Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/AE735F98E19D11ECA439802EC4F9AE02.roa
File: AE735F98E19D11ECA439802EC4F9AE02.roa (raw, json)
Hash identifier: 7Tpt5XBbvIKMRBeKrshKHxigWKiSIuH37QbViPhZVRs=
Subject key identifier: 96:1F:08:2B:39:07:FA:DE:59:9C:55:31:DF:F2:A8:31:D2:83:45:51
Certificate issuer: /CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
Certificate serial: 07F4
Authority key identifier: C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/AE735F98E19D11ECA439802EC4F9AE02.roa
Signing time: Fri 31 May 2024 22:59:31 +0000
ROA not before: Fri 31 May 2024 22:59:31 +0000
ROA not after: Tue 01 Oct 2024 00:00:00 +0000
asID: 140849
IP address blocks: 103.152.104.0/24 maxlen: 24
103.152.105.0/24 maxlen: 24
2001:df4:a80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2036 (0x7f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EB2D, serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
Validity
Not Before: May 31 22:59:31 2024 GMT
Not After : Oct 1 00:00:00 2024 GMT
Subject: CN=665a5653-be1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:5f:62:e8:4e:37:71:e7:3c:58:34:dc:9d:
95:f4:5e:23:9a:5d:68:99:9b:ef:ab:a4:d6:68:dc:
21:a7:39:10:78:00:f4:a1:7c:06:6d:87:d5:f2:fe:
d5:6a:70:48:92:73:70:72:5c:da:fa:2c:92:65:61:
14:a6:f3:ab:ef:0a:78:54:30:2a:cd:b3:21:be:1f:
57:1d:58:16:a7:a5:c6:4e:79:4f:63:42:0a:e5:01:
09:1c:90:44:26:c4:04:f9:88:7f:3f:2d:f7:00:73:
b2:6b:06:61:68:c2:de:6d:68:f9:46:6e:f0:6e:2d:
37:6f:81:09:70:63:72:91:31:53:e4:75:8f:c1:e6:
81:11:e2:78:10:5b:a3:14:a5:52:13:68:a0:d8:9b:
3f:11:5c:61:9f:53:65:b1:55:fc:08:23:5b:15:77:
28:71:93:a1:8e:fb:04:76:7b:fb:5d:8e:b5:17:e3:
bd:31:cb:14:f0:79:01:fa:f0:f2:75:4c:ac:2c:42:
dc:63:91:48:16:b0:f2:d5:9b:8d:2c:5f:c3:39:b1:
52:44:c7:5a:77:10:da:35:a4:87:2d:52:4f:c8:c9:
2d:e6:6f:b0:b9:24:3f:2c:da:49:14:41:9f:61:62:
d8:7e:d8:d4:5b:9d:db:d0:cc:22:6b:20:3f:98:24:
64:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1F:08:2B:39:07:FA:DE:59:9C:55:31:DF:F2:A8:31:D2:83:45:51
X509v3 Authority Key Identifier:
keyid:C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/AE735F98E19D11ECA439802EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.104.0/23
IPv6:
2001:df4:a80::/48
Signature Algorithm: sha256WithRSAEncryption
14:c4:bb:80:3a:c5:fd:28:79:2f:40:5b:2c:dd:87:36:5c:10:
9c:f9:b0:35:4c:b1:c2:ec:98:f0:36:c8:db:3e:69:00:1b:f0:
ce:9f:3a:01:70:9b:02:8b:46:f0:b8:df:1e:c8:d3:c3:b8:7e:
e4:f5:51:d9:ba:ea:be:2c:d6:c5:d9:95:eb:1b:9f:f4:d1:9c:
31:ca:ff:86:c4:a5:f9:24:7b:a2:6f:e0:9e:28:b6:68:b6:a9:
35:4b:15:99:ab:cf:dc:5f:01:42:ca:0f:57:3f:48:06:4f:52:
08:1c:25:9e:b7:24:9c:a8:86:2f:6e:e3:66:15:66:88:2a:63:
21:8e:31:06:10:ee:4c:74:8f:15:84:52:18:40:ef:98:a1:a2:
4a:dd:43:6a:3f:6d:37:2a:75:f6:a8:3b:a1:16:21:88:c5:e6:
a9:55:24:47:a9:b5:42:d5:e7:7e:a0:2e:0e:d5:58:25:83:29:
9e:eb:1e:cf:2c:f1:2a:39:a6:5e:91:9c:84:92:e3:db:09:c7:
e4:34:a2:0f:10:25:75:a8:1d:e5:1b:a3:cc:53:29:06:41:83:
bd:88:2a:77:79:55:5c:11:c5:d4:a2:c5:08:6a:99:58:0d:5f:
a0:3a:57:26:fc:69:15:05:43:cb:37:3b:90:25:d7:a7:4b:e1:
23:b1:64:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:40:11 2025 by rpki-client