Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/6458CE6420F711EC896F8D43C4F9AE02.roa
File: 6458CE6420F711EC896F8D43C4F9AE02.roa (raw, json)
Hash identifier: 40Tp9vYlwNjlXHzULzghK25QKYAH3IMjVH7JAvH5N/8=
Subject key identifier: 09:F2:15:84:A6:88:A1:69:4D:89:60:CC:0C:17:44:9C:F9:1E:9F:F9
Certificate issuer: /CN=A91944F8/serialNumber=1A7A50D5215A9259110406B0B6936FAE14EA7D83
Certificate serial: 048D
Authority key identifier: 1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/6458CE6420F711EC896F8D43C4F9AE02.roa
Signing time: Fri 10 Jan 2025 23:52:45 +0000
ROA not before: Fri 10 Jan 2025 23:52:45 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 132819
IP address blocks: 103.28.201.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1165 (0x48d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91944F8
Validity
Not Before: Jan 10 23:52:45 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=6781b2cd-58aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:b2:4a:ef:04:77:d5:28:c0:e3:fb:cb:20:
fb:06:e5:01:34:b6:e6:88:20:42:0d:de:26:c3:7c:
ec:56:c8:fa:c3:50:74:af:d2:1b:7f:40:18:18:ab:
7f:c8:81:17:15:8d:48:1c:80:36:d3:62:75:de:d4:
5a:fb:5a:53:f9:ae:97:eb:42:ef:8a:52:58:58:10:
98:d4:b1:28:41:46:60:c6:ed:dd:e1:41:0f:1b:42:
e5:f8:fe:91:07:df:05:83:01:fe:c4:28:cb:8e:2b:
ec:4d:fe:5d:14:26:57:bf:37:fb:fb:8c:8a:59:49:
fb:cf:ee:df:fc:ee:35:0c:c7:8c:fc:36:a4:f6:e7:
5e:09:f3:6e:78:b3:4f:01:5a:0f:61:44:1a:be:07:
5d:c7:ec:2f:7f:08:61:88:3c:60:51:27:a9:8e:23:
64:d6:23:c7:29:55:24:71:c6:4e:24:43:22:b4:90:
36:f7:c1:da:5b:18:0c:a4:8c:a8:41:54:52:df:5c:
c1:81:ca:d2:d7:c1:26:2e:2c:4a:71:2d:1d:a4:c6:
3b:9a:5d:dc:cd:6a:15:c2:57:9a:84:22:31:0d:9c:
30:54:ca:5b:90:39:29:d7:ce:ea:02:96:29:56:6a:
db:e4:1e:73:d3:01:fd:cc:f8:b3:22:b0:9f:77:5d:
62:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F2:15:84:A6:88:A1:69:4D:89:60:CC:0C:17:44:9C:F9:1E:9F:F9
X509v3 Authority Key Identifier:
keyid:1A:7A:50:D5:21:5A:92:59:11:04:06:B0:B6:93:6F:AE:14:EA:7D:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/GnpQ1SFaklkRBAawtpNvrhTqfYM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GnpQ1SFaklkRBAawtpNvrhTqfYM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91944F8/654861D820F511ECA675C442C4F9AE02/6458CE6420F711EC896F8D43C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.28.201.0/24
Signature Algorithm: sha256WithRSAEncryption
74:a7:41:c5:c4:5d:21:b7:d7:09:fd:df:be:ca:42:01:67:52:
31:ec:07:eb:0f:84:bd:2e:85:1d:98:0e:f8:0f:8f:4d:f3:37:
af:ce:36:a4:a6:e4:35:16:3c:58:12:dc:14:f2:ce:b2:0d:18:
a2:d4:fd:3a:be:10:63:1b:56:09:fe:0b:2b:8d:08:b2:b0:9a:
a9:55:a0:22:8b:cb:8a:8c:e1:8e:ef:16:20:eb:81:d0:bd:63:
ce:89:8d:6e:59:c5:09:26:31:68:ab:dd:59:89:65:40:7e:d5:
29:bc:14:4b:85:d6:56:e8:3c:0c:76:d6:68:6e:bc:29:65:2f:
b5:85:65:1b:a1:d1:5b:09:a8:09:1a:db:60:cd:cf:fd:37:6d:
6c:96:86:a5:a3:1c:b5:9d:0d:fa:c3:c1:08:ed:33:3b:60:ab:
92:4e:97:4b:7e:bc:07:56:28:0d:06:37:39:56:45:99:1a:39:
82:d2:9f:3c:ad:d3:53:9d:82:7e:b0:2b:e7:d0:3e:98:5d:e7:
1d:f4:4e:e1:59:5d:91:b3:5e:cf:88:79:bf:39:ed:59:65:38:
fc:f2:87:d8:20:b5:93:dc:0b:a9:b3:d5:bc:b0:8b:52:09:42:
7b:bc:b8:8f:91:42:09:ad:73:b1:48:8b:13:ac:fe:05:6d:fd:
9f:f0:73:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:16:00 2025 by rpki-client