Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/ACEBFE04E7E511EFBC775C0EC4F9AE02.roa
File: ACEBFE04E7E511EFBC775C0EC4F9AE02.roa (raw, json)
Hash identifier: 0yGPdzFunQ5T02jKLxMdi+Rjr7DQq/Vj6dobHVz6yro=
Subject key identifier: 2D:C8:47:2E:F1:7E:3A:63:16:17:EC:98:A4:83:6D:BF:C6:E8:4C:08
Certificate issuer: /CN=A91C4614/serialNumber=494D771E511E120053BB09B1F274BD8F59D73AA8
Certificate serial: 0C76
Authority key identifier: 49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/ACEBFE04E7E511EFBC775C0EC4F9AE02.roa
Signing time: Mon 10 Feb 2025 19:31:51 +0000
ROA not before: Mon 10 Feb 2025 19:31:50 +0000
ROA not after: Wed 30 Jul 2025 00:00:00 +0000
asID: 150696
IP address blocks: 103.115.159.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3190 (0xc76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4614
Validity
Not Before: Feb 10 19:31:50 2025 GMT
Not After : Jul 30 00:00:00 2025 GMT
Subject: CN=67aa5426-276b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:f1:a3:70:8b:fb:03:68:bb:4c:f4:50:b7:
6a:44:49:4e:52:35:88:e0:5b:a4:c4:43:1e:17:b4:
16:8f:54:01:e1:a0:04:09:94:75:a2:53:81:5f:ed:
31:33:0e:6c:2f:aa:f0:1f:e8:01:f9:a7:c7:02:4e:
de:4f:f0:82:e8:c4:57:c3:69:91:40:44:fa:df:27:
86:ca:0b:59:98:16:ef:f1:b3:38:f8:f1:76:bf:ec:
a3:fd:19:15:11:9d:3c:7f:6c:41:c0:55:42:6e:58:
d9:a2:3f:49:92:27:5b:2b:e0:2d:45:fe:ad:40:dd:
37:2b:a9:1c:6b:7d:cf:6e:57:47:0b:ec:70:fe:25:
e9:22:aa:c8:43:2a:64:9b:19:62:57:f5:c3:c6:b2:
d0:8c:fa:ba:e1:9f:63:32:6b:5b:b6:71:41:b5:63:
01:fb:20:53:6e:20:3e:5a:5e:79:ff:98:b8:de:ef:
91:18:bb:64:61:e1:92:93:8b:e5:3e:5d:9e:27:39:
e4:f0:b8:3e:d3:6f:f4:bb:6d:cb:f4:f5:c4:20:8b:
18:73:84:8c:fc:77:1f:08:b2:6a:bd:60:e8:97:fb:
39:2b:d7:37:02:2d:63:7c:4f:b3:9c:ab:75:1b:80:
62:4b:ff:a7:20:63:0f:a2:55:34:0c:74:ef:b8:01:
fa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C8:47:2E:F1:7E:3A:63:16:17:EC:98:A4:83:6D:BF:C6:E8:4C:08
X509v3 Authority Key Identifier:
keyid:49:4D:77:1E:51:1E:12:00:53:BB:09:B1:F2:74:BD:8F:59:D7:3A:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/SU13HlEeEgBTuwmx8nS9j1nXOqg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SU13HlEeEgBTuwmx8nS9j1nXOqg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4614/1C94899AF4F011E9AC202B1DC4F9AE02/ACEBFE04E7E511EFBC775C0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.159.0/24
Signature Algorithm: sha256WithRSAEncryption
87:74:b2:91:21:97:df:b5:b0:a4:5c:90:e3:9f:68:de:4e:8f:
94:de:7a:40:8a:56:8e:29:6e:93:8b:d7:71:54:e6:b1:46:2b:
6c:24:dc:49:0f:05:b0:7a:d2:f3:48:9f:38:90:e1:ec:9d:fc:
1e:ec:01:f0:28:f1:bf:8a:c7:87:94:4d:17:cd:37:06:00:aa:
9b:53:62:9a:8e:05:f6:b3:27:d7:1c:df:5b:aa:21:7e:3d:c0:
20:8c:24:63:82:7c:fd:74:cb:fd:66:b9:f2:02:70:93:ba:f8:
00:5e:dc:61:86:22:05:8c:df:8e:52:fe:84:8e:87:d2:d6:39:
5d:12:2c:fb:0a:30:02:96:c4:9b:d5:20:9d:76:50:14:4e:6a:
3a:17:41:e5:18:e6:ea:ea:e7:9d:57:c5:3d:90:f1:7f:d2:3b:
71:42:3f:1b:72:b9:06:22:5e:b6:b4:6f:4a:c8:2e:f0:17:1a:
ec:6c:73:7b:6f:e4:e5:f9:46:b8:45:a2:99:66:0c:7c:d0:eb:
5a:4d:d6:19:ff:dd:de:7a:ce:8e:61:0f:1b:46:3d:ae:4a:f8:
43:4f:0f:0e:a6:e2:74:96:c9:0e:19:12:21:47:95:58:e1:65:
b3:c4:cb:f4:78:b8:57:2d:00:a3:b4:7e:d1:35:bc:82:2e:ee:
ac:41:27:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:27:59 2025 by rpki-client