7:fd:f1:d1:a6:93:c4:02:bb:80:3f:f6:0e:55:4e:c8:58:59:
e1:6e:c9:f6:4e:66:14:31:0e:7c:89:f9:be:b9:18:9a:61:2f:
dd:47:51:47:e1:61:72:c6:2a:a3:6a:44:96:29:e4:2e:a0:04:
c5:6c:95:91:17:87:cc:16:78:d2:2f:97:a9:23:99:8f:3f:0c:
a4:3b:5a:22:73:3c:1f:6a:53:f3:c0:02:02:14:73:4f:87:99:
86:a6:cf:12:e1:61:32:bd:6e:0f:ff:04:54:46:73:a1:82:5d:
12:9d:b0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:34 2025 by rpki-client