Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/A0E062260A8C11EAB25FD253C4F9AE02.roa
File: A0E062260A8C11EAB25FD253C4F9AE02.roa (raw, json)
Hash identifier: 7xX6rH7i12z21iTWC8vTwBT7bsP1fB8No9Xtvt+ZVCA=
Subject key identifier: 1E:59:AF:B6:ED:86:33:41:50:46:9A:62:AA:DC:3F:F1:E4:44:A0:A9
Certificate issuer: /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
Certificate serial: 0BD0
Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/A0E062260A8C11EAB25FD253C4F9AE02.roa
Signing time: Sat 30 Nov 2024 19:07:52 +0000
ROA not before: Sat 30 Nov 2024 19:07:52 +0000
ROA not after: Sat 31 Jan 2026 00:00:00 +0000
asID: 137029
IP address blocks: 103.102.136.0/22 maxlen: 22
103.102.136.0/24 maxlen: 24
103.102.137.0/24 maxlen: 24
103.102.138.0/24 maxlen: 24
103.102.139.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3024 (0xbd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9D5D
Validity
Not Before: Nov 30 19:07:52 2024 GMT
Not After : Jan 31 00:00:00 2026 GMT
Subject: CN=674b6287-7bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ee:da:16:9b:fb:ac:5f:16:03:cf:46:15:59:
27:ec:ff:9c:06:52:58:ca:dd:cf:ef:3f:ca:fc:10:
e3:bc:35:97:8a:c7:f6:e6:e2:e3:e0:d5:7d:4f:a6:
87:82:4b:88:d5:e1:26:f5:be:28:ab:79:4a:b5:e3:
78:67:f5:ef:36:03:c6:8b:32:d8:1d:e9:59:dd:50:
18:cd:1b:29:85:cf:56:31:13:35:2f:48:df:94:20:
5c:42:d3:94:a6:ec:b2:dd:67:15:83:c5:b8:15:d4:
b5:ba:99:32:e2:f3:28:cf:12:92:f3:9c:9b:60:e0:
e4:ec:e5:81:3d:05:8d:2b:12:c2:46:d6:49:03:02:
43:4c:56:fb:f2:e6:04:32:bf:a1:eb:2c:04:0a:b5:
b5:a7:f8:f9:ee:49:3d:8d:16:a2:d4:2f:50:ae:8f:
cc:bf:30:fb:bb:96:a4:03:40:ac:a2:38:b6:39:0e:
3c:50:8a:2a:2b:92:ce:49:05:8a:52:ff:2c:c6:b5:
58:ab:8d:26:79:3b:e1:48:3f:d4:01:41:12:38:ed:
ff:e2:a1:e6:45:0c:c4:31:4f:91:37:f8:51:a7:63:
6c:f3:ac:fd:4e:04:37:7b:25:21:91:b5:25:ca:26:
ad:39:97:91:3a:72:bf:18:c2:0d:6e:ab:24:d2:15:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:59:AF:B6:ED:86:33:41:50:46:9A:62:AA:DC:3F:F1:E4:44:A0:A9
X509v3 Authority Key Identifier:
keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/A0E062260A8C11EAB25FD253C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.136.0/22
Signature Algorithm: sha256WithRSAEncryption
35:75:0a:53:be:d1:08:e5:9c:5b:45:05:c4:58:4e:f0:10:42:
93:2c:d7:e4:28:dd:3c:65:1e:f5:2f:db:b3:1b:1b:b6:6c:00:
6f:d4:b7:4a:f1:a7:46:45:fe:ed:c8:ff:05:61:18:d2:62:c9:
1f:d9:09:85:97:14:8e:07:73:a3:af:96:2e:45:56:b4:8f:18:
b1:47:1d:1d:20:44:9d:af:f0:af:f9:25:11:4a:7c:3c:6b:6f:
a3:e2:47:2b:65:0d:ec:f1:1a:6a:06:ea:04:15:94:a5:30:17:
94:91:fe:7d:f6:a5:13:3a:c1:a4:9d:6d:a0:ba:75:ce:17:3a:
4e:67:7c:f3:8b:e2:6f:c9:e1:dc:2c:eb:ec:c7:a3:c8:f6:a9:
25:67:c4:a0:18:07:fa:88:1a:66:a4:bc:01:61:0b:11:71:b0:
47:7a:02:c8:37:a1:48:02:51:84:5f:db:1b:1a:24:84:c3:8d:
b9:41:1d:0c:07:17:5f:5c:23:da:b1:75:92:31:b1:d4:57:6e:
66:a9:b9:43:d3:c2:2f:d9:fc:bf:8c:cf:fb:56:ba:d5:17:28:
f5:cf:3a:ba:ee:2f:31:fb:aa:18:c9:db:17:a7:51:4b:25:a5:
c8:5b:f3:3b:a5:85:f5:9d:8a:62:d7:92:3c:f8:88:3c:42:3a:
53:13:df:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:29 2025 by rpki-client