Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/B9F821D4462D11EC93DFE63CC4F9AE02.roa
File: B9F821D4462D11EC93DFE63CC4F9AE02.roa (raw, json)
Hash identifier: I8lWHibGq7xqWHXndBv/JsEhBfdVBWJiR9FoofIbTMA=
Subject key identifier: DC:ED:A5:10:E4:EC:5C:4B:3D:5B:4B:54:45:2B:40:4D:12:5F:F7:53
Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
Certificate serial: 112E
Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/B9F821D4462D11EC93DFE63CC4F9AE02.roa
Signing time: Mon 06 Jan 2025 17:45:32 +0000
ROA not before: Mon 06 Jan 2025 17:45:32 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 63889
IP address blocks: 103.127.248.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4398 (0x112e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4FB5
Validity
Not Before: Jan 6 17:45:32 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=677c16bc-3c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:6b:62:4e:f2:46:ef:2d:db:72:75:5d:a4:
ed:2c:54:f4:2e:24:36:a3:da:95:4f:5a:46:e9:04:
2b:a7:e7:22:04:10:fe:d1:e7:67:dd:10:ca:a0:57:
0f:82:3e:bf:40:7a:5d:d4:54:63:d5:35:71:7d:c0:
85:04:64:f6:12:ac:1c:e7:82:15:d3:d5:e7:9c:b0:
3e:69:e8:8f:47:f3:d6:46:5e:1a:8f:43:11:54:15:
12:9c:05:bc:c6:08:c7:96:62:48:ed:fe:88:35:21:
d6:38:5f:2e:d1:09:10:c1:e9:b9:91:cb:34:ad:9d:
f3:ca:64:48:11:8a:7c:9a:c4:89:83:e9:c2:be:0d:
3d:c6:96:82:3f:21:9f:84:29:05:27:7d:f6:f6:f8:
09:c6:79:34:fe:eb:35:85:e2:37:bf:bf:0e:29:d3:
af:d5:ce:c4:9a:26:d2:bf:19:ef:76:06:b9:27:4e:
de:e0:56:3c:21:bd:7a:cc:83:fe:8e:51:b2:b7:76:
66:b1:aa:b9:99:13:fd:55:7a:88:6c:23:83:37:33:
fb:25:83:7d:94:a3:c2:cb:74:74:60:02:a6:51:58:
24:2a:9b:33:9e:49:84:19:de:13:68:c1:d7:27:eb:
18:70:4d:f1:77:1b:e4:40:85:f0:ea:02:54:ac:a0:
9f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:ED:A5:10:E4:EC:5C:4B:3D:5B:4B:54:45:2B:40:4D:12:5F:F7:53
X509v3 Authority Key Identifier:
keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/B9F821D4462D11EC93DFE63CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.248.0/22
Signature Algorithm: sha256WithRSAEncryption
37:81:8e:06:36:53:e0:2b:bb:c1:64:64:c2:aa:fe:0f:2f:70:
ba:9f:0e:f4:77:a2:16:86:43:b3:71:86:6b:99:d8:44:0d:6f:
16:4c:bd:80:20:48:fc:a1:3b:77:80:b1:06:47:36:47:fa:ea:
e0:91:01:10:3c:ac:1b:b9:bf:b1:4c:74:80:2d:a9:e4:94:5f:
88:8f:ed:d5:66:aa:b9:85:40:7d:a3:e9:0c:95:9b:a6:36:4e:
c4:62:8b:46:0f:ed:be:78:c4:a6:ea:ac:18:7d:09:f8:a2:eb:
7b:12:44:7c:27:7f:71:8e:26:49:7a:b4:83:7e:a1:6a:b8:a2:
d9:6a:1c:5b:ee:d5:c8:4d:37:8a:fa:52:59:d1:a1:48:f9:ec:
3d:3e:56:b8:71:7e:3c:2a:44:e4:56:fe:3f:cb:0f:1d:f5:bd:
72:e5:d3:32:fe:f4:4f:27:53:6f:79:98:fc:26:2b:73:35:16:
e5:ae:ce:51:af:21:f8:b4:e2:6f:94:d5:e5:b0:3c:2b:e5:33:
37:90:90:c3:d2:b2:26:8c:7d:31:72:1b:b3:df:7d:c9:70:f8:
6a:e8:77:a1:e4:6c:c7:26:4c:d4:e7:f3:12:0a:e4:c5:c6:31:
32:d8:47:8a:42:4b:da:7d:a7:a8:48:ce:f7:6c:91:11:5b:d4:
77:bf:5a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:35 2025 by rpki-client