Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/E8137EDEA29011EAA7A47878C4F9AE02.roa
File: E8137EDEA29011EAA7A47878C4F9AE02.roa (raw, json)
Hash identifier: eb8Dxmgs1pJ56B+p/g4fWelI2bfJeXR9VvaW0O1EVCY=
Subject key identifier: A2:3A:56:91:EC:E0:17:19:60:9C:53:C5:78:C4:51:EA:94:32:A2:A1
Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026
Certificate serial: 09CD
Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/E8137EDEA29011EAA7A47878C4F9AE02.roa
Signing time: Wed 12 Feb 2025 20:58:31 +0000
ROA not before: Wed 12 Feb 2025 20:58:31 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 213347
IP address blocks: 103.207.70.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2509 (0x9cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7E45
Validity
Not Before: Feb 12 20:58:31 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67ad0b76-015e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:ca:ee:c7:81:45:71:5d:cb:e4:2e:ce:0f:
4e:3b:e6:9b:0b:c4:b3:60:4c:e1:60:af:b5:7d:4c:
9b:bc:35:ca:93:fc:24:82:df:47:19:71:a5:b9:3e:
74:19:af:fa:e5:f1:6b:8a:96:6c:09:45:2a:e3:f7:
a3:19:82:11:95:87:75:62:6d:44:7f:14:25:ca:dd:
9f:62:01:5a:6c:0d:c2:ca:6d:d5:b9:55:09:ba:91:
39:04:9c:a6:fa:dc:94:22:fc:3f:f8:39:ae:33:30:
3d:29:0f:e6:ae:63:9c:96:c6:2e:a9:f7:e5:2c:56:
86:f0:82:a3:55:30:4d:3a:0f:99:1c:b6:ce:8e:4d:
d8:9a:cb:67:20:a8:6d:89:3a:7e:90:47:34:85:15:
c1:d3:a3:d4:e2:85:12:03:d1:e4:e8:e4:e5:5b:b4:
9e:3e:ce:10:4b:96:a0:52:45:cd:61:10:01:32:95:
fe:20:14:d4:4b:93:60:06:e8:16:f3:ae:d7:b9:b1:
29:25:55:fe:84:15:14:2b:5e:ef:87:a8:c2:ef:bf:
61:22:31:2d:ee:9f:47:32:00:4c:50:d7:e5:2c:99:
e5:03:15:8c:f5:98:5a:25:9b:4d:37:7a:21:39:bf:
00:3e:28:fa:18:7c:98:f8:86:1d:79:fb:8c:9f:9a:
4c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3A:56:91:EC:E0:17:19:60:9C:53:C5:78:C4:51:EA:94:32:A2:A1
X509v3 Authority Key Identifier:
keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/E8137EDEA29011EAA7A47878C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.207.70.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:3e:e9:79:86:ee:7c:b9:7a:11:24:17:51:cd:0a:6a:e9:d9:
e3:8b:23:9f:92:27:e8:17:95:9f:c5:57:55:f0:5f:64:32:f5:
7e:a2:d7:0a:42:83:37:e7:a2:15:42:64:80:1d:2c:fa:1c:ad:
62:d2:ba:0c:46:b9:c2:44:5b:54:00:13:ca:d3:14:8d:19:04:
0e:61:26:62:e5:a7:5f:cb:3a:a9:04:19:fa:f2:df:d4:81:80:
ec:4e:3d:87:5f:7e:1f:ef:9c:01:ea:a2:0a:65:b0:38:9d:4f:
17:2b:54:52:59:9e:f3:11:c1:41:12:a2:14:7e:5d:1d:24:d9:
63:20:32:be:2e:b5:ea:8d:93:6d:e7:dd:8b:1b:a2:1f:f7:25:
1c:6c:3f:62:d9:a4:15:57:fe:3e:99:86:d5:b9:48:91:a4:72:
1c:c1:36:ce:b4:44:f6:e5:a7:bc:c3:b9:ba:45:e8:7d:92:2d:
75:20:6c:a3:d5:8a:ac:db:d5:b5:43:3c:90:aa:d1:e2:58:49:
07:1a:19:4b:7d:36:77:9e:2c:01:54:fb:08:93:7c:f3:aa:38:
4c:03:47:63:d4:b0:6c:73:4f:36:f4:1a:3f:e2:ca:88:60:8c:
d9:14:a2:b1:03:81:58:47:d8:cb:a0:ff:20:ec:bc:c1:36:de:
9b:80:c0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:00:35 2025 by rpki-client