Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/E1484B3658BD11ECB49A9856C4F9AE02.roa
File: E1484B3658BD11ECB49A9856C4F9AE02.roa (raw, json)
Hash identifier: /HXDuqjyr3f0zY/02q1871VGREErBAo71F5/20UhS78=
Subject key identifier: 05:DD:C3:02:63:B7:1D:7C:73:D9:8D:8F:3F:27:90:D3:63:2F:A9:E7
Certificate issuer: /CN=A919DD2B/serialNumber=4D9D0F68C2D3FF2846058190CBF6C8C921CDDA62
Certificate serial: 03FC
Authority key identifier: 4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/E1484B3658BD11ECB49A9856C4F9AE02.roa
Signing time: Tue 31 Dec 2024 00:23:34 +0000
ROA not before: Tue 31 Dec 2024 00:23:34 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 149162
IP address blocks: 103.177.166.0/23 maxlen: 24
2001:df0:2640::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1020 (0x3fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DD2B
Validity
Not Before: Dec 31 00:23:34 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67733985-209c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c4:87:36:0d:0b:2c:da:31:88:c5:ac:94:96:
c6:14:43:5a:1a:a5:f4:cb:e8:76:3d:b3:6c:fe:08:
9e:dc:5d:c1:7d:ea:7c:04:ec:b0:6a:6c:54:49:08:
9e:f7:4b:d7:3e:bc:6f:07:8b:96:c8:d4:6b:4b:68:
53:27:cb:43:24:03:45:c7:ac:38:f8:05:26:86:f0:
16:4a:b9:2f:9d:c3:e1:7f:63:b7:30:76:c0:c0:62:
70:73:d9:fc:21:4e:86:ae:9f:54:32:c3:6c:c5:fd:
51:08:c8:39:37:2e:e8:cf:68:10:bc:72:b4:78:5c:
49:0d:e5:d9:d1:ba:a7:3a:d2:93:2d:ce:21:25:1f:
2e:c8:81:b2:56:90:76:07:49:0e:d6:6a:6b:af:dc:
33:5c:fa:f4:08:8b:3d:f4:0a:b5:31:84:61:3f:de:
77:fb:7e:00:83:a7:33:e2:64:a8:2a:9a:72:52:fe:
f4:c4:19:f3:93:41:fe:75:c3:df:27:0d:02:8f:0c:
b1:67:a1:70:b7:2a:9c:80:ac:3f:9f:42:56:d1:65:
0e:f9:7f:cd:e8:df:c4:49:b4:85:17:72:9a:e0:ba:
fa:65:8d:a3:b1:b7:de:e5:c2:f9:e0:5a:53:d4:1f:
3e:52:b7:67:a1:cf:d5:96:d8:12:45:cb:c2:bf:f4:
28:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DD:C3:02:63:B7:1D:7C:73:D9:8D:8F:3F:27:90:D3:63:2F:A9:E7
X509v3 Authority Key Identifier:
keyid:4D:9D:0F:68:C2:D3:FF:28:46:05:81:90:CB:F6:C8:C9:21:CD:DA:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/TZ0PaMLT_yhGBYGQy_bIySHN2mI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZ0PaMLT_yhGBYGQy_bIySHN2mI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD2B/0B26BACC58BA11ECA1D91A51C4F9AE02/E1484B3658BD11ECB49A9856C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.166.0/23
IPv6:
2001:df0:2640::/48
Signature Algorithm: sha256WithRSAEncryption
69:c1:42:c6:6b:b1:b0:fb:5d:8c:90:75:76:40:91:51:6d:85:
ee:08:42:e1:78:8a:00:89:2e:43:8a:8f:c3:35:d2:0e:c4:a0:
80:82:43:fb:63:22:d0:2f:69:a0:bf:e3:d7:ee:62:2a:cb:ab:
7c:74:58:bb:fd:90:87:03:d0:87:ce:b4:3a:c5:42:e5:1c:94:
09:85:6a:c2:f4:71:79:49:4f:9e:97:73:de:9a:b2:be:4c:7c:
ea:0d:0f:f6:be:be:5e:2b:d7:e5:86:7c:25:f5:e2:bb:f7:23:
5d:6e:b5:1f:63:c2:6d:b6:29:d6:7e:62:ec:7c:47:de:90:c5:
e3:40:61:3e:da:35:90:a1:ca:41:81:4d:80:c4:ad:39:10:49:
1e:1c:52:c2:10:44:69:e4:f2:92:d7:ee:50:6c:66:c9:48:dd:
af:f1:f2:92:62:74:14:05:d5:cf:0f:a7:25:08:33:00:fa:01:
bd:a1:d0:20:97:02:04:86:ec:c2:19:27:99:97:8d:52:49:24:
8b:41:e0:7c:af:41:6c:5b:79:f5:91:e0:1d:7c:ab:d5:c8:d8:
15:5a:77:7b:9b:9c:20:97:eb:fc:74:40:84:6a:6c:4d:eb:43:
f9:28:26:c8:00:73:38:1d:cc:8b:34:fe:c4:12:f0:5f:05:7d:
9f:d3:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:20:36 2025 by rpki-client