Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/DDFEB10C385E11EB8E85F467C4F9AE02.roa
File: DDFEB10C385E11EB8E85F467C4F9AE02.roa (raw, json)
Hash identifier: vYc0h4qvjuE88FDf7yqk3rmrIjWt9VABoOzgwIDoM5I=
Subject key identifier: DF:8A:A5:A6:E1:27:F4:CC:BF:E1:91:AC:57:27:11:03:B2:39:0D:40
Certificate issuer: /CN=A91F1AF5/serialNumber=81433A63C2D75D0032552C426C43533ECAC83515
Certificate serial: 06B9
Authority key identifier: 81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/DDFEB10C385E11EB8E85F467C4F9AE02.roa
Signing time: Wed 06 Nov 2024 21:40:49 +0000
ROA not before: Wed 06 Nov 2024 21:40:49 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 139818
IP address blocks: 103.159.110.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1721 (0x6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F1AF5
Validity
Not Before: Nov 6 21:40:49 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=672be261-707e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bc:d3:00:7b:f7:4d:53:2f:d9:30:13:c0:55:
1e:6b:7a:b8:02:d3:a1:07:3f:95:ee:ea:91:fc:79:
18:2c:9a:85:ae:30:47:0e:ee:34:8b:b2:c3:58:cf:
b8:12:4d:1f:59:a6:20:83:45:e8:a5:2c:f4:1c:27:
64:37:f0:ce:5f:c8:f1:e1:fe:cf:81:1d:dd:e0:f0:
87:a5:9d:dc:61:31:22:5e:15:ab:da:d6:ad:0e:07:
62:ca:7b:b8:29:61:56:71:e8:93:ca:a1:9f:af:70:
be:8a:29:c5:7e:1b:ff:e0:a6:c9:c8:1e:f1:cb:b5:
11:dc:81:3b:ea:de:26:81:c3:40:d0:da:88:eb:f9:
e5:77:54:7d:71:9a:ee:d9:51:5d:90:e4:91:7b:c1:
b1:60:68:f5:39:2a:03:4d:46:44:7e:41:85:2d:82:
90:7a:1e:eb:6b:f9:87:6d:cf:9a:4b:19:fe:18:7d:
bf:a1:1e:b1:14:95:e1:45:03:fc:bf:6d:eb:b6:ba:
cb:42:78:b3:f7:49:35:d6:d0:ac:26:ea:23:c3:a1:
44:ef:68:c4:ba:9a:7b:51:98:f4:d7:df:6e:a6:0c:
ce:41:7f:f5:b7:64:e9:92:16:da:11:5c:51:3e:69:
72:d7:1a:08:00:cf:fe:ac:f9:a1:31:c0:de:ab:20:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:8A:A5:A6:E1:27:F4:CC:BF:E1:91:AC:57:27:11:03:B2:39:0D:40
X509v3 Authority Key Identifier:
keyid:81:43:3A:63:C2:D7:5D:00:32:55:2C:42:6C:43:53:3E:CA:C8:35:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/gUM6Y8LXXQAyVSxCbENTPsrINRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gUM6Y8LXXQAyVSxCbENTPsrINRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1AF5/1510FB5C385D11EBBCB20463C4F9AE02/DDFEB10C385E11EB8E85F467C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.110.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0b:1a:0c:b7:31:9a:42:71:96:18:14:6c:45:1b:9d:56:83:
39:14:f1:62:3f:35:bd:fa:f8:5a:7f:43:67:81:3b:09:81:52:
87:b2:5b:f5:cb:35:90:92:40:5f:60:fa:ad:dc:c6:c2:4f:75:
07:f7:7a:c1:da:53:32:4c:60:83:ee:c3:0f:69:7e:e2:cb:b2:
55:4c:59:2b:a5:9e:46:63:90:99:0b:d8:6a:42:c5:a6:c2:68:
d9:9a:72:a5:2e:b4:33:73:b2:66:cf:b9:73:83:00:c7:bb:13:
1c:69:5e:c5:0f:23:e2:cc:88:ed:f1:b6:7e:ab:55:d1:cb:b9:
ff:7e:bb:40:5e:5d:85:d6:0e:03:44:c4:a3:c4:40:b1:16:cb:
1f:1b:f4:c0:8e:9a:b0:5a:20:ed:f4:2a:cb:7a:f6:3b:32:46:
6b:52:f4:4d:bd:60:1c:41:88:e9:aa:2e:38:96:63:91:76:9c:
52:cc:2f:10:85:25:bc:99:50:7d:67:bb:24:fd:1c:01:b6:1d:
ea:99:e5:50:0e:01:58:aa:63:56:45:20:40:9f:b1:11:1a:bc:
34:7f:e7:01:c1:27:a8:0e:28:46:5e:20:8a:52:31:ab:a7:0a:
e4:1c:14:00:2d:6c:ba:1a:63:b2:01:2e:3e:84:b5:9f:e9:ed:
48:5d:89:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:36 2025 by rpki-client