Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/4641C3785C2311EDA3D17465C4F9AE02.roa
File: 4641C3785C2311EDA3D17465C4F9AE02.roa (raw, json)
Hash identifier: 1cYw/FnNhsdWx9pKxBCUUJjrGeyH6sgJ5u2vBWIY2hY=
Subject key identifier: 73:71:48:B8:33:D7:BA:9C:C6:BF:1D:22:A2:78:54:F2:EC:16:6F:22
Certificate issuer: /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial: 06BB
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/4641C3785C2311EDA3D17465C4F9AE02.roa
Signing time: Mon 02 Dec 2024 22:31:46 +0000
ROA not before: Mon 02 Dec 2024 22:31:46 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 55933
IP address blocks: 103.42.30.0/23 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1723 (0x6bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919ECE7
Validity
Not Before: Dec 2 22:31:46 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674e3552-3ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e5:20:a8:e3:d5:bd:ad:93:f9:85:d0:bb:29:
ef:ed:76:61:94:71:51:11:98:80:08:e3:df:48:13:
1b:80:74:30:a1:78:61:42:39:ae:a1:26:3b:21:25:
62:e3:97:80:5b:7b:0b:08:26:b8:38:56:74:37:50:
e1:b5:44:94:42:e1:4a:a0:a1:0b:8f:c4:ee:5b:39:
e3:ae:46:f7:d8:57:e6:75:38:5c:90:06:f2:38:de:
cd:b2:07:2f:5c:ac:ed:24:ba:6d:3e:33:bc:96:e0:
01:f2:51:c1:fe:b1:07:52:8e:1e:48:da:1e:b6:33:
d3:ec:8c:03:70:f8:0b:85:ca:3b:a9:de:3b:63:ae:
66:89:5a:e3:c5:59:81:ef:84:c6:96:a2:0e:62:9b:
46:90:95:f7:f7:b2:a8:8d:07:77:cb:5c:04:e8:74:
a0:dc:42:47:64:5d:b1:9f:ed:24:92:b8:05:e9:a3:
28:04:aa:f4:5a:71:f4:84:0c:53:63:c6:d7:ba:83:
ac:f4:9c:e0:ac:72:f1:72:95:9c:97:20:d2:0f:ff:
c6:f3:1f:9e:9a:a5:a2:65:80:24:da:ed:6b:00:81:
82:fc:9e:d5:1c:20:c0:d4:1f:f2:95:76:7c:45:01:
3e:83:ec:af:79:7b:d6:48:cb:71:d9:34:fd:64:bd:
2d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:71:48:B8:33:D7:BA:9C:C6:BF:1D:22:A2:78:54:F2:EC:16:6F:22
X509v3 Authority Key Identifier:
keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/4641C3785C2311EDA3D17465C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.30.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:8a:7c:f8:ab:6e:58:12:b7:fb:56:2d:d4:48:aa:91:b9:d4:
b6:3d:e2:ff:5e:cc:c8:86:af:42:93:8f:2f:17:c4:ad:b0:c6:
e8:cd:74:f3:c4:65:f5:67:ce:18:f8:0f:cc:a4:cd:98:fc:c1:
e0:05:60:c6:2b:c6:d4:96:f7:41:63:97:bc:43:bb:a9:cd:35:
c1:a9:d5:d1:56:f8:c5:bb:3a:2f:25:73:9d:f4:c4:18:cb:44:
17:d1:c3:d9:6b:24:6b:50:85:d0:b4:8d:24:22:cd:52:60:60:
04:27:88:45:b6:b6:72:01:2f:8c:62:5e:6f:a5:f5:54:e7:d4:
5d:b5:03:77:ae:87:c5:6e:8b:3e:3e:cf:44:61:04:10:6a:34:
24:83:57:6e:2e:0a:67:8a:a5:47:5e:4e:0c:57:43:e5:0d:f7:
f3:8e:c4:6c:48:0e:61:e9:0f:22:98:41:5c:cb:23:b8:91:a5:
6e:32:7f:7b:48:1d:a7:54:92:43:02:85:e7:67:bd:9b:9c:15:
30:f6:72:0b:90:ca:9d:d7:3e:57:b6:bb:cc:e6:48:a8:40:36:
ab:28:f8:6b:cc:90:3f:83:f0:a5:30:32:37:e6:de:1d:bb:8e:
37:af:2b:cb:bf:b2:3f:ce:2e:25:e0:b6:17:68:79:d8:92:18:
25:e9:ee:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:38:29 2025 by rpki-client