Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/E6C24E8669E011EFBD9DBA75C4F9AE02.roa
File: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (raw, json)
Hash identifier: 0DLMcfV/Llm+3fYXZIJn54Ysw/AzVCrvYXgQgG2YQmU=
Subject key identifier: C0:67:BB:78:06:F4:4D:F5:4A:37:58:6A:DE:B9:52:A5:0A:AC:23:8D
Certificate issuer: /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341
Certificate serial: 3438
Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/E6C24E8669E011EFBD9DBA75C4F9AE02.roa
Signing time: Sun 22 Dec 2024 15:21:09 +0000
ROA not before: Sun 22 Dec 2024 15:21:09 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 56258
IP address blocks: 103.243.48.0/24 maxlen: 24
103.243.51.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13368 (0x3438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D366E
Validity
Not Before: Dec 22 15:21:09 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=67682e65-6323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:71:74:94:a2:62:db:42:c0:34:03:94:82:6f:
f8:60:ba:3a:d6:96:3c:94:9a:be:b9:f6:59:af:59:
69:a2:ce:9f:ac:ae:2b:cc:97:db:34:94:aa:58:a7:
a8:b8:85:51:75:16:28:22:cc:25:7a:ab:58:eb:c0:
18:e5:06:0c:dd:a9:9e:7c:4b:14:5a:84:9f:4d:c1:
15:b7:d6:33:50:8f:55:7b:39:51:78:e3:06:33:4d:
70:87:76:21:9c:4a:a3:77:e4:df:11:a1:ad:eb:bc:
db:48:5b:d3:3a:14:51:31:8d:6b:89:f3:4a:91:81:
de:5e:76:0b:b0:71:35:66:14:f7:e3:6c:35:c2:59:
ae:e0:a7:d6:b0:72:46:21:34:42:a0:95:85:a1:7c:
58:08:df:4d:3d:7a:eb:61:15:63:97:cb:10:1b:d6:
01:b5:fd:80:73:69:b6:f9:4b:80:d0:49:bb:19:92:
ec:f7:a6:cd:dd:a4:37:7b:f2:c9:a5:51:9a:7a:db:
85:e6:d2:91:6b:12:68:6c:de:b1:8d:90:af:9c:a7:
bf:65:14:80:a9:13:8a:a9:34:05:c5:bb:d4:6e:a7:
de:47:08:22:5c:b2:84:28:01:07:71:2b:f4:3d:03:
3c:51:f2:dd:5a:86:8e:2f:bd:95:b8:8b:7a:e7:d0:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:67:BB:78:06:F4:4D:F5:4A:37:58:6A:DE:B9:52:A5:0A:AC:23:8D
X509v3 Authority Key Identifier:
keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/E6C24E8669E011EFBD9DBA75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.243.48.0/24
103.243.51.0/24
Signature Algorithm: sha256WithRSAEncryption
83:13:cf:37:46:6c:dd:63:66:4d:6b:6a:60:3f:df:bc:3d:76:
4d:ed:98:a0:cb:4a:8a:91:87:26:b6:79:8e:d2:d2:64:4d:0c:
ac:ae:15:16:c0:70:e1:00:45:fa:d1:16:fa:27:01:44:42:32:
ac:b8:54:7e:67:6c:43:19:70:6e:b4:e6:d1:f8:74:16:1a:71:
12:7b:fd:21:70:1b:d9:d9:05:d8:13:54:00:1a:bb:40:93:4c:
50:4b:66:b5:82:07:4b:42:f3:24:d9:d4:7c:c1:f7:e1:3f:9a:
a8:5b:b4:2b:80:67:06:98:99:3b:72:19:d5:a4:a9:e0:f8:53:
ef:99:5d:86:e6:f2:17:5a:08:53:4d:7e:98:e2:aa:05:96:9c:
fc:c1:20:3a:20:be:d3:d4:92:6a:c2:61:97:c5:09:4b:fa:59:
7c:50:f6:1b:1e:4e:0a:a3:61:c5:8e:d3:50:2e:79:08:82:ba:
64:56:59:fd:dc:6c:2c:60:8e:ac:c3:04:c0:15:65:47:99:98:
16:89:34:53:0e:a1:44:fe:6d:a9:9f:a7:3d:f5:70:c0:22:89:
f3:66:fd:1f:49:d3:9d:99:74:28:ab:88:5c:57:07:51:1b:7b:
2e:3c:2c:a1:ec:7e:b8:25:1c:04:d1:db:e0:a0:d9:9f:ec:47:
7e:7e:12:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:47:49 2025 by rpki-client