Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/36AB4096C51611E7AECA8B79C4F9AE02.roa
File: 36AB4096C51611E7AECA8B79C4F9AE02.roa (raw, json)
Hash identifier: 0oF1Qfg6/q63oXyqNiJvhv+IBvlt379syGArKmuw6+w=
Subject key identifier: 8A:82:36:9B:8F:91:9A:8C:05:1A:11:12:C2:9B:21:19:ED:DA:1C:16
Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389
Certificate serial: 2058
Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/36AB4096C51611E7AECA8B79C4F9AE02.roa
Signing time: Wed 12 Mar 2025 16:13:45 +0000
ROA not before: Wed 12 Mar 2025 16:13:45 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 56109
IP address blocks: 43.239.233.0/24 maxlen: 24
43.239.234.0/24 maxlen: 24
103.17.124.0/24 maxlen: 24
103.17.125.0/24 maxlen: 24
103.35.143.0/24 maxlen: 24
203.10.58.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8280 (0x2058)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F724B
Validity
Not Before: Mar 12 16:13:45 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=67d1b2b9-8686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:68:ca:73:bf:7a:12:27:84:1c:ed:75:3e:
0f:b4:5e:32:1c:c5:59:ff:3b:17:b4:86:67:86:76:
3d:ef:69:4f:f4:18:6f:c7:04:ce:51:d0:1a:a6:82:
97:20:dc:6e:6a:03:99:7a:e7:89:a5:47:53:41:4e:
d6:d9:38:d4:b2:fd:39:15:bd:f4:8d:00:84:59:f9:
ef:99:09:70:f3:e3:f8:e4:53:df:47:a3:57:6f:c0:
ff:c5:6e:7f:c0:5d:86:07:a5:dd:53:a2:25:26:0b:
7d:df:cf:bb:78:0d:a7:e6:17:74:bc:cb:cd:1d:ce:
81:88:d5:45:c4:50:f9:e1:5f:90:d9:05:2d:f7:4e:
9d:a0:53:34:86:be:2c:ff:21:bb:fe:8b:49:99:bc:
ea:b2:4e:18:67:53:88:ac:e5:5f:14:f0:a8:9a:f6:
02:d6:dd:9d:a8:f8:5a:22:c1:04:ad:8c:3b:d5:f8:
cf:0d:2f:a2:c3:d7:2d:c2:82:f8:cd:73:36:b0:bb:
f0:27:bd:65:9a:1d:87:81:40:57:1f:0c:15:09:8f:
0a:61:37:ec:19:01:7e:d8:ce:08:10:8b:82:c5:38:
c2:7e:2e:2b:21:89:68:0c:65:57:6b:07:38:b3:69:
2c:1e:92:89:16:7b:e1:e6:b7:1c:09:50:36:f6:9b:
e7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:82:36:9B:8F:91:9A:8C:05:1A:11:12:C2:9B:21:19:ED:DA:1C:16
X509v3 Authority Key Identifier:
keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/36AB4096C51611E7AECA8B79C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.233.0-43.239.234.255
103.17.124.0/23
103.35.143.0/24
203.10.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:bb:67:5a:cc:4f:19:65:3f:95:11:a5:8b:39:89:90:55:90:
43:2e:a9:21:85:23:0d:0e:8c:0f:98:69:69:6d:5e:b9:1a:49:
1e:5c:a7:d9:63:7b:03:f7:7f:99:ba:a1:b8:bf:66:a3:0a:8e:
a3:e8:7f:88:99:52:bb:d8:c6:eb:df:cf:7c:d9:f5:07:82:e5:
04:17:cb:a7:2d:b3:16:36:19:42:59:ca:59:5f:01:ba:5d:5a:
d3:35:68:89:42:26:0b:a1:6a:3a:e9:b9:8c:bd:4d:92:d6:0f:
f0:33:d6:6e:ad:d6:c9:94:ef:32:ed:87:86:ab:6d:c3:53:34:
02:3c:13:c5:5f:ac:cb:18:13:c2:ff:c5:c4:61:cb:b0:11:fa:
04:bb:67:3f:ad:3f:e3:82:04:49:16:e3:91:0f:d2:db:fc:3a:
4e:dd:38:29:9b:eb:06:cb:00:74:ca:d6:ca:4c:57:e1:ad:db:
2e:23:9e:1d:a7:1f:f5:60:c0:f5:95:2f:e2:c0:ee:cc:f2:1f:
49:e3:19:5e:51:a3:5d:45:e7:9a:97:7b:fe:e0:4a:ea:64:a1:
68:50:de:81:1c:f0:a0:cb:29:2c:ba:06:d3:30:43:ba:fa:04:
b1:cb:d8:9a:98:b3:d5:66:45:98:12:6c:a2:76:46:9e:05:1f:
35:ab:00:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:26 2025 by rpki-client