Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/B9D90E00606311EE8844F941C4F9AE02.roa
File: B9D90E00606311EE8844F941C4F9AE02.roa (raw, json)
Hash identifier: X2R7fBr7byP7M3KR3cBhw+xawX2t49iSaQy5emSoxD4=
Subject key identifier: D4:47:ED:CC:A6:2F:BB:BB:9A:6E:4B:79:E6:53:09:09:36:FB:EE:FE
Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Certificate serial: 048F
Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/B9D90E00606311EE8844F941C4F9AE02.roa
Signing time: Thu 28 Nov 2024 23:43:11 +0000
ROA not before: Thu 28 Nov 2024 23:43:11 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 211949
IP address blocks: 103.173.126.0/24 maxlen: 24
103.173.127.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1167 (0x48f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E83FE
Validity
Not Before: Nov 28 23:43:11 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6749000f-2061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7b:c2:31:1e:48:14:91:e5:1c:90:d9:62:b2:
1f:2a:d5:cb:c4:b3:55:b5:1b:53:30:a2:26:7f:4d:
0e:29:ec:90:84:fd:2e:78:30:a7:0a:d0:b8:df:a1:
04:08:3d:8d:7d:dc:37:62:61:c7:ef:1c:43:6e:67:
d6:2a:f7:03:97:23:89:8e:a5:29:3a:30:55:8c:e7:
3d:38:40:7e:78:f1:a8:94:6c:52:9d:21:2c:71:bd:
06:c5:21:e7:ec:7b:97:e7:91:4b:21:2a:4b:0a:6b:
75:c9:74:37:fa:e2:d8:9b:ea:db:8f:68:4e:fa:7b:
72:0a:b4:7e:81:ca:ee:78:e3:e3:e5:81:33:68:53:
68:fb:cc:5f:b6:20:11:9d:a2:af:da:a6:37:8e:a7:
4d:f0:99:02:9d:1a:8a:42:52:e8:3a:6b:0a:df:0a:
00:4c:31:7c:c6:27:29:5b:91:3a:c2:43:b4:12:52:
71:49:2d:0b:1a:70:70:98:d8:f2:54:7f:d4:bb:0f:
ac:eb:02:43:86:f0:00:54:65:6b:94:dd:59:04:b2:
7f:c9:af:3a:83:9b:44:93:62:43:d6:eb:5a:d1:fc:
e7:07:10:c1:51:2c:0d:83:17:94:d2:0b:dd:75:c6:
a0:d7:7c:dd:e3:bb:0e:3f:93:cc:f3:78:54:ac:84:
ad:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:47:ED:CC:A6:2F:BB:BB:9A:6E:4B:79:E6:53:09:09:36:FB:EE:FE
X509v3 Authority Key Identifier:
keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/B9D90E00606311EE8844F941C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.126.0/23
Signature Algorithm: sha256WithRSAEncryption
16:87:45:7f:d4:c1:19:4a:cd:22:47:7b:55:bd:02:a1:e3:76:
6b:38:21:14:0e:10:5b:d9:c6:a8:92:e9:1e:9c:67:b2:12:9e:
5f:d7:aa:4a:74:18:78:a5:2f:14:4a:17:11:4e:91:07:cf:6d:
e0:64:0f:f4:f0:8b:02:9c:52:b0:9b:a5:a8:b5:f0:f7:30:fd:
1d:0f:00:1e:5d:e2:b0:f7:92:b7:40:60:cf:a3:c6:41:a3:65:
a6:e0:3c:49:8c:b8:22:27:d0:7e:de:41:24:b7:fc:49:78:8f:
96:53:a5:e8:61:15:10:35:f2:a2:88:3c:d1:5a:7a:e0:2d:17:
e3:5d:03:0f:74:f6:9c:d1:86:c4:44:c4:ae:75:c2:65:8c:c5:
ca:e6:b8:37:10:b1:fe:8e:dc:32:fc:e3:dc:c0:fe:ea:7d:c2:
43:f9:c3:2a:b5:07:31:94:10:a0:5d:89:a9:3a:48:1b:a3:05:
6a:b4:0b:cb:b1:a9:1a:5b:6f:55:bb:52:a8:8f:1a:4a:7d:db:
7a:fb:88:dd:23:22:63:b8:d1:14:8f:09:9d:39:b1:4f:35:1b:
4c:c6:2d:45:f8:3d:96:0f:92:e2:7c:36:cd:6c:a4:1a:a3:43:
0d:ce:02:a1:52:c7:ed:39:97:46:b1:a4:4b:a5:c1:ab:39:a6:
dd:31:5a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:47:54 2025 by rpki-client