Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/59675AB20A4011F0AC302962C4F9AE02.roa
File: 59675AB20A4011F0AC302962C4F9AE02.roa (raw, json)
Hash identifier: tX8/5QgMtsCLrwoaol70And5FJnb3NLo6JwFspF8Ii4=
Subject key identifier: C7:B3:F5:51:CC:29:CA:FD:B7:A3:D8:DB:96:22:D5:1D:84:21:93:1B
Certificate issuer: /CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D
Certificate serial: 094B
Authority key identifier: 08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/59675AB20A4011F0AC302962C4F9AE02.roa
Signing time: Wed 26 Mar 2025 12:47:15 +0000
ROA not before: Wed 26 Mar 2025 12:47:15 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 132896
IP address blocks: 103.56.151.0/24 maxlen: 24
103.115.224.0/24 maxlen: 24
103.115.225.0/24 maxlen: 24
103.115.226.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2379 (0x94b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB1F6
Validity
Not Before: Mar 26 12:47:15 2025 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=67e3f753-962b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fe:8c:8a:5e:45:37:ca:2f:43:0e:f5:e5:ea:
b6:35:0f:9d:71:90:cf:b4:3c:24:64:ec:2a:a8:05:
1e:1f:9b:0e:47:9b:41:09:55:4f:a0:0a:53:be:9f:
f2:7c:14:16:f7:66:10:44:66:46:a5:9d:8e:57:00:
1b:9a:30:a8:51:a4:c4:c9:f1:fd:a7:38:ba:e6:4c:
af:bd:88:dd:33:79:b7:44:9e:be:26:97:30:2d:1f:
af:45:04:99:aa:b5:9a:d4:5b:f9:47:a9:9e:00:ca:
d4:e5:c9:cd:bc:3c:78:ef:dc:67:d7:5d:d6:f4:2f:
00:4c:c8:26:8e:90:cd:1c:1f:80:e8:3c:bb:de:8f:
de:7e:89:cd:b1:7c:37:a1:74:fb:dd:88:97:56:3b:
22:cf:c3:b1:6e:3c:b5:28:9f:a8:a9:24:f5:c4:f8:
f2:18:80:a6:e1:f8:83:a3:99:bb:3e:31:96:f7:cd:
ff:ff:87:79:e7:bf:94:a1:dd:ee:15:5b:6a:1f:8e:
be:61:78:85:c0:af:61:d7:ff:36:61:4c:db:1e:c7:
d5:23:59:07:bc:be:20:7e:0b:d9:73:fb:de:f5:a8:
a6:70:7b:d2:b9:33:89:d0:aa:42:36:5f:b7:fb:72:
e0:3a:35:16:1f:b9:ed:f8:21:68:f4:5f:24:02:ab:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B3:F5:51:CC:29:CA:FD:B7:A3:D8:DB:96:22:D5:1D:84:21:93:1B
X509v3 Authority Key Identifier:
keyid:08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/59675AB20A4011F0AC302962C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.56.151.0/24
103.115.224.0-103.115.226.255
Signature Algorithm: sha256WithRSAEncryption
82:56:24:54:94:e4:cb:43:78:f3:99:f6:af:8a:97:3d:e9:50:
c8:db:8a:55:43:0a:91:56:02:08:b8:30:c7:58:4f:83:0a:45:
7f:37:99:11:c7:28:87:f1:5c:2e:2f:ab:99:92:fd:a8:86:fd:
41:21:d6:c2:14:7b:d9:8a:7d:a7:eb:99:05:d2:8b:8d:76:2b:
ac:41:7b:d2:db:76:7b:d7:c1:cc:8a:68:7a:77:44:07:a2:22:
c2:89:02:cb:71:d5:42:dc:56:78:a5:d6:5d:06:8a:35:c1:08:
39:ce:c7:69:af:bc:a0:24:26:41:a7:c4:47:28:0d:7b:2a:fd:
f1:f2:bd:59:b7:e2:99:bb:d8:80:85:53:47:b3:ca:92:50:35:
50:98:8d:92:a0:2b:2d:81:90:d5:98:d0:38:9a:a7:de:5f:93:
cf:13:64:19:0d:e3:6c:67:2f:73:1c:fd:6c:92:49:32:18:4c:
d5:11:34:7d:39:6b:c5:6e:e1:9a:d7:9d:a3:fe:b4:28:29:7a:
b7:70:38:88:07:3a:1a:30:9c:2d:a5:69:de:64:a7:5f:a8:3a:
23:70:d3:b6:07:d3:ec:16:67:b2:32:b4:aa:67:1d:49:ab:69:
0c:ed:ce:87:de:61:4f:f3:78:44:70:27:96:7e:df:f9:7d:d4:
b9:45:e5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:13:12 2025 by rpki-client