Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/0D99319006F011EFA8C8D445C4F9AE02.roa
File: 0D99319006F011EFA8C8D445C4F9AE02.roa (raw, json)
Hash identifier: A4DVK+hVAcm077tOI0UtMRITW1ft4Rq073mjOE1b4lQ=
Subject key identifier: 8A:F0:FD:0D:02:AD:D3:D6:7A:69:E0:FF:D2:FA:91:4E:0F:60:0E:84
Certificate issuer: /CN=A91F77AD/serialNumber=7C9F72229ED112594C7722D3C21B5105E29FC48A
Certificate serial: 0132
Authority key identifier: 7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/0D99319006F011EFA8C8D445C4F9AE02.roa
Signing time: Wed 29 Jan 2025 03:07:17 +0000
ROA not before: Wed 29 Jan 2025 03:07:17 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 800
IP address blocks: 103.68.188.0/22 maxlen: 24
103.147.48.0/23 maxlen: 23
203.27.19.0/24 maxlen: 24
2405:a9c0::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 306 (0x132)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F77AD
Validity
Not Before: Jan 29 03:07:17 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67999b65-5c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0a:9a:90:da:ea:ec:fc:69:84:16:c9:99:6d:
da:a9:54:2d:a7:a1:95:43:10:bb:53:c9:41:e6:53:
dc:39:60:af:7a:25:c2:e0:84:9f:14:b4:73:1c:f2:
f3:51:49:85:3d:9b:b2:2c:f8:c7:7d:f8:ec:64:38:
0d:56:24:11:8f:d3:68:a7:b3:0c:f5:cf:9d:21:a7:
ef:89:d8:5b:e7:c2:a4:db:dd:e8:19:b9:2f:98:4c:
b2:80:3b:8a:cf:ca:b1:04:c3:58:8b:d5:57:a3:7d:
22:87:d2:93:fd:c6:05:46:56:7b:46:ca:48:ec:b4:
c3:6e:ff:0c:40:04:7f:24:79:21:c2:20:bd:56:bd:
85:e8:5e:5d:09:ac:13:11:39:4e:11:37:5e:63:b9:
4b:56:82:f7:13:50:ca:02:53:c3:17:f1:25:73:34:
2d:af:8d:b3:b3:b2:0e:20:eb:d0:22:a3:8f:22:da:
30:74:f3:fc:1e:b6:81:34:04:15:97:fc:20:c8:af:
95:cd:66:91:97:6d:bf:90:5b:f8:e9:06:5b:76:5d:
a0:91:91:69:24:d2:43:71:3e:bf:dd:78:0e:d6:8b:
fb:ff:59:bb:fb:0f:23:00:35:72:ce:07:4a:a6:23:
1b:72:02:2c:17:49:6e:12:98:61:74:2f:b2:1b:ed:
bd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F0:FD:0D:02:AD:D3:D6:7A:69:E0:FF:D2:FA:91:4E:0F:60:0E:84
X509v3 Authority Key Identifier:
keyid:7C:9F:72:22:9E:D1:12:59:4C:77:22:D3:C2:1B:51:05:E2:9F:C4:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/fJ9yIp7REllMdyLTwhtRBeKfxIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fJ9yIp7REllMdyLTwhtRBeKfxIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F77AD/CE6C237A20A811EE98637F23C4F9AE02/0D99319006F011EFA8C8D445C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.68.188.0/22
103.147.48.0/23
203.27.19.0/24
IPv6:
2405:a9c0::/32
Signature Algorithm: sha256WithRSAEncryption
78:e3:a2:26:82:cb:bd:f0:95:2f:55:ed:47:8d:60:55:75:4b:
fb:03:4c:6a:47:7c:40:b5:3d:30:b3:ed:f7:20:ff:43:9a:26:
ba:b0:9c:5d:a3:b0:b4:0d:b2:09:8e:79:bc:e9:07:f8:4b:9b:
87:d9:5d:b4:8f:49:b6:df:b4:8b:43:c4:36:fe:15:0d:44:78:
77:87:1e:5b:4f:4b:b1:b4:ab:d7:8e:14:63:c8:68:0a:7c:95:
5d:3e:6d:66:4a:25:a1:58:05:6f:f3:78:b5:d8:bb:5c:c6:9f:
d9:3b:9e:d0:e2:f6:09:49:13:8e:49:9c:fa:eb:89:ca:06:65:
9a:d0:78:b3:57:8c:5d:cd:b5:ae:2c:fc:82:4d:26:cf:ee:29:
ba:d8:4d:fb:04:f9:df:33:0a:9f:c0:a3:1e:c7:67:5a:03:6c:
38:59:05:5e:00:63:77:66:68:57:f2:76:5a:15:cf:55:e5:03:
b8:90:b0:70:89:21:a3:80:04:23:5f:6d:56:08:46:db:58:4d:
28:e7:5a:69:4f:59:0d:91:86:70:01:16:b9:ed:01:2a:4d:e6:
25:df:e5:c3:e4:70:fe:80:af:05:36:13:51:0d:8a:37:d3:0a:
f2:c3:cc:0d:38:ba:98:27:c5:f0:75:34:59:67:9f:2e:83:9b:
63:24:ff:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:13 2025 by rpki-client