Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DEBDCECAC2CF11EFA805380FC4F9AE02.roa
File: DEBDCECAC2CF11EFA805380FC4F9AE02.roa (raw, json)
Hash identifier: eaNFZvdgLDMBAG06T+DPbwJUZEPPcKT9xtvEgKy6kbA=
Subject key identifier: 29:94:58:64:45:05:1D:68:07:0F:3A:75:97:69:79:2A:B0:C4:FB:E9
Certificate issuer: /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial: 042A
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DEBDCECAC2CF11EFA805380FC4F9AE02.roa
Signing time: Wed 25 Dec 2024 14:52:32 +0000
ROA not before: Wed 25 Dec 2024 14:52:32 +0000
ROA not after: Tue 30 Sep 2025 00:00:00 +0000
asID: 135046
IP address blocks: 103.152.116.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1066 (0x42a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EEE06
Validity
Not Before: Dec 25 14:52:32 2024 GMT
Not After : Sep 30 00:00:00 2025 GMT
Subject: CN=676c1c30-dffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:9f:e8:d1:e2:b2:39:b2:1b:30:2c:a8:00:
6e:ee:ff:d8:13:c3:a1:5b:8d:97:37:70:cd:30:10:
b0:cf:d1:6f:cc:92:b3:a2:88:99:73:7f:9d:44:9d:
a6:ce:6a:69:e0:5e:31:1a:91:a4:51:ac:99:b2:41:
fa:2f:2d:7e:f2:79:39:b9:dd:ff:ce:a1:41:2b:9b:
07:82:af:93:54:51:cb:e2:a2:c7:7a:89:86:c4:31:
46:28:8d:57:f0:82:8d:99:0f:2b:62:93:3b:6a:07:
25:27:fe:0d:9a:6d:34:c9:39:6a:b8:fb:f8:d7:79:
9b:78:64:40:c0:3d:89:16:8f:dd:ab:77:69:51:ea:
38:5c:ba:17:68:06:d5:34:14:a1:3a:4f:99:dc:5f:
aa:33:0f:d8:b5:2c:e2:89:c3:4c:49:70:ee:c6:25:
1e:7f:2e:09:ab:f5:96:67:b8:e6:b4:98:1d:b0:24:
51:cb:29:a0:97:40:50:71:bf:0e:7e:c4:f6:14:e7:
21:6a:5a:73:0b:4e:ee:fc:ea:ff:34:fe:ea:9d:e1:
95:25:42:da:a6:40:fb:2f:cf:e2:fc:54:c7:7c:08:
b5:a7:df:ee:bb:14:65:88:ce:02:1d:06:6e:bd:18:
d0:d2:2b:9c:fe:f7:0d:93:79:2f:9f:99:cb:35:30:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:94:58:64:45:05:1D:68:07:0F:3A:75:97:69:79:2A:B0:C4:FB:E9
X509v3 Authority Key Identifier:
keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/DEBDCECAC2CF11EFA805380FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.116.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a4:cd:cc:83:34:a0:35:9b:45:6b:7d:12:87:90:16:3a:5c:
8b:8d:f5:f5:c4:a0:7f:7d:04:48:57:c1:7d:9c:42:36:f4:66:
35:3a:b5:b8:7b:7f:03:dd:41:89:42:d5:5c:b3:85:7c:82:3e:
6e:69:c0:ff:ed:b9:db:4f:5e:b6:78:4d:05:75:8b:cc:6f:b7:
b6:df:f3:af:79:ce:37:76:ba:27:86:5e:7c:47:dc:01:8e:66:
e8:45:de:63:d1:e9:89:aa:41:9b:ca:d6:54:2c:a8:43:a4:68:
08:20:b2:09:b1:32:8c:41:0a:4d:25:57:5c:dc:71:43:61:11:
85:25:48:4c:3e:21:18:2d:fd:a5:6f:3a:30:09:6d:6e:29:68:
ab:35:ec:8e:04:c3:83:eb:e2:fd:4a:bd:f1:ef:19:eb:84:57:
ee:bb:85:1a:eb:b1:fd:2d:ee:a5:26:f2:f3:76:2e:8a:9d:b9:
23:fc:77:54:fe:ba:00:80:23:e3:d9:82:71:74:d4:e8:26:ba:
f3:c8:c2:3d:d2:e5:d8:9f:82:3c:58:3c:63:68:61:4f:66:d0:
5b:53:ae:fe:22:0e:f0:08:3e:6f:75:ad:12:66:1c:aa:b0:f4:
96:22:f2:94:a8:7f:36:ec:1e:b4:a3:9f:94:58:7c:95:3e:d2:
4f:10:d0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:40:39 2025 by rpki-client