Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8DF09804032711F084421860C4F9AE02.roa
File: 8DF09804032711F084421860C4F9AE02.roa (raw, json)
Hash identifier: 1KQUAZEtqCeWFC1vy7bJ7ZXq+EGmDYvX83dL2THT4GA=
Subject key identifier: 6C:2A:1F:B7:A4:88:4E:98:9F:90:19:26:51:D2:41:90:5B:D8:B8:66
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: AB5E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8DF09804032711F084421860C4F9AE02.roa
Signing time: Mon 17 Mar 2025 12:54:34 +0000
ROA not before: Mon 17 Mar 2025 12:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 138279
IP address blocks: 103.127.188.0/22 maxlen: 24
2406:68c0::/32 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43870 (0xab5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 17 12:54:34 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67d81b8a-de1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3e:99:7f:ff:de:24:18:ed:7a:76:6d:dd:bd:
25:3c:ff:9a:63:df:04:28:da:86:50:6e:62:6e:13:
0e:69:b9:14:bc:67:57:35:f1:5a:82:97:ee:5f:26:
a1:cc:d0:9b:1a:49:06:39:d3:89:26:b1:a8:0b:92:
1f:63:29:c8:3a:f8:34:2a:38:59:f6:04:83:b3:47:
2e:43:5e:3b:37:ad:20:1f:24:02:3a:28:bf:67:9d:
3c:e5:62:0d:88:07:05:81:2c:c7:14:06:1a:f3:46:
fe:bf:1c:9b:ed:cf:1f:96:c7:b1:98:16:48:66:3e:
14:5a:51:a9:85:a4:77:e4:4b:a5:fa:8c:ba:65:f3:
e8:f7:cf:40:a5:bb:94:0d:81:44:f9:b7:70:79:fd:
f8:76:f8:8b:e5:9a:bd:79:f6:ae:4f:63:ae:d9:d1:
ce:72:ee:cc:e1:8c:1d:4a:59:dd:1d:2e:b0:5f:5d:
3c:f5:7d:58:60:e2:2f:84:fa:ef:ec:0e:0f:a5:9d:
2b:e3:32:2f:51:9f:bd:b1:77:48:2f:ff:a8:b5:68:
f0:56:3b:ed:be:d3:0c:a1:06:3c:85:69:a7:92:9c:
76:90:fe:a4:bf:c7:75:07:5e:eb:8f:64:95:b1:8f:
dd:bf:46:21:65:a0:a4:23:e6:0a:8d:16:5d:40:ec:
c1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2A:1F:B7:A4:88:4E:98:9F:90:19:26:51:D2:41:90:5B:D8:B8:66
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8DF09804032711F084421860C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.188.0/22
IPv6:
2406:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
99:fc:13:c4:67:3c:67:bc:8a:b4:34:18:c6:98:f5:08:0d:59:
8d:72:a5:7a:dc:3b:ad:ea:b4:11:c3:b5:2c:2b:38:9f:7a:9f:
ca:8b:45:a1:11:56:bd:4f:85:8f:92:fa:cc:13:19:c4:a9:80:
23:f1:2a:1d:fc:b6:7c:fc:ae:41:02:07:5e:0a:ce:ec:2d:48:
72:ef:95:45:63:70:5b:0a:f2:a8:61:24:50:fc:fd:48:f1:00:
17:19:ba:af:bf:ea:53:a9:77:bf:0f:bf:61:14:62:1b:87:05:
b5:0b:7e:26:b9:6c:98:86:bb:d0:f7:d9:3f:28:49:dc:43:24:
45:77:00:1d:1b:ed:54:70:57:a5:bd:25:36:ed:81:8b:56:e0:
61:26:91:4e:da:05:a3:e8:3f:34:c1:bc:4c:36:85:12:2e:f7:
90:5b:86:ee:91:3e:1d:34:18:67:5b:49:bb:74:19:1b:f0:27:
29:f9:8e:ca:44:d2:85:90:01:58:4f:77:77:ff:ca:9c:49:0b:
43:8d:0c:fe:ad:79:56:31:04:b9:39:22:5b:c3:66:88:fd:c0:
88:13:e1:ea:17:29:65:96:29:fa:9a:2a:aa:de:9e:df:b2:b6:
b3:a1:9f:90:28:f2:be:60:3a:16:05:b6:67:f2:6a:db:6e:4e:
97:51:d4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:21:36 2025 by rpki-client