Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/EFFA034837D111EC9337B812C4F9AE02.roa
File: EFFA034837D111EC9337B812C4F9AE02.roa (raw, json)
Hash identifier: GRUpCE+gVb2TzuJuLp6/bFNygGmQWG7Yo+BJcqN3ABA=
Subject key identifier: 62:B6:39:FA:35:D5:4D:BF:26:D2:E4:66:5F:AA:9C:67:86:8E:7B:12
Certificate issuer: /CN=A91E5D0C/serialNumber=3E73B2BE13037BE744391D3A899CDD202B82F76D
Certificate serial: 046A
Authority key identifier: 3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/EFFA034837D111EC9337B812C4F9AE02.roa
Signing time: Tue 03 Dec 2024 00:14:38 +0000
ROA not before: Tue 03 Dec 2024 00:14:38 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 58715
IP address blocks: 103.174.45.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1130 (0x46a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E5D0C
Validity
Not Before: Dec 3 00:14:38 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=674e4d6e-c0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:c1:50:a2:63:4d:06:f2:32:39:4d:97:03:
6d:37:ba:7a:40:d5:d7:93:b3:7d:72:45:8f:83:54:
c2:f4:92:0d:a2:c3:ad:be:20:cc:15:aa:ab:2e:54:
3b:33:4a:e9:48:6c:f3:1c:fa:1c:45:68:a8:56:ba:
3e:2e:ae:42:e3:d5:09:7e:a6:a2:de:ce:de:5f:64:
6c:7e:c2:5b:a1:3d:f6:ab:5e:12:a7:cc:59:4f:ce:
4a:61:9e:1f:c5:53:84:e3:fd:06:5d:34:e1:45:8d:
aa:65:46:74:24:7b:09:e4:41:40:23:b9:31:6c:c0:
53:41:dd:f9:05:4d:84:ca:34:1a:6a:02:a9:51:e4:
8b:44:17:b2:21:5f:09:87:d1:66:5f:93:38:f8:0e:
48:d7:81:de:2a:67:7f:75:e2:c3:bd:05:d6:82:ba:
ae:77:f4:c9:1a:0a:d8:95:da:67:b1:91:f3:33:33:
78:60:4d:d4:49:14:46:ba:93:bc:cc:5a:1e:40:24:
54:8b:f8:6b:53:f7:ad:17:9f:32:6a:20:d2:6e:99:
97:91:fc:0f:bf:eb:84:c4:34:78:dc:24:55:3a:58:
cf:6f:8b:05:4c:0d:fa:91:0e:c1:34:c3:a3:ab:cb:
c7:54:03:99:06:47:f3:24:c9:b7:0a:71:a8:66:15:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B6:39:FA:35:D5:4D:BF:26:D2:E4:66:5F:AA:9C:67:86:8E:7B:12
X509v3 Authority Key Identifier:
keyid:3E:73:B2:BE:13:03:7B:E7:44:39:1D:3A:89:9C:DD:20:2B:82:F7:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/PnOyvhMDe-dEOR06iZzdICuC920.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PnOyvhMDe-dEOR06iZzdICuC920.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D0C/891B4ECA323611EC89838756C4F9AE02/EFFA034837D111EC9337B812C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.45.0/24
Signature Algorithm: sha256WithRSAEncryption
83:d9:54:d9:28:6b:05:c9:79:d4:e7:c4:02:88:c9:ac:0f:f4:
2d:4f:97:01:d7:4c:98:54:4f:25:df:c8:b9:e2:f7:03:a6:ed:
35:14:86:aa:8a:80:0c:59:61:4e:07:9e:22:d2:9a:a5:f7:f6:
95:86:9b:7f:39:f7:b7:cf:6e:10:5f:b9:ca:00:92:e7:e1:11:
bc:7a:a3:73:13:be:c7:c0:c8:81:b6:f7:52:40:4c:8d:92:5c:
33:33:99:7f:f8:50:b7:35:c2:cd:8e:50:ec:82:82:d0:49:bb:
43:74:36:7f:ab:36:c1:f5:15:39:36:3a:23:49:b2:46:29:89:
9e:07:b4:9c:2b:73:d9:ff:cc:dd:97:47:28:39:8a:99:c7:7c:
49:1a:7c:fa:85:11:24:2a:c6:5f:d9:77:ed:24:8f:9f:f1:43:
e3:7d:bb:8a:90:2c:11:ec:81:be:e0:14:8e:68:b6:33:41:44:
6b:3e:01:d6:f8:cf:02:0b:8d:52:cb:5a:68:4e:4d:f4:57:1e:
ef:9f:cc:53:bf:20:32:0d:71:86:5d:34:e1:87:c5:82:37:d6:
7e:1e:d1:37:4d:d5:60:08:a8:25:9f:ef:7b:3b:6b:95:ea:ef:
9e:47:13:02:2f:f7:9d:7a:65:20:1e:8c:30:c4:ba:09:bf:5e:
36:81:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:02:48 2025 by rpki-client