Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/F22CC508A01811EFA1D64F09C4F9AE02.roa
File: F22CC508A01811EFA1D64F09C4F9AE02.roa (raw, json)
Hash identifier: 42lol7ocjMoRIFNb/jOjDU3dvQhE5zJeP2U3nNQhg/s=
Subject key identifier: 40:69:D9:01:26:29:1D:7A:35:DE:26:6D:D5:CF:B7:79:0F:56:C4:32
Certificate issuer: /CN=A9190FEA/serialNumber=627FA9960EA283AA239213CACD37504D2460A104
Certificate serial: 0BD2
Authority key identifier: 62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/F22CC508A01811EFA1D64F09C4F9AE02.roa
Signing time: Mon 11 Nov 2024 10:37:27 +0000
ROA not before: Mon 11 Nov 2024 10:37:27 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 137432
IP address blocks: 103.108.90.0/23 maxlen: 24
2402:68c0::/32 maxlen: 32
2402:68c0::/36 maxlen: 36
2402:68c0:1000::/36 maxlen: 36
2402:68c0:2000::/36 maxlen: 36
2402:68c0:3000::/36 maxlen: 36
2402:68c0:4000::/36 maxlen: 36
2402:68c0:5000::/36 maxlen: 36
2402:68c0:6000::/36 maxlen: 36
2402:68c0:7000::/36 maxlen: 36
2402:68c0:8000::/36 maxlen: 36
2402:68c0:9000::/36 maxlen: 36
2402:68c0:a000::/36 maxlen: 36
2402:68c0:a000::/48 maxlen: 48
2402:68c0:a001::/48 maxlen: 48
2402:68c0:b000::/36 maxlen: 36
2402:68c0:c000::/36 maxlen: 36
2402:68c0:d000::/36 maxlen: 36
2402:68c0:e000::/36 maxlen: 36
2402:68c0:f000::/36 maxlen: 36
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3026 (0xbd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190FEA
Validity
Not Before: Nov 11 10:37:27 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=6731de67-adb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:64:7b:18:fc:19:c5:a9:c8:b3:8d:03:54:
68:04:56:0c:ac:36:0a:5e:80:28:3c:69:8f:c1:f0:
2f:8e:26:ed:f7:08:cd:d8:f3:5a:a8:6d:2f:ee:f0:
c0:1c:d5:31:1e:89:7c:ca:c1:a5:75:72:2c:f5:2e:
ef:66:b3:a6:6c:15:16:fd:8c:55:f2:9e:b6:ac:f1:
a7:6e:ba:65:82:34:44:a3:43:74:5c:5b:58:31:9f:
56:4e:3f:ac:8b:55:c8:28:9a:a1:fe:bf:bb:cb:3d:
c8:28:b6:c9:6d:22:16:ab:2a:58:bc:a3:76:fa:40:
65:94:3f:04:06:5f:8b:d8:3f:c9:d5:a5:79:36:a1:
b7:e8:4a:6b:6c:a8:f0:9d:0a:b8:0c:dd:61:0f:9d:
43:6a:9d:58:64:0b:97:b5:97:c6:58:90:54:4f:c1:
5a:8e:98:bb:35:21:bc:94:23:db:76:c8:45:b2:65:
37:2a:be:7c:58:16:3b:58:5d:c9:d8:47:ac:db:35:
e3:64:e4:a0:74:36:1a:b9:7b:03:07:3c:d2:04:5f:
8a:a7:0f:c8:af:a7:d0:76:82:4a:ea:c9:93:79:c2:
bb:92:0d:08:98:8c:5c:d0:c4:11:ee:99:ab:85:15:
0b:b3:48:d0:ad:04:c3:df:a5:aa:e4:e3:f6:cc:ef:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:69:D9:01:26:29:1D:7A:35:DE:26:6D:D5:CF:B7:79:0F:56:C4:32
X509v3 Authority Key Identifier:
keyid:62:7F:A9:96:0E:A2:83:AA:23:92:13:CA:CD:37:50:4D:24:60:A1:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yn-plg6ig6ojkhPKzTdQTSRgoQQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190FEA/240DACEA0B7211EAACFB6916C4F9AE02/F22CC508A01811EFA1D64F09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.90.0/23
IPv6:
2402:68c0::/32
Signature Algorithm: sha256WithRSAEncryption
0c:95:1f:d3:76:2b:f4:bc:8c:86:72:a2:40:ab:e5:16:9a:8c:
68:1a:75:d4:88:ae:51:02:3c:6c:bd:8c:e7:a6:7d:87:aa:24:
22:91:5c:fe:60:bb:b8:a8:f9:1c:7a:5a:89:83:b2:51:d4:87:
0e:56:ef:65:2f:1f:70:7d:ae:7d:c2:02:0c:c5:df:e7:85:ef:
35:c5:1b:33:df:df:89:3e:c5:82:7e:74:b7:7d:9c:7f:3a:52:
cd:a4:0c:ca:0a:e3:5c:80:10:36:ac:e2:a1:9a:f9:dc:2e:27:
00:ca:ee:b1:28:6c:3d:3d:9e:12:5d:9f:39:2c:d3:21:be:68:
5b:82:6c:22:e5:04:59:19:d4:e6:57:71:db:cf:e1:db:b8:ea:
84:2b:5f:51:0f:77:6d:6c:f1:53:72:17:99:c1:25:e4:6c:65:
05:7a:39:a1:7c:74:36:ac:90:4a:83:a9:1a:b6:24:ea:ee:37:
79:c5:e8:cd:63:57:ac:53:30:8c:29:e8:88:d5:11:e3:83:41:
b8:04:13:18:3b:26:6b:5a:8c:2d:b1:40:f5:04:eb:68:22:6f:
c6:a1:ed:d0:71:63:b4:5c:7f:58:bc:e2:e7:e4:ca:b3:cd:e3:
a2:0d:e4:6b:db:68:ad:2f:de:31:2c:ba:4a:91:a4:eb:44:76:
83:0a:04:be
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBGRUExMTAvBgNVBAUTKDYyN0ZBOTk2MEVBMjgzQUEyMzkyMTNDQUNEMzc1MDRE
MjQ2MEExMDQwHhcNMjQxMTExMTAzNzI3WhcNMjUwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzMxZGU2Ny1hZGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzj9kexj8GcWpyLONA1RoBFYMrDYKXoAoPGmPwfAvjibt9wjN2PNaqG0v7vDA
HNUxHol8ysGldXIs9S7vZrOmbBUW/YxV8p62rPGnbrplgjREo0N0XFtYMZ9WTj+s
i1XIKJqh/r+7yz3IKLbJbSIWqypYvKN2+kBllD8EBl+L2D/J1aV5NqG36EprbKjw
nQq4DN1hD51Dap1YZAuXtZfGWJBUT8Fajpi7NSG8lCPbdshFsmU3Kr58WBY7WF3J
2Ees2zXjZOSgdDYauXsDBzzSBF+Kpw/Ir6fQdoJK6smTecK7kg0ImIxc0MQR7pmr
hRULs0jQrQTD36Wq5OP2zO8O2wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFEBp2QEm
KR16Nd4mbdXPt3kPVsQyMB8GA1UdIwQYMBaAFGJ/qZYOooOqI5ITys03UE0kYKEE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEZFQS8yNDBEQUNFQTBC
NzIxMUVBQUNGQjY5MTZDNEY5QUUwMi9Zbi1wbGc2aWc2b2praFBLelRkUVRTUmdv
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1luLXBsZzZpZzZvamtoUEt6VGRRVFNSZ29RUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTBGRUEvMjQwREFDRUEwQjcyMTFFQUFDRkI2OTE2QzRGOUFFMDIvRjIyQ0M1MDhB
MDE4MTFFRkExRDY0RjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAFnbFowDQQCAAIwBwMFACQCaMAwDQYJKoZIhvcNAQELBQAD
ggEBAAyVH9N2K/S8jIZyokCr5RaajGgaddSIrlECPGy9jOemfYeqJCKRXP5gu7io
+Rx6WomDslHUhw5W72UvH3B9rn3CAgzF3+eF7zXFGzPf34k+xYJ+dLd9nH86Us2k
DMoK41yAEDas4qGa+dwuJwDK7rEobD09nhJdnzks0yG+aFuCbCLlBFkZ1OZXcdvP
4du46oQrX1EPd21s8VNyF5nBJeRsZQV6OaF8dDaskEqDqRq2JOruN3nF6M1jV6xT
MIwp6IjVEeODQbgEExg7JmtajC2xQPUE62gib8ah7dBxY7Rcf1i84ufkyrPN46IN
5GvbaK0v3jEsukqRpOtEdoMKBL4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:25:04 2025 by rpki-client