Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A3FD439A000111EC9FFFC36CC4F9AE02.roa
File: A3FD439A000111EC9FFFC36CC4F9AE02.roa (raw, json)
Hash identifier: m51lXp/4XDH0tVDcdnOspoOREODNAiTicgWOZvZ980Q=
Subject key identifier: 5F:ED:89:16:0E:26:48:CD:4C:D6:27:44:88:7A:F8:BC:D4:C4:46:DF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6F8C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A3FD439A000111EC9FFFC36CC4F9AE02.roa
Signing time: Wed 10 May 2023 16:39:19 +0000
ROA not before: Wed 10 May 2023 16:39:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142532
IP address blocks: 103.162.158.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 28556 (0x6f8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 10 16:39:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc8b7-0ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:87:51:0a:75:a7:b8:2a:0c:49:e4:18:4a:33:
7d:7e:9d:f0:6a:e4:3c:6b:db:89:aa:1a:9e:ca:f2:
47:05:3b:2b:98:6d:de:04:38:2a:2c:6c:d3:1f:b8:
0b:87:97:1d:68:b3:e4:49:b4:2d:fb:6e:bd:fa:ba:
17:5b:bc:b6:9c:8b:22:50:ee:bc:35:21:b9:8d:44:
37:f2:50:2d:cc:1d:7d:65:e6:8e:ad:08:34:60:17:
d7:c0:39:3d:0e:5c:a2:1b:99:be:77:bb:21:b4:46:
62:1b:c7:fd:3c:6f:fb:89:e5:7a:fe:25:93:9b:66:
d7:8a:4f:35:c4:f2:b7:ed:8d:a3:db:db:05:53:6d:
14:e1:da:d3:4b:33:73:d2:bd:cc:9e:64:9a:22:27:
69:94:70:9d:25:88:0e:0b:cf:b9:6c:bd:a5:6d:74:
aa:b0:73:25:f6:1e:9d:47:20:92:25:2b:f7:38:c2:
78:9b:64:36:24:63:52:13:d3:19:47:ac:9b:7e:26:
f9:96:8d:93:b5:7c:89:cb:29:2b:c4:c9:ca:4f:d9:
54:3e:66:77:0f:1f:95:b2:da:31:04:b4:61:55:ee:
d3:46:14:26:45:b8:cb:73:d2:6d:b6:92:78:49:09:
2f:8f:30:dc:c4:57:33:e3:09:4f:f5:3c:31:06:ed:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:ED:89:16:0E:26:48:CD:4C:D6:27:44:88:7A:F8:BC:D4:C4:46:DF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A3FD439A000111EC9FFFC36CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.158.0/24
Signature Algorithm: sha256WithRSAEncryption
24:ad:64:52:b7:77:61:ec:5d:8c:0e:7d:5a:76:da:54:1b:e3:
fc:8e:78:21:af:a0:52:90:db:f4:6d:29:78:ef:b5:75:31:f3:
3b:94:f6:9e:fb:9b:9c:f2:95:13:84:09:b9:3d:d5:f4:ff:ff:
59:a4:17:0f:4b:f9:3d:af:b6:64:70:d4:6b:a7:22:63:94:05:
87:c1:a3:bc:b1:43:dd:b8:f3:75:de:2c:f7:39:66:55:a8:a9:
73:83:cd:d9:f9:aa:70:05:ec:d9:86:d1:95:22:c2:81:4f:f0:
8c:6a:fe:2c:0f:08:12:f2:51:32:0e:90:4e:a3:24:7d:83:88:
2e:f1:1b:f6:14:6f:f7:9a:87:6b:63:73:21:4c:3b:c9:8a:06:
f0:51:74:4e:f2:6b:97:e2:fb:2b:c1:13:ca:a0:31:54:9f:ce:
56:62:e2:39:ec:d2:86:55:b9:8e:3e:cb:df:c3:52:f0:c6:45:
d5:ff:c3:07:77:df:e9:5d:e7:6a:01:f1:09:13:55:7b:0f:b7:
98:1d:4b:72:ea:9d:9b:6d:84:29:f6:7f:bd:81:a5:90:be:36:
8d:36:a7:80:2d:ca:16:aa:1c:0c:3b:d8:94:10:48:65:76:43:
47:d0:54:42:da:56:ba:cc:65:45:c4:b0:f5:6c:1d:fc:4e:7e:
cb:8b:31:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:54:04 2025 by rpki-client