Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/0893031C846611EA9B99E043C4F9AE02.roa
File: 0893031C846611EA9B99E043C4F9AE02.roa (raw, json)
Hash identifier: 3hay+KNg/2l74ymUeo3rJ7DbBbo6k73NfQvBnuqkfBY=
Subject key identifier: 41:D3:95:C8:F7:01:1C:D6:54:18:38:F9:B6:D3:75:16:7E:53:BD:A1
Certificate issuer: /CN=A91F9FA2/serialNumber=FA07E8EABA8470A8A5FE4BA13E75D9E5FEA33B27
Certificate serial: 0961
Authority key identifier: FA:07:E8:EA:BA:84:70:A8:A5:FE:4B:A1:3E:75:D9:E5:FE:A3:3B:27
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/0893031C846611EA9B99E043C4F9AE02.roa
Signing time: Wed 04 Dec 2024 19:58:32 +0000
ROA not before: Wed 04 Dec 2024 19:58:32 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 139471
IP address blocks: 103.145.22.0/23 maxlen: 23
103.145.22.0/24 maxlen: 24
103.145.23.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2401 (0x961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F9FA2
Validity
Not Before: Dec 4 19:58:32 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=6750b467-b4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:3e:1e:ee:cc:5b:84:40:0e:9f:ab:6f:18:
d6:43:61:ec:b8:9f:3c:47:3d:69:7f:e0:36:84:f5:
86:a9:70:3d:b1:a1:4a:35:05:56:d2:a2:b2:6d:f9:
e0:37:b9:fe:26:4a:4e:04:21:88:df:81:87:0c:e9:
38:dd:f4:8b:02:4e:23:e7:d8:06:90:d8:4f:3b:31:
d8:1f:33:05:20:ae:81:46:f0:f9:f2:ea:b7:6b:ac:
2c:27:58:f1:66:73:9f:88:61:93:73:1b:76:23:e4:
b1:ec:b0:b1:85:4d:42:02:55:08:47:7d:50:4c:bb:
46:47:4c:10:c2:1b:a1:92:59:15:59:62:69:54:51:
17:92:2b:e1:be:83:6f:97:d1:be:6f:5b:e0:b4:a8:
ef:0b:3b:2f:7e:81:aa:0e:de:fe:5f:4c:92:13:4e:
be:a5:7c:fe:3c:5e:30:be:80:f5:2c:e0:75:d6:d5:
49:6f:ad:87:07:8d:c5:cd:23:ff:ca:4a:86:9b:35:
a5:f3:0b:54:0e:a0:1a:40:8c:4b:f4:6b:2d:91:ad:
d2:9a:4a:ee:ea:7c:a8:57:ae:63:bf:8d:bf:b6:37:
57:6d:e8:1e:51:44:f8:44:5a:7f:ea:ee:2a:88:d4:
56:5e:1c:4d:81:15:6b:73:e4:42:ee:f5:31:c8:23:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D3:95:C8:F7:01:1C:D6:54:18:38:F9:B6:D3:75:16:7E:53:BD:A1
X509v3 Authority Key Identifier:
keyid:FA:07:E8:EA:BA:84:70:A8:A5:FE:4B:A1:3E:75:D9:E5:FE:A3:3B:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/-gfo6rqEcKil_kuhPnXZ5f6jOyc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-gfo6rqEcKil_kuhPnXZ5f6jOyc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FA2/1C88B03A846411EAA9941540C4F9AE02/0893031C846611EA9B99E043C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.22.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:c4:e8:aa:23:2b:89:b4:7e:28:91:08:21:9d:89:9f:80:f8:
98:3b:43:02:7b:00:c5:4e:2c:ba:88:0a:e0:fc:69:33:95:61:
8a:d0:9c:16:84:d0:89:79:18:60:71:ad:66:ce:3c:33:c7:c1:
02:ef:98:e0:aa:d4:9c:bb:74:15:ed:e8:a6:b3:87:47:fc:e9:
28:2b:af:27:46:fa:5e:b2:04:b7:b4:3a:b1:fd:78:04:9d:bd:
49:1c:e4:1d:1f:8f:34:60:ac:d8:91:7a:b1:c2:cf:a1:6d:47:
a0:0d:dd:82:1a:93:49:69:4b:4d:80:76:e5:13:9b:8e:73:b6:
46:ce:93:6a:db:26:1e:33:14:7c:8c:a2:f0:29:71:78:a8:aa:
7b:b7:49:7d:35:d3:3b:f4:7d:9e:9b:39:23:87:cc:03:b6:1c:
33:c1:d6:fd:75:35:50:35:34:63:d4:a9:0e:2d:d9:be:36:6e:
96:40:dc:cb:c2:0c:f9:6a:1d:9d:d8:91:bc:6b:73:01:2f:ed:
83:c9:c3:37:05:10:d1:f5:a4:2b:39:db:62:8d:77:aa:b1:74:
fd:68:d5:67:b0:fa:66:e5:e8:5e:10:98:d5:0e:75:2f:6a:75:
9b:86:e2:5b:af:10:61:34:98:d6:3e:76:53:9a:dd:f0:14:88:
70:be:7f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:20:31 2025 by rpki-client