Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/F7ACE748AD3C11EA95DFF369C4F9AE02.roa
File: F7ACE748AD3C11EA95DFF369C4F9AE02.roa (raw, json)
Hash identifier: eva2CwxKJKJqWQ6I0wp7A0DX5eeMMT63BYKB14R391I=
Subject key identifier: 8D:E4:FC:F4:85:48:42:F9:6A:01:D3:7D:C5:B6:73:CE:1E:1D:B5:B8
Certificate issuer: /CN=A91C4FB5/serialNumber=CAFA20A9018095D229F0AC43920DCD43A66BEB52
Certificate serial: 112D
Authority key identifier: CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/F7ACE748AD3C11EA95DFF369C4F9AE02.roa
Signing time: Mon 06 Jan 2025 17:45:31 +0000
ROA not before: Mon 06 Jan 2025 17:45:31 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 24373
IP address blocks: 103.127.248.0/22 maxlen: 24
2404:2b40::/32 maxlen: 40
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4397 (0x112d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C4FB5
Validity
Not Before: Jan 6 17:45:31 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=677c16bb-1d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e5:4d:cf:9d:02:dc:27:4e:41:39:c9:73:88:
0f:46:c9:71:23:6b:b8:fc:d9:5e:17:84:48:37:e0:
80:ad:fb:0a:88:dd:48:dc:36:6d:49:ea:22:e0:5b:
fa:44:36:a5:72:ee:25:19:60:3d:f4:76:39:10:87:
fd:0c:be:e1:e9:0a:f0:d3:2f:e5:9d:cf:9d:42:85:
ed:5a:7c:af:9d:29:19:ff:ce:4f:81:44:a4:da:95:
6a:91:eb:e1:ab:ff:00:1f:57:1c:d0:62:c6:31:e1:
42:06:67:53:1b:94:03:d0:f3:c9:6e:ec:98:3d:de:
4e:f4:16:34:6e:f8:3d:c7:00:54:7a:31:d7:67:f4:
e0:46:ba:42:78:6b:31:04:ad:5f:40:d5:69:90:50:
b5:74:c0:c4:41:5e:aa:0b:7c:85:e3:06:0f:f3:ae:
8d:fc:25:fc:55:12:fd:a9:8f:c6:8b:33:77:2c:b1:
92:30:b6:db:7d:7c:fe:38:30:20:9a:55:be:bc:d4:
82:ef:68:cc:6d:ca:cd:61:cc:fa:c5:c5:30:b9:73:
31:70:81:a3:af:ac:b6:79:00:0a:ed:46:a8:48:89:
36:c0:23:98:8a:de:1f:90:b4:73:51:ee:7c:96:f5:
17:06:f2:18:3f:32:17:99:de:d0:e2:e6:b5:12:21:
c1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E4:FC:F4:85:48:42:F9:6A:01:D3:7D:C5:B6:73:CE:1E:1D:B5:B8
X509v3 Authority Key Identifier:
keyid:CA:FA:20:A9:01:80:95:D2:29:F0:AC:43:92:0D:CD:43:A6:6B:EB:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/yvogqQGAldIp8KxDkg3NQ6Zr61I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvogqQGAldIp8KxDkg3NQ6Zr61I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4FB5/EF987EE209D111E995607B52C4F9AE02/F7ACE748AD3C11EA95DFF369C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.248.0/22
IPv6:
2404:2b40::/32
Signature Algorithm: sha256WithRSAEncryption
4c:5c:11:8c:6a:45:28:63:ea:50:41:82:60:e5:79:a5:43:94:
64:4d:a8:d2:8a:e0:3d:ab:48:ee:95:5e:d9:5e:e1:39:49:77:
ae:8f:81:cf:40:1b:21:0d:dc:f9:fc:ff:b1:75:a5:a0:23:e8:
c3:9a:0a:0e:88:52:89:ff:79:57:ab:f4:60:41:fb:24:24:87:
70:dc:a9:c7:bd:13:7e:60:67:bd:4d:e0:21:56:c2:c9:a8:4a:
9f:cf:ec:48:43:77:66:c2:95:b8:a0:59:25:69:0a:b8:87:c9:
14:f8:17:06:e9:90:09:8e:f5:92:8b:09:c1:e8:e2:9c:24:6d:
64:73:c4:52:31:17:bf:55:7f:ba:3b:77:29:c0:31:94:cb:c9:
80:4f:c2:2e:69:db:6c:90:80:94:d4:20:f2:be:a7:76:8c:01:
ee:99:8e:82:64:23:12:62:29:73:95:15:d6:3d:69:fa:0a:6a:
d4:36:c2:95:db:f7:5b:3a:e8:bf:78:0c:f8:f9:31:00:db:a6:
64:98:10:68:8a:91:e7:48:6a:d5:a8:27:37:c7:0d:40:e5:5a:
18:9e:c4:73:05:c4:74:ee:37:ee:7c:07:60:10:09:17:77:0e:
c0:a0:4f:02:a1:61:e7:e4:e7:42:4e:0f:e2:12:14:f7:ad:00:
a9:69:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:52:43 2025 by rpki-client