Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/E8C597A6CAC311EC910B8C20C4F9AE02.roa
File: E8C597A6CAC311EC910B8C20C4F9AE02.roa (raw, json)
Hash identifier: ca8WhLHbBa7EcZLiVkbwKc/O4N20Afp/5/zNnD+5YJY=
Subject key identifier: 6A:A2:8C:30:CF:CA:0B:56:46:F9:9A:AD:65:C1:C6:ED:AC:19:58:5A
Certificate issuer: /CN=A91B734D/serialNumber=F4C332458BEDC878B96A07E1E081E5BF4A91A194
Certificate serial: 056D
Authority key identifier: F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/E8C597A6CAC311EC910B8C20C4F9AE02.roa
Signing time: Sun 15 Sep 2024 01:42:40 +0000
ROA not before: Sun 15 Sep 2024 01:42:40 +0000
ROA not after: Mon 01 Dec 2025 00:00:00 +0000
asID: 136778
IP address blocks: 103.155.214.0/23 maxlen: 23
103.155.214.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1389 (0x56d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B734D
Validity
Not Before: Sep 15 01:42:40 2024 GMT
Not After : Dec 1 00:00:00 2025 GMT
Subject: CN=66e63b8f-4d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:62:84:44:df:57:8c:42:01:c7:7f:f7:b7:ab:
eb:a5:ab:e6:1b:b9:e6:76:56:27:aa:d6:a7:13:20:
99:84:c6:1b:63:7e:1b:40:63:13:3f:b5:57:95:46:
e6:90:fc:6e:3f:4c:3f:72:5a:c4:80:8e:26:19:c7:
49:8f:76:ab:15:16:5a:71:dd:99:9f:03:ad:d5:46:
c7:bb:2e:12:ad:38:1d:d9:15:46:22:6f:8e:4c:a1:
cb:20:f5:b8:f0:36:40:20:28:48:7d:0c:3f:99:e1:
b9:c1:39:7b:0d:25:84:8c:9b:13:61:cc:48:f6:06:
48:a3:ff:cf:07:a0:ab:5b:99:6a:35:93:ed:49:ae:
ee:dd:ba:48:3e:7e:62:4a:b0:c0:dc:dc:b9:4b:53:
10:26:9a:d0:33:71:69:0e:84:17:a6:a6:9e:6b:dc:
40:f2:f8:e4:45:c2:0e:13:a8:c0:66:b4:82:80:95:
74:7a:ef:76:53:3b:48:58:1e:a6:ea:06:09:51:92:
07:59:e8:4a:ea:1e:8a:d4:24:f5:4d:67:b2:2a:e6:
98:1e:53:d8:77:1d:93:ad:59:15:48:64:df:4c:2d:
a2:9b:d4:a7:0b:2a:0b:9b:44:be:9a:53:f4:8c:3c:
87:bc:df:74:ea:ac:f7:e6:73:9a:ce:ba:4f:27:05:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A2:8C:30:CF:CA:0B:56:46:F9:9A:AD:65:C1:C6:ED:AC:19:58:5A
X509v3 Authority Key Identifier:
keyid:F4:C3:32:45:8B:ED:C8:78:B9:6A:07:E1:E0:81:E5:BF:4A:91:A1:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/9MMyRYvtyHi5agfh4IHlv0qRoZQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMyRYvtyHi5agfh4IHlv0qRoZQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B734D/11584326B94F11EB9A6AEF32C4F9AE02/E8C597A6CAC311EC910B8C20C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.155.214.0/23
Signature Algorithm: sha256WithRSAEncryption
97:09:44:ad:bb:7e:3b:e7:17:56:f9:30:04:e9:5d:03:19:06:
a4:ac:50:ca:41:e6:2b:48:b0:38:5b:d6:c1:93:3d:87:34:e2:
16:39:b8:4f:2f:e3:4c:d7:ba:82:dc:bf:ef:9f:65:4a:fc:fc:
67:44:cd:94:53:75:d2:27:b3:f3:59:88:8e:fe:05:66:10:cc:
2e:53:f5:73:0f:f2:6c:52:c2:a8:b8:fd:5b:8e:cf:9a:c0:b9:
bb:38:ab:44:fe:ac:33:f1:45:18:f8:7d:71:8a:4e:e6:16:52:
f0:5e:14:90:c0:15:9a:15:44:50:22:30:52:b5:8d:f6:02:ae:
5c:12:af:25:3a:17:f1:b9:6f:5d:12:44:ac:c0:1f:9c:28:47:
b6:7f:d2:94:5c:ee:c7:64:03:39:49:6e:a7:e8:a1:13:d5:62:
57:cf:a0:25:5b:bb:34:e8:0b:1d:1e:88:b0:8b:ef:9a:76:97:
7e:19:d7:f8:9b:0f:9f:67:b2:8c:e3:0a:df:d6:dd:fc:72:b7:
08:9d:02:0e:d5:d4:84:85:37:8a:d5:ef:d4:5b:91:57:5e:6a:
7b:f2:79:28:09:09:e2:3d:ee:c3:38:1e:d3:61:8e:9c:cf:d8:
8f:71:c9:58:77:56:6d:6a:8b:ca:f4:6e:20:54:22:3b:b6:35:
ca:3c:0f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:28:00 2025 by rpki-client