Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/A3E1285880EA11EC9B13735BC4F9AE02.roa
File: A3E1285880EA11EC9B13735BC4F9AE02.roa (raw, json)
Hash identifier: wO0lpqNWlOWC3T2taLX5cCmBqujhBbbX+p4W7d5z204=
Subject key identifier: DA:D4:A7:5E:95:8C:D6:F3:EE:2C:B4:E4:F4:EF:48:47:67:CD:B0:87
Certificate issuer: /CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334
Certificate serial: 03BD
Authority key identifier: 92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/A3E1285880EA11EC9B13735BC4F9AE02.roa
Signing time: Mon 03 Mar 2025 02:26:22 +0000
ROA not before: Mon 03 Mar 2025 02:26:22 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 63996
IP address blocks: 103.180.207.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 957 (0x3bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDCFE
Validity
Not Before: Mar 3 02:26:22 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67c5134d-be7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:99:d4:25:e3:96:e7:bc:d1:e3:6c:59:25:a8:
ce:21:e1:0c:d5:d9:4b:71:a7:50:18:a8:b1:28:55:
38:18:9a:5f:5b:7b:36:32:7f:c3:ef:d0:b6:03:0d:
24:c5:ea:de:2e:03:72:72:67:3b:fd:49:7d:2e:79:
6d:ff:97:41:f9:99:85:3f:b8:12:84:49:fa:a4:94:
ad:c0:c3:5f:6f:f4:f4:11:00:f8:8b:fe:4b:e6:69:
ce:2a:f7:06:bf:ec:40:c6:72:e7:e2:27:bd:9d:25:
61:20:0f:53:33:46:19:cc:ff:ef:69:d4:bd:6f:04:
32:f5:8a:43:98:f6:0c:3b:c4:83:d3:75:e6:0c:7d:
70:7f:7c:69:e4:b5:9a:09:44:00:61:37:4b:a5:9c:
db:20:82:f8:3a:d9:f6:fc:ee:02:40:b8:bc:d1:7b:
c9:93:58:56:50:6f:f3:db:2f:bc:ab:de:9b:f6:91:
bf:7c:bb:ae:c1:d2:11:7c:94:f0:e0:a7:11:09:8a:
6f:38:93:25:4a:15:03:03:33:5b:0a:48:e6:34:e5:
7b:13:20:15:bd:17:b7:7e:c3:27:66:d4:5b:90:01:
2d:e0:f5:36:44:9e:87:83:c2:52:2d:d0:ab:da:65:
8b:e5:00:ae:e2:77:a2:80:00:cd:05:4e:09:55:ed:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:D4:A7:5E:95:8C:D6:F3:EE:2C:B4:E4:F4:EF:48:47:67:CD:B0:87
X509v3 Authority Key Identifier:
keyid:92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/A3E1285880EA11EC9B13735BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.207.0/24
Signature Algorithm: sha256WithRSAEncryption
17:3c:10:e3:87:ba:f3:05:2c:1f:ef:69:56:65:af:a9:de:3a:
0f:d1:b1:7e:0d:29:4c:c7:1e:3f:b5:e3:9d:7d:b6:43:3c:da:
51:1e:7f:97:61:be:84:1e:12:a3:e9:0f:d8:1e:13:a7:ea:35:
9a:38:55:49:6e:7f:ce:cb:21:35:af:53:d1:ab:58:d6:ea:7d:
f7:f4:8b:ec:66:a4:00:b0:1e:e0:52:4c:5f:e6:e2:f9:68:7b:
31:4b:a9:47:e3:31:50:ae:7c:b6:ba:4c:73:fc:38:d2:8b:a8:
d5:11:1e:c6:22:0d:0d:83:8c:b8:13:ab:09:fd:28:73:95:e2:
4f:0a:21:75:3c:c4:f7:51:03:76:13:36:6c:f1:62:a9:7d:b5:
60:bf:cb:8e:c9:1e:32:bd:9e:4a:f1:16:2b:2a:e8:fd:65:25:
55:c2:84:1a:21:53:fe:18:42:9f:70:4a:7e:26:95:88:4e:68:
78:5f:7d:20:81:9e:10:ec:4f:c9:3c:0f:4f:1f:ed:4c:b4:50:
c3:f4:f2:64:e6:2b:62:d2:3a:20:79:d1:1d:cc:82:17:16:66:
d1:1d:84:94:d7:9c:19:76:ad:8e:8a:72:94:1f:2c:de:0e:1c:
76:1b:41:1f:6d:ce:cf:81:2f:a3:74:c6:2c:e0:30:2f:3a:b5:
7f:05:3a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:10 2025 by rpki-client