Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/E184C6F48F2C11EEA361B22FC4F9AE02.roa
File: E184C6F48F2C11EEA361B22FC4F9AE02.roa (raw, json)
Hash identifier: m7hFb23btwRa7iUoc5sSfQwuK6EzzQbsJrT19RdsUzA=
Subject key identifier: 55:8E:66:D2:94:C3:0C:06:E5:09:A0:67:58:07:59:D0:2B:03:5A:F8
Certificate issuer: /CN=A91DEB81/serialNumber=7776612A43C22D0A66B8F13680B3058BED5D9892
Certificate serial: 03F2
Authority key identifier: 77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/E184C6F48F2C11EEA361B22FC4F9AE02.roa
Signing time: Sun 15 Dec 2024 00:33:30 +0000
ROA not before: Sun 15 Dec 2024 00:33:30 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 212921
IP address blocks: 103.254.72.0/24 maxlen: 24
103.254.75.0/24 maxlen: 24
192.197.113.0/24 maxlen: 24
199.212.57.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1010 (0x3f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB81
Validity
Not Before: Dec 15 00:33:30 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=675e23d9-034d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:a4:d4:e2:62:aa:86:5b:a5:82:67:c8:77:
fb:06:97:ee:41:ec:91:97:05:b8:c1:83:fd:f9:d7:
3e:14:d8:63:9f:6f:44:2f:ed:d4:6d:41:e8:53:5b:
aa:8f:b0:4e:ac:0b:68:df:ef:73:6b:a8:7f:7e:1e:
9b:f4:d3:58:eb:ef:11:2e:9d:97:eb:fb:d5:c1:31:
f4:54:67:2a:bf:6a:45:df:b5:de:29:eb:88:64:7c:
a4:d7:eb:26:04:a5:42:ce:68:e8:76:fe:13:46:47:
08:0e:93:30:65:ad:b8:6d:86:56:b7:f9:d8:a9:b1:
35:da:62:8c:d4:aa:40:77:a9:23:eb:3f:c1:30:ab:
2b:65:b4:b8:25:e2:19:38:41:99:14:9c:55:2e:44:
e3:0c:d3:5f:39:cc:af:cf:76:78:ee:78:0a:ab:1d:
2e:7f:67:2a:19:96:99:6a:6e:74:17:62:6c:c2:39:
0f:80:de:17:47:c2:b8:ba:a6:bc:a4:52:46:37:86:
3c:be:f1:97:4b:a3:fd:78:8c:c8:dc:b7:3e:48:62:
4f:38:d0:7e:ff:79:c1:85:65:95:5b:0f:e3:bd:1f:
0e:db:b9:a1:f4:d1:54:e5:30:03:87:d1:ab:25:42:
7b:cf:a5:4b:ee:80:16:94:4b:e2:8f:5d:2c:b9:71:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:8E:66:D2:94:C3:0C:06:E5:09:A0:67:58:07:59:D0:2B:03:5A:F8
X509v3 Authority Key Identifier:
keyid:77:76:61:2A:43:C2:2D:0A:66:B8:F1:36:80:B3:05:8B:ED:5D:98:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d3ZhKkPCLQpmuPE2gLMFi-1dmJI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB81/CF9663C670F711ECB318E43AC4F9AE02/E184C6F48F2C11EEA361B22FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.254.72.0/24
103.254.75.0/24
192.197.113.0/24
199.212.57.0/24
Signature Algorithm: sha256WithRSAEncryption
78:2b:8a:ae:78:41:59:c9:26:26:80:43:ef:8d:a5:21:62:94:
ff:43:0f:52:63:30:53:45:44:eb:c9:7b:a2:d0:cf:66:23:b0:
94:f8:3c:e3:55:85:bd:e6:91:87:2e:62:26:ba:31:75:07:2e:
35:49:3c:0d:a5:52:36:f4:b0:f4:29:04:82:9f:65:e6:b0:09:
3a:e2:03:2b:f7:28:89:86:0e:7c:74:57:a1:c6:b6:3a:ee:cd:
f7:42:7a:4b:7e:ee:99:c3:34:74:bc:50:ed:4d:48:e5:9b:bf:
76:d0:8b:b3:06:c3:f0:2b:ee:16:0a:fd:f2:91:9a:a7:be:7e:
8b:ce:e9:ae:fb:61:da:19:1a:5a:08:cc:f1:ac:fd:97:4b:c1:
c2:69:dc:29:f1:64:ec:eb:ca:b8:05:9e:a7:2f:cb:61:81:a1:
37:86:76:db:e0:db:43:85:2e:c6:b3:e2:c4:a3:f6:42:7b:ea:
76:d7:e8:79:fc:94:99:6b:77:c5:4a:44:52:1b:b5:bb:9f:e8:
c5:89:ec:d4:ff:d5:3f:d1:0c:27:6b:70:6d:d4:9d:ef:85:e9:
d6:59:7a:c9:b0:9d:65:09:f1:be:1a:79:d3:94:ea:68:16:55:
97:60:41:d4:1f:9d:69:76:cf:f6:4f:06:7e:89:16:31:18:15:
1a:a6:cf:17
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICA/IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVCODExMTAvBgNVBAUTKDc3NzY2MTJBNDNDMjJEMEE2NkI4RjEzNjgwQjMwNThC
RUQ1RDk4OTIwHhcNMjQxMjE1MDAzMzMwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzVlMjNkOS0wMzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0qek1OJiqoZbpYJnyHf7BpfuQeyRlwW4wYP9+dc+FNhjn29EL+3UbUHoU1uq
j7BOrAto3+9za6h/fh6b9NNY6+8RLp2X6/vVwTH0VGcqv2pF37XeKeuIZHyk1+sm
BKVCzmjodv4TRkcIDpMwZa24bYZWt/nYqbE12mKM1KpAd6kj6z/BMKsrZbS4JeIZ
OEGZFJxVLkTjDNNfOcyvz3Z47ngKqx0uf2cqGZaZam50F2JswjkPgN4XR8K4uqa8
pFJGN4Y8vvGXS6P9eIzI3Lc+SGJPONB+/3nBhWWVWw/jvR8O27mh9NFU5TADh9Gr
JUJ7z6VL7oAWlEvij10suXHQ8QIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFFWOZtKU
wwwG5QmgZ1gHWdArA1r4MB8GA1UdIwQYMBaAFHd2YSpDwi0KZrjxNoCzBYvtXZiS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUI4MS9DRjk2NjNDNjcw
RjcxMUVDQjMxOEU0M0FDNEY5QUUwMi9kM1poS2tQQ0xRcG11UEUyZ0xNRmktMWRt
SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2QzWmhLa1BDTFFwbXVQRTJnTE1GaS0xZG1KSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REVCODEvQ0Y5NjYzQzY3MEY3MTFFQ0IzMThFNDNBQzRGOUFFMDIvRTE4NEM2RjQ4
RjJDMTFFRUEzNjFCMjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBABn/kgDBABn/ksDBADAxXEDBADH1DkwDQYJKoZIhvcNAQEL
BQADggEBAHgriq54QVnJJiaAQ++NpSFilP9DD1JjMFNFROvJe6LQz2YjsJT4PONV
hb3mkYcuYia6MXUHLjVJPA2lUjb0sPQpBIKfZeawCTriAyv3KImGDnx0V6HGtjru
zfdCekt+7pnDNHS8UO1NSOWbv3bQi7MGw/Ar7hYK/fKRmqe+fovO6a77YdoZGloI
zPGs/ZdLwcJp3CnxZOzryrgFnqcvy2GBoTeGdtvg20OFLsaz4sSj9kJ76nbX6Hn8
lJlrd8VKRFIbtbuf6MWJ7NT/1T/RDCdrcG3Une+F6dZZesmwnWUJ8b4aedOU6mgW
VZdgQdQfnWl2z/ZPBn6JFjEYFRqmzxc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:18:20 2025 by rpki-client