Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DEDE6B3CC8A911EFB805FB63C4F9AE02.roa
File: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (raw, json)
Hash identifier: vEfRiQNE3h/B834WLq9GOeXPVajCjfh3DLWpODG+4Jw=
Subject key identifier: 74:33:41:B5:4B:AE:AE:3C:0C:C2:C6:78:AA:7C:B9:F7:1F:8E:06:A5
Certificate issuer: /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Certificate serial: 02
Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DEDE6B3CC8A911EFB805FB63C4F9AE02.roa
Signing time: Thu 02 Jan 2025 01:35:39 +0000
ROA not before: Thu 02 Jan 2025 01:35:39 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 58689
IP address blocks: 103.141.174.0/23 maxlen: 23
103.141.174.0/24 maxlen: 24
103.141.175.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D72CC
Validity
Not Before: Jan 2 01:35:39 2025 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=6775ed6a-12fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:21:a4:df:45:eb:83:15:3f:d1:79:c5:90:
1c:04:b0:51:38:91:5e:6f:af:ee:21:83:cf:94:12:
69:e0:d9:ff:56:07:0c:18:a7:47:56:56:b0:41:6d:
99:81:37:d1:8a:45:71:2a:5b:7e:88:b4:28:57:13:
c5:2b:58:a1:5d:79:da:54:0d:fd:b4:d0:c9:e7:9b:
75:69:44:8a:20:69:74:dd:68:2e:22:b0:b9:34:07:
5b:46:8a:60:83:f6:90:ff:9f:e6:2e:c8:ac:48:a3:
e4:dc:6a:68:21:db:37:47:0b:c8:e1:2e:cc:5f:ff:
aa:c5:74:61:f5:84:88:23:51:10:bc:46:62:21:0d:
20:de:6b:16:2a:05:a1:25:5c:ab:1b:34:94:a6:83:
15:4a:e5:63:78:ec:00:22:ab:5d:6e:2c:7d:e7:14:
ee:cc:16:e6:50:bb:a0:73:b3:76:b3:d9:7b:c5:f1:
b5:9e:7e:c5:d6:f9:a7:b8:a6:85:a2:46:33:d7:49:
50:cd:47:a9:b8:37:a7:63:03:c7:15:d0:65:2a:46:
a5:3c:8f:6b:dd:86:1c:cc:ae:52:36:40:57:61:13:
85:f8:60:5a:ba:5a:1a:f7:f5:18:bb:43:fe:85:1d:
d3:e3:48:36:5c:88:54:df:6b:56:f3:51:8a:28:0d:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:33:41:B5:4B:AE:AE:3C:0C:C2:C6:78:AA:7C:B9:F7:1F:8E:06:A5
X509v3 Authority Key Identifier:
keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DEDE6B3CC8A911EFB805FB63C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.141.174.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:9e:83:08:73:ae:23:d2:00:33:af:db:60:4e:cf:d7:de:97:
51:3e:b6:8e:d8:7d:73:63:de:74:4b:39:f1:0d:11:82:9d:8f:
34:95:63:78:fb:cb:c4:c4:61:53:dc:8e:18:39:da:9a:6a:9e:
d9:57:04:ab:33:64:a4:9c:fe:10:e0:a8:88:6e:9b:51:59:c2:
f9:2c:0e:74:77:b3:14:d0:e0:4f:8b:78:2d:e9:cd:11:cc:35:
a1:78:43:ab:f2:bc:a6:6a:29:97:95:57:40:62:fd:28:b4:64:
c5:0e:45:13:a0:d4:0e:d5:27:8c:ee:0b:a8:86:fa:1f:5e:39:
3c:f4:db:0b:d1:73:04:75:76:e2:48:71:c8:16:fc:d6:c0:c3:
08:e9:6c:0c:03:33:a0:f3:fb:43:85:ca:25:8e:bb:65:80:19:
79:34:8e:5b:18:2e:c6:e9:cd:b1:9b:c4:a9:66:07:d7:d4:b4:
b6:60:cb:51:86:fd:cb:21:ec:68:94:df:36:c7:b4:9e:e3:a6:
4d:8a:ee:0f:6d:c0:e3:13:a9:b8:1c:1a:94:99:e6:b9:17:cf:
54:17:53:08:b6:a5:a7:f5:b0:bc:80:1b:b6:15:cb:96:9b:2a:
81:ab:4f:03:dd:df:3c:a3:a0:54:23:24:83:c2:d0:fe:e1:b9:
11:ba:00:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:15:39 2025 by rpki-client