Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/CE581B12D30711ED91B8F428C4F9AE02.roa
File: CE581B12D30711ED91B8F428C4F9AE02.roa (raw, json)
Hash identifier: IjGqzvS03douTNAH21RZM+Dh9PnB6VS/YcccsI7pmQc=
Subject key identifier: 26:57:98:E8:E2:F5:F9:B2:63:CB:02:DB:DD:4C:C0:E8:5D:F2:BF:E2
Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Certificate serial: 034B
Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/CE581B12D30711ED91B8F428C4F9AE02.roa
Signing time: Tue 04 Apr 2023 16:43:20 +0000
ROA not before: Tue 04 Apr 2023 16:43:20 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 211949
IP address blocks: 103.173.126.0/24 maxlen: 24
103.173.127.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 843 (0x34b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E83FE
Validity
Not Before: Apr 4 16:43:20 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=642c53a8-da4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:b8:09:aa:d0:d0:11:06:e1:1d:3b:58:65:
91:7f:08:5e:bd:db:74:d5:12:bf:f0:18:19:0d:ea:
72:03:e2:d6:53:55:71:5b:5c:55:cd:ab:fc:68:4a:
0f:4d:ad:ed:13:a9:6b:23:9d:20:08:d0:3f:19:72:
e4:e7:c6:95:5a:46:fd:f2:cc:15:52:c2:38:63:d6:
03:35:45:5d:e5:de:20:e1:eb:96:03:db:8d:5c:80:
cc:a3:ef:80:e6:fb:bd:6b:77:14:8f:84:fe:c5:ae:
eb:96:62:f0:f5:9e:5c:62:2f:de:74:9b:2b:85:49:
ab:f1:84:60:4e:c0:ec:bd:66:45:48:7a:7f:46:69:
2c:d0:a5:6f:ce:bb:e4:7b:3b:7b:6d:b9:21:91:af:
aa:38:40:92:a1:7f:56:c5:35:b9:86:64:32:7d:8a:
46:7d:6d:68:9b:76:96:c2:12:8f:01:11:4f:5b:49:
58:dd:93:90:8a:7e:d1:d9:e6:77:b0:75:b4:c8:5d:
e3:7d:79:ed:23:dc:7e:d3:bf:e5:ce:2a:dd:af:51:
cd:2f:92:d6:83:09:7e:8a:bf:b9:44:91:66:e0:8b:
38:67:48:38:16:04:9f:a0:c7:2c:33:d0:9e:86:58:
5e:1a:a6:34:26:38:52:35:ea:d6:76:fe:63:f4:07:
3e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:57:98:E8:E2:F5:F9:B2:63:CB:02:DB:DD:4C:C0:E8:5D:F2:BF:E2
X509v3 Authority Key Identifier:
keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/CE581B12D30711ED91B8F428C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.126.0/23
Signature Algorithm: sha256WithRSAEncryption
07:e6:d2:4c:76:d6:69:e1:21:5a:92:b3:b2:78:18:8d:63:76:
29:40:d1:69:6f:72:ca:cf:b3:de:21:4d:e2:5d:5f:cd:ef:ce:
b6:ea:0f:92:d4:f5:f4:22:51:d4:b8:5c:06:c0:d6:7f:5d:de:
36:9a:6c:12:dd:dc:86:03:bb:c3:34:7e:af:bf:58:d5:50:7a:
33:0d:c1:15:e4:11:45:30:77:a9:76:3c:e4:10:bd:ce:9a:c3:
94:29:54:74:a9:52:7b:ff:dd:7e:6e:a6:a2:56:5c:80:a8:fb:
da:7d:91:23:b6:64:8f:9b:71:e7:b2:4f:f0:9b:67:df:22:38:
d1:34:a8:36:e3:5a:0d:b9:35:44:c2:1c:a3:e9:45:52:9b:4c:
81:b4:7a:8d:46:5f:3e:49:ed:a2:f3:b9:a2:e0:b0:ff:86:11:
c3:ab:ea:97:e8:6f:1b:85:38:db:0a:31:b7:32:56:a1:83:e7:
81:5d:67:77:d3:9e:70:c8:10:88:ec:66:7f:de:77:08:19:ea:
c6:2e:94:36:a9:d5:44:2e:cb:5c:79:36:ca:26:9f:ec:96:df:
06:f9:21:eb:6b:5a:90:04:fb:e1:4c:7d:4f:4e:fe:3e:92:33:
fd:00:e7:5a:78:20:bb:13:1c:90:20:5f:a2:7d:d1:a3:2c:a3:
eb:b2:22:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:40:42 2025 by rpki-client