Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/776893761C9F11EAB9B84F25C4F9AE02.roa
File: 776893761C9F11EAB9B84F25C4F9AE02.roa (raw, json)
Hash identifier: ndXUBxQ/xEOvoRO3r6r5850s+ooSM85HQb25AiLL8T0=
Subject key identifier: 7B:F6:03:8A:AE:CB:AE:EF:0C:C5:DC:B3:A9:C0:43:B2:6A:3C:E8:C6
Certificate issuer: /CN=A91A8259/serialNumber=158FB3EFEE8EF6FB9A5A7C4E49A38C9D69BC2F34
Certificate serial: 0B9B
Authority key identifier: 15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/776893761C9F11EAB9B84F25C4F9AE02.roa
Signing time: Thu 06 Feb 2025 18:57:12 +0000
ROA not before: Thu 06 Feb 2025 18:57:12 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 138605
IP address blocks: 103.134.72.0/24 maxlen: 24
103.155.205.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2971 (0xb9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8259
Validity
Not Before: Feb 6 18:57:12 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67a50607-b047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:78:50:16:85:07:62:1f:63:18:38:65:22:
fb:af:09:ae:3e:a4:75:3d:e1:da:5a:8e:e1:3a:ed:
30:de:ad:ec:49:b1:18:61:f9:e0:06:5d:04:b6:68:
d4:6b:9a:fa:77:28:c9:3c:0a:f6:2b:5e:92:af:40:
80:58:0f:9e:9a:6b:da:8c:0c:34:46:04:ea:df:d6:
27:65:e3:cf:a8:fe:c6:88:5b:fd:de:ac:71:52:83:
43:9b:5a:5e:8e:88:4b:d4:53:2f:a7:34:d8:53:55:
a7:db:35:e4:50:bc:0a:f9:d2:a8:27:98:73:de:c1:
c4:83:8d:af:4b:f8:c2:dd:ef:66:27:a4:2c:e9:fb:
ff:6b:07:bf:6f:00:cb:fd:c9:c9:d4:8e:b7:65:e4:
33:e1:79:96:99:63:41:44:82:2c:e3:1a:be:a5:d3:
df:e6:b0:ad:26:ec:a5:93:7c:eb:a9:4d:ae:02:83:
73:e8:c1:02:06:10:10:0f:3d:b8:80:56:60:b8:20:
f9:8c:80:0a:ff:5d:3d:1a:c7:59:a2:04:e0:9f:49:
99:82:65:a6:d7:04:1f:14:ec:d2:16:f9:a3:e6:4e:
8c:9c:dc:7e:03:4d:e8:de:61:ed:d1:15:1a:ac:f0:
8e:c0:1a:35:6f:3f:76:c6:02:9d:85:cb:a4:ac:a4:
88:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F6:03:8A:AE:CB:AE:EF:0C:C5:DC:B3:A9:C0:43:B2:6A:3C:E8:C6
X509v3 Authority Key Identifier:
keyid:15:8F:B3:EF:EE:8E:F6:FB:9A:5A:7C:4E:49:A3:8C:9D:69:BC:2F:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FY-z7-6O9vuaWnxOSaOMnWm8LzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8259/51BB625C1C9A11EAAB18FC16C4F9AE02/776893761C9F11EAB9B84F25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.72.0/24
103.155.205.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:69:05:9c:b3:a1:d4:df:b5:ea:6f:0c:ec:86:08:08:d7:d6:
e5:f1:30:28:4f:26:24:68:32:c2:2f:09:5e:a5:5f:61:26:72:
11:20:ac:0b:02:b4:a6:29:8d:41:03:9d:b2:76:27:6e:01:70:
98:82:5d:af:fd:39:5a:5c:dc:47:3a:bf:e1:1a:6b:d9:9c:72:
0b:a3:8a:60:47:c6:42:ae:d6:5d:03:37:2c:fd:ee:87:c6:12:
c2:b3:2e:d9:0b:34:c2:fa:57:0e:10:4b:b6:43:06:c5:6e:37:
77:b8:24:49:68:5b:55:b4:2d:36:e3:f5:c1:49:40:3f:c9:44:
81:b5:41:ec:70:96:d9:1e:15:63:62:7c:19:96:07:29:c2:f2:
6a:9a:5e:63:af:8f:cb:11:bf:58:28:e7:44:50:4c:84:db:68:
fa:63:b6:02:b9:ea:b7:94:7a:09:22:ae:8c:d4:21:4a:65:da:
4d:d4:71:f9:28:05:7e:e1:ac:67:2e:ab:fb:a2:97:53:76:7a:
dd:9d:b0:66:91:a2:35:4f:5a:78:95:88:7d:17:15:96:a5:f0:
fc:5c:53:8a:e7:1c:f2:26:04:74:c4:f2:82:a2:e6:31:6b:6e:
05:ce:df:1a:fd:54:14:22:b1:b7:90:b5:91:76:2c:2e:17:7c:
c0:42:47:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:31:12 2025 by rpki-client