Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/2F74D644ABC711EF9CD3CE81C4F9AE02.roa
File: 2F74D644ABC711EF9CD3CE81C4F9AE02.roa (raw, json)
Hash identifier: GJE94mU6Sr8CoGwsF6tCrZgMYHj9w/NGptO5MRYqwuE=
Subject key identifier: 05:DD:25:23:6B:E7:5C:C6:C8:29:32:39:9C:84:5C:08:58:E1:8F:3F
Certificate issuer: /CN=A91E3814/serialNumber=9113A16869B7D01E789EE09FE26E6AFA37CF3E47
Certificate serial: 03E2
Authority key identifier: 91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/2F74D644ABC711EF9CD3CE81C4F9AE02.roa
Signing time: Tue 26 Nov 2024 07:22:26 +0000
ROA not before: Tue 26 Nov 2024 07:22:26 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 139820
IP address blocks: 103.148.92.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 994 (0x3e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E3814
Validity
Not Before: Nov 26 07:22:26 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=67457731-d9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:a8:b8:22:cd:49:64:3d:3b:9b:99:92:69:
e4:29:17:04:3f:4b:e5:32:f5:79:78:17:bf:20:32:
35:fc:ce:be:86:a8:47:e8:24:d6:5e:d3:f8:77:fa:
58:fd:2f:bd:dd:3a:3d:17:4b:9e:99:c9:fc:67:67:
45:28:bf:26:ba:8e:2f:5c:1e:49:45:16:0a:c3:56:
1d:0b:99:c9:b0:b2:9e:25:05:33:a6:b4:31:c7:89:
c7:06:fb:a6:52:fd:73:e9:da:02:97:0d:f7:17:6f:
50:bb:fd:2a:74:ca:bf:d9:cb:71:c8:0d:ee:b5:4e:
a4:fc:a7:db:be:d0:80:55:9c:a3:8b:82:1b:15:15:
83:a2:a4:57:07:0c:72:28:fd:cd:37:d9:70:ca:2d:
b2:f1:c6:27:73:fa:08:f2:08:b5:e6:6c:82:bc:ed:
1b:0f:d6:84:86:88:61:fb:5e:ca:83:41:6e:ab:ff:
97:0b:c5:ed:27:e0:d8:67:b6:f1:06:ac:22:25:fa:
92:d7:6a:7c:1f:ca:23:a3:17:db:45:e9:3b:a1:2e:
2f:d1:97:7b:83:fb:a2:d0:71:78:c1:67:ae:2e:e6:
f4:a9:5c:11:8b:c2:45:11:84:a0:94:e8:36:c8:20:
f6:b7:89:a4:0e:96:2d:7f:c7:53:c7:74:62:28:ca:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DD:25:23:6B:E7:5C:C6:C8:29:32:39:9C:84:5C:08:58:E1:8F:3F
X509v3 Authority Key Identifier:
keyid:91:13:A1:68:69:B7:D0:1E:78:9E:E0:9F:E2:6E:6A:FA:37:CF:3E:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/kROhaGm30B54nuCf4m5q-jfPPkc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kROhaGm30B54nuCf4m5q-jfPPkc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3814/2542B4225D7111EC9908914DC4F9AE02/2F74D644ABC711EF9CD3CE81C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.92.0/24
Signature Algorithm: sha256WithRSAEncryption
59:30:e6:9a:34:ce:d7:4c:a6:fa:08:b5:4c:43:8b:c5:27:3f:
d9:73:dd:80:80:8c:ca:da:97:c1:86:48:a1:6f:82:7e:d7:9f:
d1:fd:5e:fa:d3:45:f6:d8:77:f0:e3:c0:d7:36:df:93:d7:1c:
e5:c6:fe:aa:9e:37:e9:ca:39:73:9f:82:bd:d2:76:df:ef:75:
60:e2:3a:a7:84:51:7a:68:49:f6:2c:85:d6:a9:e3:06:a9:05:
10:af:30:24:c2:e9:cb:3b:cd:53:f8:4f:bf:17:2a:d3:75:ac:
07:3f:62:5c:94:5d:b5:cc:b4:20:5c:42:5f:9e:6f:1b:1e:54:
72:40:de:3b:b7:0c:80:85:0f:ce:3c:09:14:7f:63:a5:34:aa:
60:f8:c6:b1:01:22:f2:ad:62:ce:a6:36:9a:d8:56:f3:18:f4:
d0:b5:5f:65:a9:e8:c1:04:17:56:48:3f:d7:ca:42:a8:95:0a:
20:45:d0:8d:bf:57:5b:83:59:89:7d:7b:84:40:06:90:57:a7:
72:ea:d7:6c:2b:0a:5f:ed:3e:6b:35:8a:0a:c0:44:f2:e8:04:
51:1d:39:4c:31:60:da:9e:01:f1:ad:2d:40:f6:1d:8a:1f:e9:
c0:3a:99:4f:5e:a8:80:b7:51:63:5b:4c:d3:e8:9e:d2:1d:3b:
a8:fd:e4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:03 2025 by rpki-client