Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9095CAFCAD0C11EDABA62D22C4F9AE02.roa
File: 9095CAFCAD0C11EDABA62D22C4F9AE02.roa (raw, json)
Hash identifier: RdaQwIureRY2pqM0leJLzmcaDkp3zjgErMhwQ4E97HA=
Subject key identifier: 47:95:BB:A1:1C:7B:CB:D6:6D:0F:B0:9A:ED:32:8F:B3:64:FE:10:88
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8FF2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9095CAFCAD0C11EDABA62D22C4F9AE02.roa
Signing time: Thu 30 May 2024 16:25:54 +0000
ROA not before: Thu 30 May 2024 16:25:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150649
IP address blocks: 103.72.106.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36850 (0x8ff2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:25:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a892-6d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:e3:a0:a9:87:05:c0:57:5e:8b:14:6a:f3:
be:a6:d9:26:c1:61:29:e0:da:34:c6:8f:61:fe:ab:
b0:a0:29:88:4b:a5:2b:b1:8d:e5:dd:3c:86:ea:44:
e9:d6:3d:7e:a1:be:0d:ad:f0:b7:a2:df:b9:d3:68:
89:44:95:7f:f2:13:b5:25:b0:84:a8:08:26:7c:81:
30:04:d8:36:05:5d:57:c4:a5:8b:37:46:1f:f3:96:
b5:40:39:0c:0e:e2:9f:b6:14:b6:9b:80:2b:6d:e2:
2c:69:da:1f:75:1b:ae:37:04:0e:86:47:51:78:f8:
77:f4:b3:68:91:8f:b0:67:5a:86:88:19:4c:77:38:
a7:b0:07:88:99:52:36:ee:96:4f:63:7f:c2:c2:1a:
10:89:63:76:de:d1:dc:7a:f3:c0:09:0f:a1:e2:7e:
fa:9e:f9:98:5a:18:41:70:5f:b2:80:9d:64:6b:9b:
c1:d7:50:40:a5:b6:3a:d1:3c:40:e7:5b:92:83:e9:
55:ec:53:93:df:0a:53:d5:67:d0:ac:70:a8:9f:c6:
ab:a5:4e:e0:1d:32:0d:0a:bc:a1:9c:5a:aa:c9:61:
c6:8d:ce:dc:cb:48:0a:b2:b3:f2:49:31:d7:a8:75:
13:a7:d6:61:59:85:50:d6:14:84:06:54:58:eb:d9:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:95:BB:A1:1C:7B:CB:D6:6D:0F:B0:9A:ED:32:8F:B3:64:FE:10:88
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9095CAFCAD0C11EDABA62D22C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.106.0/23
Signature Algorithm: sha256WithRSAEncryption
77:22:ed:4d:5b:e2:28:5b:8f:d5:de:46:6b:00:ae:38:80:d4:
c7:5d:9e:b4:94:a9:43:9d:c0:cc:fd:6d:56:8c:9d:fb:bd:4e:
16:83:a3:dd:da:97:5a:ff:b3:d2:b2:ae:12:69:f4:96:4a:29:
b9:c5:82:7c:d3:78:da:77:43:da:9b:9d:a5:57:8d:c9:84:c1:
c2:85:40:51:c7:09:72:c2:5a:c7:3b:26:52:80:10:1d:4f:84:
08:22:5c:cb:45:92:08:d0:e7:81:bb:68:76:e9:70:ee:f9:da:
3f:57:07:17:90:8b:ea:c7:b4:4e:8a:fc:8a:f7:07:97:48:80:
a1:45:c7:db:db:ca:6b:92:ad:9e:ae:45:e6:94:92:6b:70:33:
2e:65:77:19:41:4c:15:4f:03:19:de:d0:37:5b:84:59:05:e5:
d8:b5:a1:8b:00:d7:b3:48:50:9b:b2:9f:42:4b:5d:50:86:ea:
d9:3b:78:f8:78:c8:7b:04:85:0e:ca:93:45:dd:49:33:2e:29:
9e:b6:21:5a:0c:e2:54:91:17:e4:d4:50:37:f8:3e:72:84:fc:
92:b7:42:fb:07:11:b3:97:c8:b9:ef:c0:7b:89:4a:9f:b7:68:
4b:d1:d1:4b:9d:0a:c5:d5:b9:76:04:0d:6d:07:c4:83:9c:0b:
36:c0:53:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:36 2025 by rpki-client