Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/9B3FD9D2C18E11EF837CF725C4F9AE02.roa
File: 9B3FD9D2C18E11EF837CF725C4F9AE02.roa (raw, json)
Hash identifier: T8pN1fQRsM53LcwYRpi1oxrrg7t8ioozd5kHfEUOQF4=
Subject key identifier: 0A:94:EC:2C:B0:53:7F:1E:4A:09:D4:0D:3C:2D:D5:4D:B3:D3:F8:3E
Certificate issuer: /CN=A91E9FC0/serialNumber=666AEE20C9A8CB1F4312418F1E2057AA8A6BC4FB
Certificate serial: 038E
Authority key identifier: 66:6A:EE:20:C9:A8:CB:1F:43:12:41:8F:1E:20:57:AA:8A:6B:C4:FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmruIMmoyx9DEkGPHiBXqoprxPs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/9B3FD9D2C18E11EF837CF725C4F9AE02.roa
Signing time: Tue 24 Dec 2024 00:32:50 +0000
ROA not before: Tue 24 Dec 2024 00:32:50 +0000
ROA not after: Thu 01 May 2025 00:00:00 +0000
asID: 138352
IP address blocks: 103.180.10.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 910 (0x38e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E9FC0
Validity
Not Before: Dec 24 00:32:50 2024 GMT
Not After : May 1 00:00:00 2025 GMT
Subject: CN=676a0132-e6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:43:98:14:28:54:be:3e:43:33:6f:98:fa:
17:c7:f7:bd:48:8d:d8:88:aa:0f:76:1d:1a:81:85:
bb:2c:6f:ce:6d:fa:7e:cf:15:7b:d2:aa:ea:06:74:
10:11:32:c8:b9:d5:6a:61:e0:00:cd:2f:aa:64:32:
af:82:d4:dc:6c:fc:e4:fc:06:8a:34:68:8c:7c:d3:
74:28:c4:16:f8:9c:70:01:75:e3:9a:9b:9e:c7:9b:
8b:c4:89:fa:f2:1a:c7:9d:5d:39:19:6a:d2:d6:3e:
a4:04:14:48:c9:18:17:12:ff:05:c0:11:13:e3:de:
1d:7a:fe:3c:09:30:77:e9:8e:08:21:6c:05:a1:41:
b2:79:bd:7a:7a:eb:00:24:5a:cf:c2:dd:f1:09:6f:
52:9c:74:17:6c:96:08:6a:30:47:08:86:f7:e0:1e:
77:80:76:dd:4e:0c:fc:d0:88:f6:c4:ae:66:d0:e5:
aa:66:e0:e8:94:d6:8d:f5:44:a5:36:b2:f9:3d:95:
68:32:93:b6:5f:97:1b:7e:a1:0b:95:43:bd:6a:a5:
8b:61:22:fb:9c:f5:aa:70:27:39:b2:c7:83:6a:a4:
cb:af:60:34:ef:50:47:3a:f3:5e:79:43:a9:18:96:
62:f5:93:49:72:5f:c1:38:54:c0:29:a5:49:03:bd:
72:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:94:EC:2C:B0:53:7F:1E:4A:09:D4:0D:3C:2D:D5:4D:B3:D3:F8:3E
X509v3 Authority Key Identifier:
keyid:66:6A:EE:20:C9:A8:CB:1F:43:12:41:8F:1E:20:57:AA:8A:6B:C4:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/ZmruIMmoyx9DEkGPHiBXqoprxPs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmruIMmoyx9DEkGPHiBXqoprxPs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9FC0/0E45807C826C11ECBD398B58C4F9AE02/9B3FD9D2C18E11EF837CF725C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.10.0/24
Signature Algorithm: sha256WithRSAEncryption
92:60:ad:60:42:56:c3:18:59:89:c9:b4:9a:cb:20:c9:13:05:
14:8a:6c:e9:e9:70:94:f8:87:f6:64:dc:5f:fb:c9:a7:05:b0:
24:24:e0:f2:6c:25:d7:34:be:55:c2:a0:75:4b:15:09:8e:af:
20:68:c2:26:20:a2:26:84:1f:75:bb:93:ac:87:75:97:2a:8e:
bb:84:a2:6a:a2:41:a1:d5:37:5e:43:aa:e1:b5:bb:46:60:85:
52:6d:26:41:65:1a:8d:f0:1e:4c:30:d2:ae:3f:72:b5:b4:02:
90:1c:d5:4f:3c:e2:18:9f:be:ca:87:b7:1d:7d:43:46:c1:a4:
8e:21:23:bf:65:3e:c4:37:1f:48:e6:8c:9e:6b:cc:fa:70:39:
f0:3f:f7:23:3c:b8:75:ba:6c:34:4f:6e:d7:35:f2:df:31:17:
20:80:d7:8f:9e:98:f6:f2:4b:0b:05:b4:52:6c:af:ca:e0:98:
77:49:1c:85:15:e3:e4:6f:46:22:b6:d8:48:e3:04:9a:fc:ec:
d2:78:86:8f:6d:7f:4b:e2:e3:3e:66:5f:18:46:ec:28:02:c8:
d5:24:c1:ef:83:8f:5f:76:69:5b:03:46:d1:f1:99:44:da:bd:
18:e5:f7:90:b2:9f:e4:68:87:ee:cd:31:df:4b:51:4d:eb:5d:
16:05:73:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:22:42 2025 by rpki-client