Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/63E37ACA29B311EFBE0EBC5EC4F9AE02.roa
File: 63E37ACA29B311EFBE0EBC5EC4F9AE02.roa (raw, json)
Hash identifier: zjQtRi+pJ7pIQZ57bVqCaQqCx5oN5Vz/NIailfqTUfQ=
Subject key identifier: 9A:FA:85:C5:D9:13:5A:1D:71:69:25:4E:31:2F:A7:FC:77:E9:9E:5C
Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial: A3
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/63E37ACA29B311EFBE0EBC5EC4F9AE02.roa
Signing time: Thu 13 Jun 2024 18:33:12 +0000
ROA not before: Thu 13 Jun 2024 18:33:12 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 7018
IP address blocks: 103.135.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Validity
Not Before: Jun 13 18:33:12 2024 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=666b3b68-57a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:65:66:9d:62:ba:c1:03:68:58:d2:fa:34:
52:22:a1:b2:d0:da:ea:af:8c:de:be:dd:20:f1:c6:
05:08:17:bd:5b:de:30:59:0c:c7:2f:90:8a:89:6a:
ca:d1:58:30:82:17:d1:71:6f:34:0f:16:7f:9a:06:
d0:8b:c4:56:b1:69:54:cd:57:ab:a9:d5:78:ea:c0:
da:c7:e6:d4:68:bb:14:e9:8a:56:90:53:87:9d:b3:
2a:b2:8a:b7:03:92:22:9d:ca:82:9d:ec:07:40:ef:
9e:d4:d6:98:e1:d4:a8:9c:e0:d7:93:ad:35:16:bc:
f5:98:29:d5:a8:be:ec:3b:d8:11:3c:00:f3:f5:17:
44:c2:34:4a:1e:4e:a3:8a:b8:70:c1:51:d6:24:93:
27:76:02:ce:c8:3d:de:3b:56:ec:4c:c2:44:34:88:
26:bf:07:db:cb:40:c6:de:1f:b0:5e:f2:f1:c7:f0:
d1:9d:15:2f:fb:81:09:19:d1:29:0e:6f:1a:2f:3f:
36:4a:e4:d0:07:7c:63:f2:10:51:82:25:0f:37:46:
b7:0b:2d:ba:21:e4:cf:b3:ac:90:23:9d:1a:02:cd:
eb:02:32:16:27:ec:59:34:99:a9:74:3d:41:d8:1f:
72:ee:99:60:ac:e0:55:63:82:37:ac:1b:81:7e:6d:
b8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FA:85:C5:D9:13:5A:1D:71:69:25:4E:31:2F:A7:FC:77:E9:9E:5C
X509v3 Authority Key Identifier:
keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/63E37ACA29B311EFBE0EBC5EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.44.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ec:26:c9:e6:79:96:1d:e0:29:1d:7a:df:3a:dd:05:40:28:
26:94:3c:49:28:b6:18:51:8f:ba:ae:d8:20:25:5f:20:75:12:
12:49:9d:02:d6:32:0a:15:0d:b7:a1:41:31:cd:55:dc:3d:bf:
dc:b0:b9:7f:30:d6:d7:e6:1d:30:83:98:d6:4f:b8:1a:40:c8:
33:7b:83:fa:ba:85:29:22:09:6e:5f:f6:bd:21:23:9f:d3:c2:
26:d4:e1:92:4a:fd:ea:80:9e:4a:29:98:f3:d3:b4:59:15:58:
58:ea:05:ab:7d:a8:5c:db:6f:7e:8e:cd:fc:e1:a6:60:82:7f:
d6:77:e4:a0:a0:fc:4f:c7:24:77:f9:14:87:b3:ee:73:e1:2b:
d7:9d:37:b6:34:3f:b6:52:c5:f4:be:a3:43:ae:8b:25:c2:bf:
dc:44:c5:64:01:33:90:26:0f:d9:bc:c6:26:d1:c9:ef:42:4e:
7d:29:93:37:cc:7f:9f:7f:eb:84:21:68:44:ce:ae:d1:96:4f:
4a:e8:75:34:e3:f6:6f:74:0c:95:e5:aa:9b:f3:a1:d7:6d:5a:
41:1a:40:fc:52:0a:e6:bd:83:fc:09:3f:31:bd:52:46:f8:3c:
eb:e5:62:2a:da:f8:8f:c6:0d:e2:41:1c:0c:9a:2c:13:0e:fd:
34:79:77:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:52:38 2025 by rpki-client