Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/31AA8496B62811E7882B893BC4F9AE02.roa
File: 31AA8496B62811E7882B893BC4F9AE02.roa (raw, json)
Hash identifier: TzvQgcIEdDiZ2vx98Eai/8pokoL7PkZgm06lLl+dtq8=
Subject key identifier: 28:F0:82:1C:D2:33:8B:1A:A0:9A:E7:EA:BD:76:A8:41:61:93:6C:00
Certificate issuer: /CN=A91DE10F/serialNumber=343C82713761C58E82450D94AA57967DF9B46F15
Certificate serial: 1768
Authority key identifier: 34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/31AA8496B62811E7882B893BC4F9AE02.roa
Signing time: Fri 12 Jul 2024 17:24:38 +0000
ROA not before: Fri 12 Jul 2024 17:24:38 +0000
ROA not after: Sun 31 Aug 2025 00:00:00 +0000
asID: 136618
IP address blocks: 103.94.134.0/24 maxlen: 24
103.94.135.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5992 (0x1768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE10F
Validity
Not Before: Jul 12 17:24:38 2024 GMT
Not After : Aug 31 00:00:00 2025 GMT
Subject: CN=669166d5-9bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:17:13:ee:c4:0a:cb:6c:64:17:9c:31:cd:
45:d7:1b:0a:b4:40:6c:99:73:85:08:2e:df:8b:f2:
84:68:47:33:68:98:54:fc:9b:1c:b4:12:c9:f8:6b:
07:16:64:3b:3f:d7:61:22:41:be:84:30:28:5a:84:
04:5d:a0:47:54:7b:3b:46:ea:e7:bd:b5:ce:5d:e9:
6d:c9:b3:38:1d:72:77:33:95:a0:5e:98:fc:4d:47:
33:a4:6d:92:f2:6b:b4:45:64:7e:82:0f:04:9e:37:
95:82:42:81:78:ca:4d:94:a3:aa:80:1d:0f:d2:29:
a7:2f:89:55:e1:ff:e6:4b:c8:c6:fb:e3:51:35:40:
04:88:71:ca:0f:d4:df:55:49:45:7d:30:52:08:89:
d1:e0:31:87:a3:df:23:21:8f:43:48:57:f6:67:18:
97:0d:21:31:6c:39:7f:62:65:7a:4a:db:17:18:a2:
e2:ec:b1:25:90:c2:ac:86:af:b8:df:4e:59:20:12:
20:4f:08:67:7d:b1:58:13:ae:d7:55:7c:8c:4d:6c:
3d:70:93:c6:db:10:c7:12:8f:9f:db:aa:7b:c1:c6:
c0:59:4f:57:73:22:07:cf:4e:53:5b:d8:5a:62:89:
d4:17:f3:5a:fc:54:57:87:25:8e:4a:b2:25:a2:4f:
b5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F0:82:1C:D2:33:8B:1A:A0:9A:E7:EA:BD:76:A8:41:61:93:6C:00
X509v3 Authority Key Identifier:
keyid:34:3C:82:71:37:61:C5:8E:82:45:0D:94:AA:57:96:7D:F9:B4:6F:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/NDyCcTdhxY6CRQ2UqleWffm0bxU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NDyCcTdhxY6CRQ2UqleWffm0bxU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE10F/60EA5C2CB5D311E7B6A2DD5DC4F9AE02/31AA8496B62811E7882B893BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.94.134.0/23
Signature Algorithm: sha256WithRSAEncryption
51:ef:80:9d:64:63:13:ed:b0:99:2f:6c:6e:98:6d:aa:56:0d:
2a:c7:35:d4:21:ac:85:1e:26:b7:81:66:2c:db:fd:b1:ea:df:
ee:54:73:cc:7f:7a:b2:d1:f3:a3:dc:89:8b:97:bd:5d:47:8d:
b4:36:66:22:9d:ba:7d:6d:65:4a:0e:c8:41:6c:82:0e:60:ef:
fe:35:05:aa:88:4a:f4:3c:27:cc:9e:74:23:a8:d1:ea:4c:f1:
52:3e:dd:3d:f5:f5:cd:00:d3:e9:cd:c6:df:55:9a:15:a0:4a:
72:dc:a3:63:ce:71:cd:50:d8:16:2d:7e:59:2a:6c:01:7a:5a:
50:58:1d:9c:f5:50:ff:07:d9:8e:10:ec:4c:1b:a7:bb:ad:83:
c9:18:af:11:49:a2:5f:cb:e0:ad:db:f7:c8:e5:55:e9:b2:a3:
2e:3a:3e:db:f1:05:96:4e:e5:35:4a:e9:e1:5c:c0:b7:c5:eb:
0c:94:73:ce:92:5c:ce:31:20:f6:9d:71:08:95:7c:76:cd:2d:
34:e8:55:7e:65:81:0a:45:cf:18:2a:92:06:61:b3:13:7e:e0:
cb:80:02:bb:e3:b6:00:83:b8:a2:2a:5b:e5:0b:29:87:4b:07:
5b:51:2f:5e:28:ed:ca:b7:d3:8c:c5:6f:54:b8:de:0b:e7:3e:
c4:a1:57:04
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICF2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REUxMEYxMTAvBgNVBAUTKDM0M0M4MjcxMzc2MUM1OEU4MjQ1MEQ5NEFBNTc5NjdE
RjlCNDZGMTUwHhcNMjQwNzEyMTcyNDM4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjkxNjZkNS05YmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr9UXE+7ECstsZBecMc1F1xsKtEBsmXOFCC7fi/KEaEczaJhU/JsctBLJ+GsH
FmQ7P9dhIkG+hDAoWoQEXaBHVHs7RurnvbXOXeltybM4HXJ3M5WgXpj8TUczpG2S
8mu0RWR+gg8EnjeVgkKBeMpNlKOqgB0P0imnL4lV4f/mS8jG++NRNUAEiHHKD9Tf
VUlFfTBSCInR4DGHo98jIY9DSFf2ZxiXDSExbDl/YmV6StsXGKLi7LElkMKshq+4
305ZIBIgTwhnfbFYE67XVXyMTWw9cJPG2xDHEo+f26p7wcbAWU9XcyIHz05TW9ha
YonUF/Na/FRXhyWOSrIlok+15wIDAQABo4IClTCCApEwHQYDVR0OBBYEFCjwghzS
M4saoJrn6r12qEFhk2wAMB8GA1UdIwQYMBaAFDQ8gnE3YcWOgkUNlKpXln35tG8V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTEwRi82MEVBNUMyQ0I1
RDMxMUU3QjZBMkRENURDNEY5QUUwMi9ORHlDY1RkaHhZNkNSUTJVcWxlV2ZmbTBi
eFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL05EeUNjVGRoeFk2Q1JRMlVxbGVXZmZtMGJ4VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REUxMEYvNjBFQTVDMkNCNUQzMTFFN0I2QTJERDVEQzRGOUFFMDIvMzFBQTg0OTZC
NjI4MTFFNzg4MkI4OTNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnXoYwDQYJKoZIhvcNAQELBQADggEBAFHvgJ1kYxPtsJkv
bG6YbapWDSrHNdQhrIUeJreBZizb/bHq3+5Uc8x/erLR86PciYuXvV1HjbQ2ZiKd
un1tZUoOyEFsgg5g7/41BaqISvQ8J8yedCOo0epM8VI+3T319c0A0+nNxt9VmhWg
SnLco2POcc1Q2BYtflkqbAF6WlBYHZz1UP8H2Y4Q7Ewbp7utg8kYrxFJol/L4K3b
98jlVemyoy46PtvxBZZO5TVK6eFcwLfF6wyUc86SXM4xIPadcQiVfHbNLTToVX5l
gQpFzxgqkgZhsxN+4MuAArvjtgCDuKIqW+ULKYdLB1tRL14o7cq304zFb1S43gvn
PsShVwQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:02:51 2025 by rpki-client