Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/1D88932A452911EB9118413EC4F9AE02.roa
File: 1D88932A452911EB9118413EC4F9AE02.roa (raw, json)
Hash identifier: SCl5aD29N8FQzsS4y+Nxw7MEzPWUyh/cTZ5qei2/m40=
Subject key identifier: 02:B4:5F:D6:54:0F:60:6A:E9:17:EA:00:48:D7:1B:B9:E8:C5:A8:4E
Certificate issuer: /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01
Certificate serial: 062C
Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/1D88932A452911EB9118413EC4F9AE02.roa
Signing time: Fri 28 Jul 2023 18:56:20 +0000
ROA not before: Fri 28 Jul 2023 18:56:20 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 58689
IP address blocks: 103.97.162.0/24 maxlen: 24
103.97.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1580 (0x62c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112804, serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01
Validity
Not Before: Jul 28 18:56:20 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64c40f54-c5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bd:9a:a2:bf:fd:01:75:8e:41:ff:55:b5:20:
d9:b4:f5:04:50:86:64:9b:01:21:0b:1d:d6:9f:8f:
33:38:5d:e4:41:d7:18:bc:79:26:29:9d:03:ec:bc:
d7:b2:81:c5:39:10:d6:88:ab:81:c3:8d:0e:b8:c4:
84:a5:e1:bf:f6:48:85:95:64:dd:67:33:8b:57:d9:
1f:11:4a:63:0f:40:51:62:1e:1e:51:6e:86:51:bc:
81:89:ee:85:dc:cb:7c:98:21:8a:0f:a2:55:59:db:
89:2b:20:d0:37:e1:df:e7:61:82:f9:13:00:41:eb:
ab:25:1c:12:92:a4:75:87:ae:b4:39:cb:51:a9:50:
5e:d3:a2:34:50:70:b1:d9:94:cf:71:dd:b6:56:ea:
6b:37:1c:df:96:d2:33:fc:40:44:37:59:50:9d:5f:
90:7b:33:ed:cf:cb:94:70:92:9e:de:66:ea:e1:28:
d9:9b:e7:64:40:9c:9e:67:5d:46:44:57:9a:f1:03:
56:e9:f7:09:be:81:2a:d4:cc:6e:94:c2:5f:eb:dc:
5a:01:b7:9a:77:6e:97:63:40:ec:46:d3:e0:c4:98:
c1:aa:d7:2a:81:b4:f6:93:d1:34:81:31:26:4e:8d:
1b:dc:95:85:e4:cc:dd:a3:95:e2:e1:29:79:ff:65:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B4:5F:D6:54:0F:60:6A:E9:17:EA:00:48:D7:1B:B9:E8:C5:A8:4E
X509v3 Authority Key Identifier:
keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/1D88932A452911EB9118413EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.162.0/23
Signature Algorithm: sha256WithRSAEncryption
03:8d:21:f3:72:54:36:8b:37:6d:13:ff:7f:94:58:e3:3f:83:
74:ec:ce:dd:37:db:4c:cb:cc:7d:37:ba:bf:da:7d:9b:ab:23:
6e:62:17:d0:c0:10:be:9c:a6:d7:34:c0:92:ee:19:24:5d:cd:
ee:d7:8f:16:31:8d:4d:b9:62:7b:84:c1:37:00:27:66:df:4b:
0b:6b:54:2a:df:8e:b5:0d:46:2c:13:91:8c:58:e7:0f:e0:28:
df:a7:a2:d5:60:b7:78:57:ca:8c:7f:31:e6:48:b4:44:ef:a9:
b3:d5:f1:70:ba:3b:76:c4:98:20:e6:93:bc:a8:66:7d:8c:68:
c8:14:22:f1:1c:0d:0a:92:28:6b:c0:25:6a:10:73:24:ff:67:
92:0c:b1:7f:b5:cd:3b:14:f7:3f:fc:8a:a4:fd:f3:dd:b5:2f:
a6:22:6e:5a:25:20:7f:64:70:0d:8d:55:f1:fe:de:8d:58:b9:
c1:b0:5f:4e:f9:65:d1:6e:b1:b0:47:dd:27:16:7c:18:76:8b:
cc:48:8c:87:54:45:91:07:68:5a:33:ad:91:10:f1:de:21:9a:
af:9c:1b:2a:1a:6a:4c:dc:e8:5f:3b:de:be:ea:1d:50:a0:70:
f1:01:17:25:af:4d:8c:b2:66:1c:8a:36:49:af:a9:37:1c:d8:
a3:51:d8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:25:22 2025 by rpki-client