Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/08BD74841A4F11EA8DFECB86C4F9AE02.roa
File: 08BD74841A4F11EA8DFECB86C4F9AE02.roa (raw, json)
Hash identifier: 5pPzlX8jdTNFookFj/rSeOJPoKLM49nAfSCOByjLKkM=
Subject key identifier: 40:78:4C:D9:02:0D:20:14:63:75:24:DF:C5:26:37:83:CE:31:D7:A9
Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
Certificate serial: 112B
Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/08BD74841A4F11EA8DFECB86C4F9AE02.roa
Signing time: Mon 06 Jan 2025 17:45:30 +0000
ROA not before: Mon 06 Jan 2025 17:45:30 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 136897
IP address blocks: 103.127.249.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4395 (0x112b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4FB5
Validity
Not Before: Jan 6 17:45:30 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=677c16b9-bb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:ff:12:8d:b7:de:0a:fb:cb:d8:6b:81:d7:
70:7a:2f:b5:80:96:ea:c7:bc:05:3a:81:61:e4:c7:
13:dc:df:48:d3:1e:f1:c6:f3:8e:85:2e:d4:4b:41:
2e:ea:61:a0:f3:d5:81:b3:49:59:01:5e:6b:69:12:
18:47:67:22:bf:32:13:2e:93:f6:16:3b:2a:0b:82:
0e:56:34:39:24:c1:68:9e:9c:34:26:5e:f6:4c:0a:
c1:ba:e3:94:bc:8b:e1:84:ee:a8:50:4f:d3:89:9d:
6b:51:f5:ce:c4:bf:e8:0f:af:56:b0:d3:ee:68:e3:
cd:32:3e:dd:bb:3f:50:19:de:ce:97:94:71:97:7f:
ff:78:83:59:3b:22:fa:d7:99:b6:a1:01:f5:88:fc:
7c:6c:a5:e5:c6:75:72:84:2d:c1:8e:1e:1c:dd:a8:
49:81:ed:ea:03:5a:05:3f:1c:6e:64:38:7f:6b:d1:
43:07:52:ac:11:4d:d2:75:70:9d:d2:fe:d9:2e:94:
d7:2f:88:8e:c5:fb:08:c7:0e:d4:8e:c6:32:dd:a7:
5d:03:6e:5e:d5:0c:5c:b1:c1:04:e9:c9:5a:e0:83:
36:bc:54:20:2b:10:1f:9a:1b:6e:bb:12:26:c5:a7:
ef:57:3c:9e:28:dc:7b:9f:37:e7:19:93:31:43:34:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:78:4C:D9:02:0D:20:14:63:75:24:DF:C5:26:37:83:CE:31:D7:A9
X509v3 Authority Key Identifier:
keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/08BD74841A4F11EA8DFECB86C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.249.0/24
Signature Algorithm: sha256WithRSAEncryption
72:df:b9:87:86:92:b2:da:fd:57:b0:05:8a:51:3f:38:6a:1e:
d5:fc:74:15:6c:c0:d6:0f:16:18:c9:d2:c2:ed:cd:84:98:b1:
be:fe:65:c6:fe:90:5a:be:55:0a:6e:1f:bf:e8:84:3b:d9:40:
e1:ba:f8:2e:d5:06:f0:d8:c0:28:5e:3b:09:80:68:86:39:12:
8a:dd:a6:c3:78:ad:3c:d2:67:d5:86:7b:26:a4:2f:85:f4:af:
74:df:95:16:60:67:54:fe:e3:d3:6c:1e:e6:e4:1e:7c:88:28:
02:80:de:3c:6c:58:59:1e:45:6a:86:86:3f:b4:12:59:97:ca:
da:65:f4:1b:8d:ed:8c:fb:3e:1a:88:e5:24:ce:34:73:cc:e9:
bf:f1:c4:ef:5b:0b:cc:a0:bb:2d:96:9a:5c:cb:43:5b:26:c7:
68:d1:a7:c4:06:b8:10:35:44:21:4b:43:b7:81:69:33:b9:10:
fe:aa:7c:8e:1e:dc:3e:c0:f2:25:03:7f:25:86:c6:a4:ac:38:
b9:e8:ac:42:e9:5c:1f:4f:3a:6b:38:38:4d:af:8a:09:4f:9a:
c8:eb:ff:ee:5f:81:99:0d:0e:ac:78:d5:2e:66:f8:d7:d7:11:
0c:53:78:5e:24:df:3c:59:20:14:7d:9a:69:80:8b:2e:1e:4d:
6b:05:37:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:02 2025 by rpki-client