Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/4B235F72701811EFA0E8A02AC4F9AE02.roa
File: 4B235F72701811EFA0E8A02AC4F9AE02.roa (raw, json)
Hash identifier: bv2dY2MHy5uQhApQ2+MEae0aqJT7J0HRYTzovfOAD+Q=
Subject key identifier: 87:3B:C9:14:25:E6:5F:70:44:50:64:C8:05:7D:10:3A:CD:8D:39:E8
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 0348
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/4B235F72701811EFA0E8A02AC4F9AE02.roa
Signing time: Wed 11 Sep 2024 08:31:51 +0000
ROA not before: Wed 11 Sep 2024 08:31:51 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 137451
IP address blocks: 43.230.11.0/24 maxlen: 24
43.255.117.0/24 maxlen: 24
103.235.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 840 (0x348)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Validity
Not Before: Sep 11 08:31:51 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=66e15577-16b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:3d:71:aa:8c:9b:d3:70:37:60:c1:38:9c:
43:7c:b6:d0:0b:a5:10:0e:5d:8c:5d:4a:6f:a6:74:
8f:be:ab:cf:23:f8:9c:7f:4f:6a:80:fd:ad:3b:0a:
a4:d0:df:4f:df:68:53:9c:0b:1e:d6:e0:19:da:9a:
e1:a3:b8:03:bf:e4:63:6a:52:54:de:49:da:d2:35:
67:1e:0f:9b:73:e9:aa:dd:7f:07:98:be:ad:51:b7:
c2:f4:45:48:83:e6:62:d2:47:cd:a1:4e:2c:c1:94:
c3:cd:f6:1d:f8:29:40:77:f1:a0:45:b0:26:21:6c:
10:90:0f:c7:19:78:ac:c3:96:41:3d:b3:b2:38:9d:
f2:98:02:71:46:2a:02:6b:21:88:4a:c5:63:b1:b8:
21:66:b6:00:d6:80:31:99:82:bf:12:29:f6:ca:8b:
71:d0:11:be:39:59:ae:f7:08:c1:fa:8e:08:61:f2:
5f:6b:70:ee:cb:72:7c:76:9a:74:55:d7:4d:6f:e8:
ec:4b:2f:56:63:2f:76:dc:b1:c7:ac:5a:77:50:17:
fa:3a:1c:21:e8:d3:db:34:82:ab:63:37:d5:f0:82:
94:70:f1:b7:4b:e1:35:59:ad:92:f9:6e:06:12:16:
2b:76:de:a7:1e:38:11:2c:ae:d4:c1:98:47:60:b5:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3B:C9:14:25:E6:5F:70:44:50:64:C8:05:7D:10:3A:CD:8D:39:E8
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/4B235F72701811EFA0E8A02AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.230.11.0/24
43.255.117.0/24
103.235.19.0/24
Signature Algorithm: sha256WithRSAEncryption
57:fa:48:5e:05:cf:df:f0:34:f4:b0:40:2e:65:d9:11:b6:c8:
71:b8:04:d4:06:8f:22:b1:3f:bc:5e:30:6f:d8:12:e9:58:7f:
37:8f:72:51:ab:6c:c6:9d:96:39:a9:ed:8e:f5:f6:86:00:67:
e9:31:ca:10:97:de:26:37:fe:e0:d0:57:dc:b7:3a:b9:2e:6c:
2d:4d:47:0f:0d:f3:61:06:b8:45:16:5e:16:f1:35:08:35:dd:
0c:bb:8d:cb:b5:70:f5:6d:89:d8:f2:47:11:a4:e9:1e:c7:eb:
19:a4:3f:c3:35:1d:02:ff:58:3a:ef:74:41:31:21:db:13:9f:
02:81:2a:07:53:0b:1e:8c:a2:83:95:fc:c8:10:bf:50:b2:4b:
20:8f:be:fc:4d:8e:7a:d9:63:c6:11:5a:84:e1:01:ec:d2:b2:
de:8c:1c:ac:a0:c1:03:d2:af:61:71:95:0e:23:fa:36:86:80:
10:7c:56:40:cf:48:4c:91:6a:63:fe:a3:e5:b2:aa:dd:57:28:
fa:f3:55:c0:11:83:86:0d:bb:02:33:90:67:1e:b8:f9:a0:bd:
ce:42:66:9b:93:6c:82:4e:1d:c7:a6:52:c2:d5:93:f2:89:f4:
05:54:fb:bc:f7:cb:30:f3:b6:46:5a:19:2c:8c:39:14:fd:2a:
19:89:1c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:25:14 2025 by rpki-client