Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/05961610E83411EDAC94800CC4F9AE02.roa
File: 05961610E83411EDAC94800CC4F9AE02.roa (raw, json)
Hash identifier: Z0uYG2lpdmwmLIZOsWUAokvHEhbdca+UtMmc0q1POVk=
Subject key identifier: 6C:ED:24:86:03:46:68:C7:1A:69:7C:13:A9:41:FF:3F:88:47:19:41
Certificate issuer: /CN=A9165362/serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Certificate serial: 039F
Authority key identifier: E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/05961610E83411EDAC94800CC4F9AE02.roa
Signing time: Mon 01 May 2023 15:22:45 +0000
ROA not before: Mon 01 May 2023 15:22:45 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 142127
IP address blocks: 103.173.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 927 (0x39f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165362, serialNumber=E5E5D168A0E1096EA1C3F9B7F8E8D758EAEA23F3
Validity
Not Before: May 1 15:22:45 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=644fd945-a34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:35:67:f1:60:68:06:30:b9:9b:00:95:f5:
22:af:46:07:a7:70:f9:52:ac:88:5f:1a:90:6d:91:
af:4a:5d:7c:e5:da:b5:a3:dd:7b:19:03:e2:e9:e5:
b2:20:9b:32:7d:a4:2b:bb:fa:f1:55:af:ff:9c:7a:
03:12:8d:f2:a0:07:74:b6:90:4a:af:ca:38:2b:55:
98:13:60:65:94:ec:c4:1c:92:96:ce:76:48:3a:e9:
4f:89:02:c6:76:3a:76:c5:ca:58:b1:ce:db:a5:ae:
77:c6:1b:07:23:a0:1c:b4:7a:f0:93:47:da:d2:69:
25:83:8f:e4:72:95:60:1f:35:a7:e3:a2:df:12:cd:
50:d7:a2:0f:89:8c:b6:61:0e:4c:75:0a:06:63:f7:
41:78:b9:3f:4c:d5:4d:5e:97:4c:72:fb:91:39:95:
eb:17:04:f0:09:15:14:72:a2:93:a3:04:30:45:00:
aa:51:e9:7f:aa:85:93:46:bd:07:bc:c4:30:99:83:
a3:23:d8:d2:05:51:c5:f8:61:32:ae:a5:fd:cb:f4:
35:33:87:4c:2c:be:41:79:58:52:83:7b:37:e4:62:
d8:24:54:a0:a5:ad:a2:b3:26:88:68:b8:5b:1d:8a:
7f:6f:54:29:67:90:19:ab:60:60:6d:65:9f:ea:82:
4d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:ED:24:86:03:46:68:C7:1A:69:7C:13:A9:41:FF:3F:88:47:19:41
X509v3 Authority Key Identifier:
keyid:E5:E5:D1:68:A0:E1:09:6E:A1:C3:F9:B7:F8:E8:D7:58:EA:EA:23:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/5eXRaKDhCW6hw_m3-OjXWOrqI_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5eXRaKDhCW6hw_m3-OjXWOrqI_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165362/D9CBF80A10B311ECA31DF82CC4F9AE02/05961610E83411EDAC94800CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:90:0d:99:c6:f7:5a:96:ae:07:65:c8:e3:cd:f6:9c:16:6c:
4a:97:91:74:b8:02:a0:1d:8e:da:29:b0:82:f3:13:ae:dd:0b:
57:f6:3f:07:b4:0a:ff:ad:3b:48:6b:81:64:af:64:81:19:6a:
d0:90:dd:dd:e5:3b:f9:9e:1f:19:a4:36:06:40:c0:a4:a4:95:
6d:ab:ec:25:78:c0:78:54:9e:e4:4e:28:4e:06:af:d9:24:03:
fb:92:79:86:cd:ed:8b:70:7d:fb:0e:6c:bb:a6:bd:87:a1:5c:
7f:22:ae:83:e5:3f:78:07:d1:4e:9d:c7:99:0e:65:44:34:00:
94:0f:34:1f:0b:73:15:b0:3f:dc:08:f6:c1:22:eb:55:ea:b5:
8d:ae:07:ee:d2:fa:30:5e:47:4a:72:33:f2:90:cd:bb:ae:3a:
1d:5a:8f:bb:9a:20:ed:8a:fa:12:6d:d1:c2:c6:f1:43:5d:a1:
d9:bc:38:9e:c5:bb:f9:a5:b2:dd:d6:82:66:54:1f:56:14:69:
7b:da:f7:12:97:48:bc:1f:bc:ab:53:42:00:88:62:62:d7:b1:
bc:81:f3:a5:40:f8:08:4c:ec:a1:58:c3:8d:57:8a:c8:bd:9a:
07:05:f0:dd:68:8d:d1:c9:9c:3e:9c:ae:67:63:45:65:71:a6:
35:e4:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:19:59 2025 by rpki-client