Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/DE183F1CF46611EC815F7283C4F9AE02.roa
File: DE183F1CF46611EC815F7283C4F9AE02.roa (raw, json)
Hash identifier: 9MdpJxrwdV0aU1f/zX8n/hykvTdPQn1kKe0kWScV57Y=
Subject key identifier: E0:B9:24:A1:C8:1B:99:9E:95:10:4B:AF:A0:F0:EF:15:39:D8:EF:C0
Certificate issuer: /CN=A91D3CA7/serialNumber=D397E78C6DD3C6968513341532C72188D77567AF
Certificate serial: 0294
Authority key identifier: D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/DE183F1CF46611EC815F7283C4F9AE02.roa
Signing time: Fri 07 Mar 2025 01:47:13 +0000
ROA not before: Fri 07 Mar 2025 01:47:13 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 138629
IP address blocks: 103.134.176.0/22 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 660 (0x294)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D3CA7
Validity
Not Before: Mar 7 01:47:13 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67ca5021-47b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:47:ff:0a:4e:7c:b8:69:ba:82:78:1a:7c:
81:af:92:d8:ff:d7:fa:96:b8:f0:bf:3c:55:48:a3:
3b:c7:b0:bb:65:58:3f:b4:a1:23:67:e3:4c:0d:14:
d0:c9:59:91:7e:2e:63:ab:e5:ca:fd:68:ff:32:00:
6b:03:23:f5:e2:d5:71:a6:cb:70:89:54:16:30:53:
73:4c:c8:0d:c8:c7:af:55:28:29:be:83:ff:c6:52:
04:2e:ef:fe:f1:98:61:a4:ea:11:e6:b4:3c:d1:78:
cc:c7:51:09:fb:ff:1e:e9:8f:aa:d4:dc:7e:74:9d:
45:a4:d4:8a:a6:2e:da:a4:8d:71:8e:f3:fe:7b:8e:
49:41:84:ef:f1:d2:2c:ec:20:58:6a:42:de:de:11:
6c:56:0b:24:fc:92:e6:eb:52:93:ab:9c:b8:d6:03:
ca:4f:64:0b:52:80:31:a4:d6:33:cc:da:fc:79:4c:
2e:85:b5:cd:b4:35:53:78:1d:ab:a2:a4:e2:c3:ef:
5c:da:23:98:dd:6c:ab:2e:0b:8e:ea:58:1c:99:8a:
85:67:c1:9a:9f:40:e5:6d:1e:1d:7c:48:ee:b2:1f:
3e:d7:27:3b:a6:1c:73:d1:3a:24:b5:c5:da:22:ca:
1d:1d:e3:17:df:9b:9b:13:6a:ff:73:d2:2c:d4:cc:
33:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B9:24:A1:C8:1B:99:9E:95:10:4B:AF:A0:F0:EF:15:39:D8:EF:C0
X509v3 Authority Key Identifier:
keyid:D3:97:E7:8C:6D:D3:C6:96:85:13:34:15:32:C7:21:88:D7:75:67:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/05fnjG3TxpaFEzQVMschiNd1Z68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/05fnjG3TxpaFEzQVMschiNd1Z68.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3CA7/3F0E0E06F46111EC823CA07CC4F9AE02/DE183F1CF46611EC815F7283C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.134.176.0/22
Signature Algorithm: sha256WithRSAEncryption
86:08:5f:23:1a:22:0a:85:e7:e1:4b:cb:99:5c:11:03:1a:9f:
e6:f0:77:d6:77:2f:fc:55:27:4e:d6:e7:10:2d:a3:bd:ed:9d:
29:ee:3c:64:a1:6f:60:e9:04:d3:c7:02:7b:ae:40:62:63:59:
48:77:a8:05:85:d2:05:68:5b:6e:e5:ed:59:9d:65:eb:e6:29:
e9:da:c2:fd:09:c2:2d:d6:61:b0:3d:17:86:34:33:56:55:01:
78:fa:7f:b1:da:ed:69:1c:a5:60:49:40:f3:e4:32:47:f4:6b:
f9:a2:e1:0a:60:67:90:15:cb:0f:c5:f5:ba:c3:a6:85:57:a7:
5f:8c:29:8f:66:16:7a:12:af:57:a8:aa:9c:ea:bc:f5:64:40:
63:fb:d5:73:e8:a1:4c:1c:50:51:76:63:af:67:62:4d:be:c7:
d8:46:4d:d4:aa:81:92:e6:ba:fb:31:51:2a:fc:62:68:4d:0c:
b0:ab:54:e3:16:53:4b:f5:a1:88:26:97:bb:e8:e4:39:de:5b:
0d:cf:e6:83:05:02:8f:b7:16:36:07:9f:0c:e7:69:56:ed:f1:
f1:db:ef:c7:27:10:b4:32:1a:13:56:74:a8:06:c8:0b:ac:b6:
47:2f:1d:d8:b1:3c:ab:cf:3b:31:5c:dc:cb:59:46:ed:40:3d:
c2:c0:f5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:20:33 2025 by rpki-client