Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/10704342B82811EFBBBB8612C4F9AE02.roa
File: 10704342B82811EFBBBB8612C4F9AE02.roa (raw, json)
Hash identifier: 8QIAuYOy9f6b5zSvfVedJi6THJS0SwovP5/GRdELmd4=
Subject key identifier: 1B:4B:21:F1:A8:E4:3C:C5:2E:F1:EB:5B:C3:C4:AC:12:2F:A3:F4:D7
Certificate issuer: /CN=A91F48F2/serialNumber=EC484A51E463B98AF8E1B02AE22955A1322F1F75
Certificate serial: 346A
Authority key identifier: EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/10704342B82811EFBBBB8612C4F9AE02.roa
Signing time: Thu 12 Dec 2024 03:16:29 +0000
ROA not before: Thu 12 Dec 2024 03:16:29 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 24028
IP address blocks: 103.251.201.0/24 maxlen: 24
202.171.59.0/24 maxlen: 24
202.171.60.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13418 (0x346a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F48F2
Validity
Not Before: Dec 12 03:16:29 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=675a558d-3746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:f9:97:52:0f:39:32:fd:9c:89:49:e7:78:
f9:f3:0f:4e:1c:10:55:2d:62:5e:18:e2:8a:09:c6:
f9:ba:31:a7:a2:0e:13:ce:7f:e7:1e:dd:06:58:49:
d3:53:5a:d9:d7:cd:49:68:9e:dc:2f:0e:00:66:81:
23:81:6d:c0:a7:71:4b:b8:3e:79:fe:5b:90:1a:9b:
3b:f7:fc:5e:da:62:b4:7c:de:ab:8e:44:9f:c0:d3:
f8:8c:ca:d5:f4:b5:95:83:20:bd:12:62:e9:6e:5c:
b3:89:63:5b:ce:cc:63:fb:7b:a6:64:00:2b:d9:94:
33:72:8b:9c:b6:1f:f1:36:56:f9:b5:0d:94:f8:16:
4d:d3:2a:2f:7e:03:1e:fa:d7:1f:8f:b3:76:fa:21:
ef:dd:ef:a2:a8:e6:16:5e:58:40:3d:78:ff:1a:a4:
a0:57:b5:03:b1:e4:ad:78:05:fd:b9:84:3e:4c:5a:
74:1a:d0:0c:56:95:35:12:9f:d3:f9:8e:cc:15:c8:
95:0d:af:30:4c:e7:28:1f:04:c7:39:69:74:bc:c4:
be:95:25:29:e1:94:5d:a8:d5:81:8b:14:08:b8:82:
5b:d4:c8:3d:d1:ca:eb:7c:9a:c0:ad:91:f5:0f:cd:
7e:01:c4:4b:b8:0e:13:4c:9d:50:32:b2:02:9b:30:
95:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4B:21:F1:A8:E4:3C:C5:2E:F1:EB:5B:C3:C4:AC:12:2F:A3:F4:D7
X509v3 Authority Key Identifier:
keyid:EC:48:4A:51:E4:63:B9:8A:F8:E1:B0:2A:E2:29:55:A1:32:2F:1F:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/7EhKUeRjuYr44bAq4ilVoTIvH3U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7EhKUeRjuYr44bAq4ilVoTIvH3U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F2/46D091981DA911E29CFD3EA408B02CD2/10704342B82811EFBBBB8612C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.251.201.0/24
202.171.59.0-202.171.60.255
Signature Algorithm: sha256WithRSAEncryption
5c:ec:da:28:0a:ba:33:8c:b4:38:02:e5:ee:7d:e1:13:49:8a:
35:a1:0a:44:6c:0c:f8:af:32:88:e6:f1:b0:55:82:f3:91:71:
a3:55:c7:87:6d:fe:c8:5e:76:8a:73:eb:2e:16:19:40:e8:cf:
45:34:aa:52:ac:73:13:42:33:46:b0:a1:11:6b:97:5b:17:16:
61:a1:a2:29:88:2d:b0:74:ad:04:73:2e:60:a9:ea:95:4a:a0:
4c:05:27:72:8b:d7:aa:dc:1b:3d:ce:dc:30:84:87:1f:31:2c:
d9:96:63:6f:3b:04:80:f1:66:cd:cd:54:f4:75:c8:da:67:c9:
e4:73:9e:5f:bd:9d:93:9a:2c:1b:36:c8:1e:4d:a2:82:88:2d:
ae:2d:8c:5e:93:5a:d8:94:69:21:98:e7:a8:6a:6a:49:77:d3:
97:d4:f7:8a:3a:f2:87:15:52:59:d6:1d:e7:e1:90:c1:7f:aa:
10:c3:68:51:fa:f1:b3:c9:93:96:a1:21:9f:5e:07:a2:a4:bc:
40:3d:e1:fe:4d:02:ca:49:83:90:18:d3:4a:b1:97:1f:05:4f:
5a:47:b0:70:e4:62:fa:c6:d8:30:60:12:17:ff:54:3c:09:bf:
2d:93:3b:9e:80:85:ad:5e:66:58:85:11:d3:e4:60:7b:68:b0:
e8:cb:ee:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:04 2025 by rpki-client