Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/AA135886D75411EFA0D6BE34C4F9AE02.roa
File: AA135886D75411EFA0D6BE34C4F9AE02.roa (raw, json)
Hash identifier: FL9RyjoTD6DVuuRd2ISuSk98bbRopCzPxXp8wZNKZas=
Subject key identifier: 72:B6:48:39:06:F4:62:CB:40:AF:0C:BC:FF:15:63:CC:6D:A5:12:26
Certificate issuer: /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Certificate serial: 0E51
Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/AA135886D75411EFA0D6BE34C4F9AE02.roa
Signing time: Wed 22 Jan 2025 17:56:02 +0000
ROA not before: Wed 22 Jan 2025 17:56:02 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 6079
IP address blocks: 103.105.165.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3665 (0xe51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D29F
Validity
Not Before: Jan 22 17:56:02 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=67913131-ac6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:ef:9a:81:6c:9d:1d:3d:63:02:df:74:67:
4c:4b:e2:b6:02:54:57:7b:28:c8:cb:fc:32:db:f8:
e3:1f:29:25:e7:fe:05:5b:7e:c7:06:09:86:70:58:
de:e6:d7:b5:33:71:05:b0:84:b2:b8:d7:c2:62:53:
57:41:bb:5d:af:f6:aa:4c:6d:60:6a:86:0a:7d:62:
ec:3e:2b:28:01:4d:db:91:3c:e6:85:89:2e:17:02:
ed:f8:dd:de:34:e2:4a:18:96:31:2c:33:37:4c:7e:
fd:ee:3f:ca:fb:23:c8:8f:e1:ad:e1:54:fe:dd:e3:
9f:04:f2:7c:c1:b9:43:72:43:cb:b4:6e:27:0f:eb:
06:77:57:88:3a:2b:13:8c:71:d3:02:ce:18:d0:9b:
be:51:11:9d:14:8e:52:52:1f:d6:4e:c0:10:e0:59:
13:a7:87:66:90:61:e7:99:b9:3a:04:61:1b:b3:17:
25:64:6b:f3:2f:a7:c1:79:22:cf:c1:9f:6b:2b:31:
63:86:88:7c:c3:e0:3a:dd:09:6f:89:d5:bc:9c:46:
96:b4:5b:66:75:fb:d3:ec:55:f1:2e:69:75:15:de:
5b:2a:0d:70:1f:77:f6:83:f2:3c:24:77:81:5b:7e:
00:70:48:75:e9:ee:1d:6d:82:97:82:59:84:d4:8a:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B6:48:39:06:F4:62:CB:40:AF:0C:BC:FF:15:63:CC:6D:A5:12:26
X509v3 Authority Key Identifier:
keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/AA135886D75411EFA0D6BE34C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.105.165.0/24
Signature Algorithm: sha256WithRSAEncryption
77:0b:ed:16:10:87:f9:1a:b4:53:a5:a9:c2:d2:22:79:f3:85:
63:2c:55:5b:8c:86:33:98:ec:80:28:39:41:34:01:d3:9d:79:
51:a7:36:1c:fa:3a:e3:9d:97:d3:48:64:71:52:34:e0:a2:5a:
ba:e3:48:6c:b2:8a:9e:47:55:92:98:5c:fb:36:d0:8b:a5:0c:
d0:73:45:97:b7:2a:25:21:b7:14:b3:e6:e3:b4:0b:39:64:2c:
fb:7d:ce:6b:95:a1:c6:b8:e5:b0:24:59:43:83:38:02:6e:b7:
5f:f6:fe:69:55:9b:34:ff:eb:56:a2:29:9d:6d:d1:fa:68:41:
74:dd:4a:0f:fb:3b:11:9c:0c:9b:17:53:ca:a8:db:9b:f8:36:
91:60:2e:88:05:2d:43:f0:03:f4:eb:e3:bf:a2:fb:5b:88:4d:
ff:59:e3:cd:2d:45:93:d9:c5:f4:9f:10:c0:a8:da:2b:a7:31:
46:55:24:96:ba:c5:a3:9d:33:24:dc:9b:75:47:a9:d0:c4:6b:
9d:61:91:b1:fb:ee:c3:fc:8d:e5:d4:9a:5c:86:3d:ed:84:ff:
c7:cd:d5:37:f5:4c:32:3d:8f:39:66:07:78:80:b2:b3:3f:e1:
68:9a:2d:ad:dd:ed:c3:a8:26:92:09:f4:8b:aa:d5:5a:96:ab:
3d:11:da:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:13 2025 by rpki-client