Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/ED6AC2042F8F11EE895A9C2DC4F9AE02.roa
File: ED6AC2042F8F11EE895A9C2DC4F9AE02.roa (raw, json)
Hash identifier: u+VhGowYLIxVMjAVLBfnnCu45VHndlnwmBn/wCGYcRA=
Subject key identifier: C5:E2:DB:27:1C:B4:87:61:AF:A6:3A:72:A9:D1:5C:D2:E5:47:9A:5D
Certificate issuer: /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
Certificate serial: 05D8
Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/ED6AC2042F8F11EE895A9C2DC4F9AE02.roa
Signing time: Sun 09 Jun 2024 01:34:55 +0000
ROA not before: Sun 09 Jun 2024 01:34:55 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 55933
IP address blocks: 103.151.4.0/23 maxlen: 23
103.151.4.0/24 maxlen: 24
103.151.5.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1496 (0x5d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6353
Validity
Not Before: Jun 9 01:34:55 2024 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=666506bf-afeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:c0:2a:ca:3d:33:bf:9b:64:e7:3d:5f:05:
48:84:b7:33:98:b8:f9:d6:e8:86:f6:9a:0e:fb:64:
2c:13:e2:02:f5:b7:17:db:18:10:e4:65:15:f2:9c:
cb:4a:fc:49:34:0b:89:9e:51:67:5e:20:84:7d:98:
64:b3:23:96:a0:48:19:52:cf:31:36:c4:15:39:73:
33:0d:fe:b9:4b:b0:ab:88:a8:0b:0b:e3:b0:db:90:
08:5a:8a:c3:ea:0b:85:73:fb:36:4a:43:03:ae:bf:
d0:37:b3:f8:72:f4:db:cc:74:0f:18:92:5a:6e:42:
e5:6e:e7:93:7a:d2:d2:eb:6c:31:8f:44:ad:35:d0:
8b:1e:cf:41:7c:35:8b:c8:5c:30:5c:02:ef:f9:c1:
ac:40:2d:11:29:68:6b:15:8f:47:0c:bb:38:53:6d:
08:a2:5c:63:e6:3a:b9:f1:d5:dd:b9:57:e7:2b:8e:
c3:ac:32:ff:65:d3:1a:9d:db:80:c0:41:68:5d:78:
b6:53:46:0b:9a:ef:b7:3c:ce:02:df:c1:39:8f:5e:
de:13:df:60:e7:d8:4e:36:9a:f1:c8:16:be:f0:b0:
19:61:60:87:a0:7c:1c:b2:16:65:1b:76:09:90:3c:
42:fd:f8:77:b2:74:15:3d:42:b7:81:e1:02:ab:45:
76:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E2:DB:27:1C:B4:87:61:AF:A6:3A:72:A9:D1:5C:D2:E5:47:9A:5D
X509v3 Authority Key Identifier:
keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/ED6AC2042F8F11EE895A9C2DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.4.0/23
Signature Algorithm: sha256WithRSAEncryption
10:85:8b:b6:35:09:1c:13:0e:e5:5b:2d:4c:a0:a4:5d:ab:7f:
5e:f2:40:ab:82:ce:9e:0f:c1:7c:43:b1:5f:c7:0c:0f:a0:24:
3b:22:ac:20:c7:1c:27:01:00:a8:02:e8:08:35:24:6b:da:7b:
58:0f:4e:fd:c6:b9:d2:aa:ec:6b:2d:d9:65:6c:f8:d7:ee:d1:
e2:56:c8:d4:65:a2:09:7e:44:f9:97:58:f4:6e:a3:26:c4:bb:
6c:13:90:fb:23:1e:35:6c:58:35:3b:43:a2:b8:38:1a:91:1f:
2b:36:92:81:a1:24:bc:7c:fa:db:8b:b7:f6:64:19:ca:f4:51:
0f:71:ae:7d:50:42:f0:0e:c0:76:56:24:45:01:f4:7e:fd:d3:
90:5b:db:c7:ee:0d:3b:e4:60:88:e4:3e:cf:f8:27:4e:b9:fa:
21:0a:1d:0c:74:84:ea:4c:72:78:a6:89:ef:e0:93:da:26:a8:
69:e2:d9:65:e4:09:90:04:ee:4b:5e:f3:bc:39:b4:db:23:f8:
1e:5f:f2:c9:e3:4f:7f:4c:0c:f9:ca:43:eb:4b:f5:02:15:63:
9a:39:95:f8:d0:9a:89:de:09:d2:09:32:dd:88:ed:5f:6e:4a:
eb:7e:f9:40:d9:41:82:a3:25:0a:95:48:8b:44:9c:18:02:b9:
06:c0:c7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:47:53 2025 by rpki-client