Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/E1647F18303311EA8796D584C4F9AE02.roa
File: E1647F18303311EA8796D584C4F9AE02.roa (raw, json)
Hash identifier: A+siabWCuB3xIRMkeynsCCrAfo8cD2JRUNWKm9UeiPs=
Subject key identifier: 07:DB:53:7D:74:66:EF:24:6C:00:D6:F4:8A:AB:A8:AE:0A:D3:29:2A
Certificate issuer: /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
Certificate serial: 0B35
Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/E1647F18303311EA8796D584C4F9AE02.roa
Signing time: Thu 06 Feb 2025 18:57:35 +0000
ROA not before: Thu 06 Feb 2025 18:57:35 +0000
ROA not after: Fri 01 May 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.147.71.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2869 (0xb35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91384FB
Validity
Not Before: Feb 6 18:57:35 2025 GMT
Not After : May 1 00:00:00 2026 GMT
Subject: CN=67a5061f-afb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:b1:a1:bb:ad:5d:0e:41:ce:49:77:db:3c:
3b:0f:27:de:30:11:6e:7e:26:32:14:8d:09:82:c9:
bb:ac:5a:b8:e0:ed:e1:84:8e:5f:61:76:76:98:25:
63:cf:50:88:0a:19:69:de:47:28:c1:01:05:e0:a2:
d6:ad:20:8a:1e:d9:33:08:3a:62:d1:79:3d:b0:89:
3c:cb:0a:34:1d:a1:d0:dc:c2:90:b2:cc:16:3f:2c:
f6:ad:23:2b:93:8b:b9:c1:65:55:76:86:b5:04:f6:
bd:87:c7:ef:7d:f7:6f:9e:27:43:49:62:17:b9:e0:
0a:7c:78:05:b1:b0:d4:f9:2f:e3:d6:3e:78:04:74:
da:b3:03:3d:8e:52:b3:51:dc:5c:30:25:a4:84:0c:
14:73:fd:67:66:3b:9d:7d:12:d9:6b:99:37:8c:a8:
f6:11:4d:11:3b:10:d6:27:94:7d:46:3d:da:cd:23:
ba:ad:89:20:cb:dc:fd:40:60:3e:19:9b:8a:0a:77:
d7:55:37:a8:2f:81:bc:30:97:ef:2a:77:25:c3:7b:
b8:ea:0d:9e:35:fd:47:ed:d1:d3:a6:4e:c1:c7:e3:
45:9b:77:ca:3d:9a:5f:31:2d:e2:16:f4:11:03:0c:
5b:24:ad:44:03:b4:19:75:48:64:a1:7c:cf:25:2a:
16:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DB:53:7D:74:66:EF:24:6C:00:D6:F4:8A:AB:A8:AE:0A:D3:29:2A
X509v3 Authority Key Identifier:
keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/E1647F18303311EA8796D584C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.147.71.0/24
Signature Algorithm: sha256WithRSAEncryption
87:36:53:ee:81:3b:4c:7e:a2:87:ce:ce:4f:7c:97:6e:68:62:
37:09:98:8c:94:bb:b7:ed:9a:35:e5:af:d2:4d:c1:9b:f3:0c:
b1:9d:4c:4a:04:d9:a0:55:c2:47:1b:f2:85:57:0b:ed:61:e4:
5c:39:0e:cd:b6:4c:92:12:30:fc:bc:1b:f7:9b:0d:fa:74:66:
a1:bf:dd:4a:9c:61:69:5d:e9:1e:91:65:11:aa:5e:5c:7e:6f:
33:a6:fd:94:cf:14:dd:7c:48:1e:2f:44:96:a0:11:b7:f8:5c:
f2:e1:76:87:79:2a:d9:b9:f7:d3:76:a0:5a:32:11:3a:62:bd:
ca:33:47:60:72:fa:2d:eb:b0:3f:df:28:ef:27:1e:9b:ee:71:
c8:8e:95:24:a1:8a:20:02:c4:ba:49:11:f3:30:f5:98:c7:2f:
e1:09:68:43:63:c8:7e:5f:03:69:80:87:87:52:d6:f5:0a:d6:
6b:fa:ef:3b:4b:7a:6a:51:a7:21:c0:88:01:61:62:10:62:2c:
c1:9f:74:46:f8:f7:f1:3d:86:03:23:55:ee:f1:c5:84:36:68:
a5:ec:ae:01:3b:b2:89:4d:50:57:a3:32:97:79:06:44:c1:c5:
9b:6d:c3:cd:b1:95:59:8d:fe:e9:3b:77:59:0f:d8:f3:6f:b8:
3e:ec:0c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:02:19 2025 by rpki-client