Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/02F03EBCD2F111ECB0DB7850C4F9AE02.roa
File: 02F03EBCD2F111ECB0DB7850C4F9AE02.roa (raw, json)
Hash identifier: Q0fNfLOcKzzEZus7R55E69tTYXEUxIWv89YZB7PtU84=
Subject key identifier: 01:CB:3F:E5:A7:92:66:69:52:4C:DC:A2:B8:13:5C:99:BA:24:C8:E5
Certificate issuer: /CN=A91976E2/serialNumber=710A2FC723D377BD3AA5FB271A4AE894E57A7454
Certificate serial: 02B0
Authority key identifier: 71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/02F03EBCD2F111ECB0DB7850C4F9AE02.roa
Signing time: Wed 15 May 2024 04:08:40 +0000
ROA not before: Wed 15 May 2024 04:08:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149658
IP address blocks: 103.185.20.0/24 maxlen: 24
103.185.21.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 688 (0x2b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91976E2
Validity
Not Before: May 15 04:08:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66443548-b5f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:07:05:e0:a7:b0:f0:7d:6e:30:f0:92:99:
c3:32:05:41:a2:b7:cf:ba:67:f2:de:b7:12:13:7c:
23:2e:56:13:89:57:46:8b:7a:6f:9c:0f:2a:db:8b:
20:6d:99:42:95:98:6e:5d:01:a8:0c:3f:09:2f:96:
35:9a:ee:cf:41:d5:f6:60:99:05:7c:c9:52:12:23:
8d:a4:c9:37:c3:6f:77:86:64:2c:15:35:2c:5b:0d:
d0:d5:1d:f4:49:cd:e4:c6:c8:38:02:1a:05:39:3e:
c7:58:75:57:1b:ae:db:f0:ff:17:08:24:26:52:d2:
20:0a:19:be:fe:22:9f:61:0e:2f:aa:8f:16:4f:90:
93:1d:74:bc:b2:47:96:98:91:b4:3b:49:34:cc:f6:
7c:68:69:44:b2:52:fb:81:11:de:e0:c6:d6:7b:f1:
cd:22:18:12:ab:5d:40:5c:77:a2:6a:de:e0:d3:76:
73:f5:a6:bd:23:56:9d:6b:3e:51:b9:f6:bf:c3:47:
5e:6f:19:3f:4d:8d:46:e2:9c:bc:2b:f3:34:c3:8b:
b8:ce:41:24:ae:28:25:19:b8:e6:22:0d:58:62:17:
8d:ac:6e:3e:85:d9:b4:9c:63:31:95:d4:7d:f3:c9:
4c:a3:ca:1e:f0:77:38:2d:c3:f2:e1:1f:d6:19:d7:
4f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CB:3F:E5:A7:92:66:69:52:4C:DC:A2:B8:13:5C:99:BA:24:C8:E5
X509v3 Authority Key Identifier:
keyid:71:0A:2F:C7:23:D3:77:BD:3A:A5:FB:27:1A:4A:E8:94:E5:7A:74:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/cQovxyPTd706pfsnGkrolOV6dFQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQovxyPTd706pfsnGkrolOV6dFQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91976E2/47C44AD8AE8911EC8A8D3368C4F9AE02/02F03EBCD2F111ECB0DB7850C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.20.0/23
Signature Algorithm: sha256WithRSAEncryption
20:0e:de:2d:b6:de:23:7e:52:2a:5c:c4:b1:01:5f:e3:85:79:
3d:61:af:f5:06:da:21:b2:7c:bd:6f:1d:a0:fc:37:1b:f0:32:
56:c7:08:be:96:e7:a7:ec:5b:2a:67:b0:08:f8:ac:5f:e3:fa:
0b:d5:c1:5b:23:a5:f0:6b:24:6c:3b:93:f8:e7:3b:ca:37:be:
20:5c:67:f1:53:22:ce:9d:69:1b:5a:ca:00:46:19:dc:e4:b8:
69:34:c4:13:c8:70:84:14:5f:ff:a7:13:a7:c2:11:d6:c7:f7:
f2:83:23:8d:2f:e6:6e:88:50:03:1e:af:99:1f:f5:15:71:7d:
f7:94:17:89:0f:1b:06:34:90:a0:48:d7:ac:5f:6e:4c:12:f7:
1e:f5:33:97:7c:ce:da:a4:1a:9d:97:eb:c8:4f:20:48:79:b6:
9f:ce:c9:a0:43:b0:bc:38:95:fc:fe:d6:41:18:7f:05:cf:fd:
23:a4:b1:fe:0b:44:29:0d:9a:34:cc:ea:dc:a9:fd:ae:80:31:
d6:a8:dd:53:1d:24:18:25:64:bf:54:32:34:19:70:a2:db:59:
8f:20:57:5c:8a:55:34:3c:d5:e5:0c:78:a8:d3:41:26:a8:7f:
0a:72:70:28:34:12:86:8e:6e:e0:97:c0:2a:8d:5a:0e:fc:36:
d5:47:3f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:28:01 2025 by rpki-client