Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/A5621F3480EA11EC9B13735BC4F9AE02.roa
File: A5621F3480EA11EC9B13735BC4F9AE02.roa (raw, json)
Hash identifier: 8vDL+87ujwmt0cTUprGHDVqUcQ7iOWe78XinpUQSTr4=
Subject key identifier: FF:E0:5B:8F:36:CE:2F:69:1C:21:60:D6:33:20:11:DD:79:D4:20:10
Certificate issuer: /CN=A91FDCFE/serialNumber=92AC4FBE170EA9DF89F0C8318C3CD45F93A52334
Certificate serial: 03CA
Authority key identifier: 92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/A5621F3480EA11EC9B13735BC4F9AE02.roa
Signing time: Sun 23 Mar 2025 11:53:12 +0000
ROA not before: Sun 23 Mar 2025 11:53:12 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 149480
IP address blocks: 103.180.206.0/24 maxlen: 24
103.180.207.0/24 maxlen: 24
2001:df0:6040::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 970 (0x3ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FDCFE
Validity
Not Before: Mar 23 11:53:12 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67dff628-e6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:d3:c0:79:dd:e9:9b:1b:6e:fe:b9:12:9c:
d5:ef:57:71:3a:68:5e:d0:c4:d8:6c:4b:00:5d:3c:
40:ad:d6:a7:69:56:d8:99:ee:ae:40:35:21:55:74:
9a:1f:56:29:10:f2:67:e6:da:37:63:c4:d1:d8:53:
20:1d:e6:aa:37:52:11:1c:2e:a2:51:a6:f2:62:4d:
9d:d4:73:cf:5c:03:ac:6a:be:8a:d9:33:4c:24:21:
a9:40:3f:8a:6c:98:9e:c8:15:bf:c8:b2:ee:3a:22:
b7:35:90:3b:54:09:9b:6f:2d:ee:04:92:ad:fc:07:
41:51:9b:74:41:83:1e:dd:8e:ee:91:51:4f:75:70:
47:2f:45:be:cb:74:e9:68:65:95:96:a0:f4:bf:61:
b2:ea:cd:a5:71:7d:c3:67:a3:97:8e:a1:de:c3:8d:
68:37:55:bf:ce:39:62:89:14:e6:ea:ef:c9:56:d3:
89:63:ad:a3:e9:1d:d2:d9:78:97:e3:02:49:3e:76:
c7:7d:45:45:5b:be:ec:60:2e:e9:80:7a:06:aa:48:
13:51:f8:8d:f1:34:3b:5c:28:6f:71:1c:ac:27:e3:
62:3b:b8:c1:ba:dd:ae:85:53:0c:57:83:3b:23:ff:
07:c9:e4:7b:20:08:41:af:eb:a6:0a:cf:9f:cf:83:
55:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E0:5B:8F:36:CE:2F:69:1C:21:60:D6:33:20:11:DD:79:D4:20:10
X509v3 Authority Key Identifier:
keyid:92:AC:4F:BE:17:0E:A9:DF:89:F0:C8:31:8C:3C:D4:5F:93:A5:23:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kqxPvhcOqd-J8MgxjDzUX5OlIzQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDCFE/96505B2480E411ECB92DCB4DC4F9AE02/A5621F3480EA11EC9B13735BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.206.0/23
IPv6:
2001:df0:6040::/48
Signature Algorithm: sha256WithRSAEncryption
a4:d6:74:24:e3:58:3f:04:2d:49:62:10:31:19:6c:05:9b:e5:
a2:b3:35:0a:f1:61:f1:b7:b8:ae:52:57:a8:03:23:c2:3e:73:
c4:51:9d:db:ad:64:2d:e9:61:01:2b:63:39:ad:e2:e8:e6:03:
99:7c:7d:22:c7:9b:14:0b:83:96:8f:de:2a:95:1a:21:3b:2f:
d9:f2:90:23:10:90:49:53:a2:47:d5:95:b1:fb:e1:92:70:c7:
72:df:72:1b:1b:c4:d1:70:ae:2c:2a:20:81:a2:94:ee:7e:ce:
56:3f:9f:fe:b6:18:fd:76:be:ec:c1:5b:28:86:a8:34:19:62:
3f:04:3e:30:e1:2e:fd:08:5c:1d:05:40:bb:9b:b3:0c:e7:b1:
55:fb:e1:38:2d:62:2a:22:8d:90:9d:d8:95:e2:9f:54:04:80:
79:b7:6e:e0:4f:8a:a7:12:88:91:b3:8e:bb:5b:36:a6:3e:9c:
c4:da:4b:48:d5:1b:32:a0:30:89:9b:22:8e:75:77:58:d5:57:
ef:da:c0:f7:c1:65:4a:fc:f5:61:d0:c5:3a:d2:5d:ea:fb:92:
9d:4b:c5:d5:f1:35:26:03:f8:8b:ff:b7:84:bf:a7:e3:63:74:
4a:6c:c7:0f:7e:4f:58:f3:81:e5:13:99:67:8d:5a:7a:86:a5:
d6:f4:0d:02
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICA8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkRDRkUxMTAvBgNVBAUTKDkyQUM0RkJFMTcwRUE5REY4OUYwQzgzMThDM0NENDVG
OTNBNTIzMzQwHhcNMjUwMzIzMTE1MzEyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02N2RmZjYyOC1lNmU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsF7TwHnd6Zsbbv65EpzV71dxOmhe0MTYbEsAXTxArdanaVbYme6uQDUhVXSa
H1YpEPJn5to3Y8TR2FMgHeaqN1IRHC6iUabyYk2d1HPPXAOsar6K2TNMJCGpQD+K
bJieyBW/yLLuOiK3NZA7VAmbby3uBJKt/AdBUZt0QYMe3Y7ukVFPdXBHL0W+y3Tp
aGWVlqD0v2Gy6s2lcX3DZ6OXjqHew41oN1W/zjliiRTm6u/JVtOJY62j6R3S2XiX
4wJJPnbHfUVFW77sYC7pgHoGqkgTUfiN8TQ7XChvcRysJ+NiO7jBut2uhVMMV4M7
I/8HyeR7IAhBr+umCs+fz4NV+QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFP/gW482
zi9pHCFg1jMgEd151CAQMB8GA1UdIwQYMBaAFJKsT74XDqnfifDIMYw81F+TpSM0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRENGRS85NjUwNUIyNDgw
RTQxMUVDQjkyRENCNERDNEY5QUUwMi9rcXhQdmhjT3FkLUo4TWd4akR6VVg1T2xJ
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2txeFB2aGNPcWQtSjhNZ3hqRHpVWDVPbEl6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkRDRkUvOTY1MDVCMjQ4MEU0MTFFQ0I5MkRDQjREQzRGOUFFMDIvQTU2MjFGMzQ4
MEVBMTFFQzlCMTM3MzVCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFntM4wDwQCAAIwCQMHACABDfBgQDANBgkqhkiG9w0BAQsF
AAOCAQEApNZ0JONYPwQtSWIQMRlsBZvlorM1CvFh8be4rlJXqAMjwj5zxFGd261k
LelhAStjOa3i6OYDmXx9IsebFAuDlo/eKpUaITsv2fKQIxCQSVOiR9WVsfvhknDH
ct9yGxvE0XCuLCoggaKU7n7OVj+f/rYY/Xa+7MFbKIaoNBliPwQ+MOEu/QhcHQVA
u5uzDOexVfvhOC1iKiKNkJ3YleKfVASAebdu4E+KpxKIkbOOu1s2pj6cxNpLSNUb
MqAwiZsijnV3WNVX79rA98FlSvz1YdDFOtJd6vuSnUvF1fE1JgP4i/+3hL+n42N0
SmzHD35PWPOB5ROZZ41aeoal1vQNAg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:13:40 2025 by rpki-client