Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/A0841A68D0D511EC81001E73C4F9AE02.roa
File: A0841A68D0D511EC81001E73C4F9AE02.roa (raw, json)
Hash identifier: 28rk2f2SK8fYlNSOWgKUvbvWyh9sktvms5gVEW96hEM=
Subject key identifier: 5C:98:3C:9A:70:EF:67:38:D6:C0:83:CD:96:1A:6E:80:5B:7A:0B:1E
Certificate issuer: /CN=A91CE6C5/serialNumber=D528FAD4B876ABFB70AF3892220F293E1791B6BC
Certificate serial: 02E3
Authority key identifier: D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/A0841A68D0D511EC81001E73C4F9AE02.roa
Signing time: Tue 17 Dec 2024 01:04:18 +0000
ROA not before: Tue 17 Dec 2024 01:04:18 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 132742
IP address blocks: 103.80.144.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 739 (0x2e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE6C5
Validity
Not Before: Dec 17 01:04:18 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6760ce12-f414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:f3:3b:ae:4c:c7:9d:1a:b7:2f:7f:7f:63:
7c:c6:e5:94:32:6e:86:a1:93:00:20:10:39:aa:3b:
61:13:cc:39:de:0c:40:51:80:c6:47:ad:f5:9d:62:
1a:ad:ab:0c:03:df:15:95:ab:cd:1a:06:4e:7e:ae:
9e:07:8c:79:88:57:73:c8:30:8f:a9:e9:a9:7f:b1:
82:98:36:35:6e:c9:93:0b:8b:be:19:2f:93:d9:dd:
e3:b7:0e:04:00:73:eb:e5:4c:ef:75:1f:f0:a1:41:
fd:eb:5e:22:17:c4:52:61:e5:42:f3:54:10:f1:09:
a5:63:d9:f5:3a:3f:4e:0d:14:41:a7:4c:ab:b9:cd:
f0:24:23:4d:99:28:6d:5a:3d:58:6f:64:f0:5c:ed:
11:e8:86:5f:23:49:30:b5:35:38:0f:80:2c:e9:f6:
20:91:1f:91:76:92:b5:9c:f7:f7:d5:69:51:16:7d:
28:14:56:c0:94:6a:06:56:6e:5f:04:b0:09:22:bc:
a3:bc:91:1a:21:16:fd:42:3d:67:5e:c9:14:2d:99:
3d:b9:39:87:3a:09:cc:36:06:4e:9b:9d:9e:87:86:
ed:17:42:fb:4e:f5:26:b4:59:7b:d1:0f:a8:71:58:
b6:2a:26:55:3a:6d:db:2a:06:30:9b:24:bc:e3:2c:
1e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:98:3C:9A:70:EF:67:38:D6:C0:83:CD:96:1A:6E:80:5B:7A:0B:1E
X509v3 Authority Key Identifier:
keyid:D5:28:FA:D4:B8:76:AB:FB:70:AF:38:92:22:0F:29:3E:17:91:B6:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/1Sj61Lh2q_twrziSIg8pPheRtrw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Sj61Lh2q_twrziSIg8pPheRtrw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6C5/E8266020C6C011EC8AB7553FC4F9AE02/A0841A68D0D511EC81001E73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.80.144.0/22
Signature Algorithm: sha256WithRSAEncryption
92:ac:8c:b1:c0:e9:92:b5:8d:4a:51:e6:3d:ac:b3:58:ef:a4:
0c:db:a9:23:35:72:75:a5:cb:35:58:f7:b0:29:10:71:cb:59:
39:03:c3:5e:dd:82:4e:84:82:ab:86:12:58:9b:51:23:83:7d:
fa:b6:12:16:94:2d:5a:a0:ae:53:9f:56:45:6e:50:3b:d8:75:
78:8e:9b:1f:1c:66:39:ab:a6:aa:45:e8:db:49:18:51:30:f7:
ac:a9:50:7f:e6:45:91:0d:d3:8b:11:6f:f1:66:54:9f:5b:0c:
ab:46:fe:99:26:b9:b5:55:ec:27:72:57:fb:06:d4:4f:7b:f1:
20:13:c7:5e:61:0d:b3:d5:0a:29:45:a6:fa:98:5e:ff:c1:e2:
19:c1:42:f2:27:98:55:f6:1d:63:23:3a:31:93:c5:dc:cf:c6:
1a:7d:c2:6b:98:16:da:30:58:2e:d5:48:cc:88:49:8f:af:31:
02:f2:88:a5:97:54:49:ae:b7:76:95:80:e2:11:fe:a8:b7:cd:
fd:05:c4:a9:5a:d9:9e:64:78:6f:38:21:7e:44:dd:6c:c2:5d:
66:da:84:fe:11:68:6b:79:a8:96:17:4a:50:ff:fa:a1:9c:38:
d5:20:b2:3f:09:6a:e4:58:93:6f:82:c7:fe:66:6c:a0:02:4b:
1d:29:d7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:52:52 2025 by rpki-client