Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/425CC4DAAA4E11EF9D8A4460C4F9AE02.roa
File: 425CC4DAAA4E11EF9D8A4460C4F9AE02.roa (raw, json)
Hash identifier: P4zJ7Jd+dn3sbCteOeoTWImYz955dIan+LSjsCEgH40=
Subject key identifier: D2:AA:23:3F:55:8C:15:C6:6E:7E:31:B5:31:7E:29:B2:AA:CC:B5:19
Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Certificate serial: 0196
Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/425CC4DAAA4E11EF9D8A4460C4F9AE02.roa
Signing time: Sun 24 Nov 2024 10:24:17 +0000
ROA not before: Sun 24 Nov 2024 10:24:17 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 137526
IP address blocks: 103.20.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 406 (0x196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Validity
Not Before: Nov 24 10:24:17 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=6742fed1-17fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ca:b8:4a:db:e6:88:67:44:7d:47:f2:8c:41:
49:0e:c1:30:12:d4:2b:c4:d9:45:a6:6f:95:a0:d4:
b8:c8:65:03:25:a1:8f:53:d6:20:6b:31:72:0e:0f:
3d:c6:27:d2:4d:62:9f:36:12:ee:25:7c:0c:df:b7:
09:89:c2:20:07:a3:0c:80:b8:b1:a3:5e:e5:d6:2e:
76:b0:12:a2:97:07:30:d1:fb:a4:e3:d9:b0:c4:62:
29:2d:e1:95:ef:d4:99:1a:9c:d4:7f:59:d6:36:29:
77:51:96:9c:68:1b:b3:64:a2:03:ed:5b:52:80:1c:
67:12:76:7c:28:dd:be:c1:2a:2d:59:32:cf:60:81:
7f:19:f2:0b:a1:8f:b7:30:ba:64:9b:cb:e4:ea:ff:
7b:45:8d:e3:cf:99:02:d0:e1:fc:e2:5a:8f:ca:18:
76:65:a3:96:8e:09:79:fb:a1:12:3e:91:9c:ac:8c:
47:8a:1a:8c:b2:96:7c:67:c4:09:db:56:72:b7:c4:
3d:e6:d6:08:09:ee:7f:b6:a4:33:8a:b3:c6:cd:2f:
a0:10:c6:66:98:a6:50:65:6c:5a:fc:a8:6c:3a:d4:
0d:22:7e:36:59:d1:e3:34:2b:83:cd:38:e6:06:cd:
c7:2a:6e:0e:0c:74:db:c6:76:e5:e8:c0:ad:ac:ab:
73:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AA:23:3F:55:8C:15:C6:6E:7E:31:B5:31:7E:29:B2:AA:CC:B5:19
X509v3 Authority Key Identifier:
keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/425CC4DAAA4E11EF9D8A4460C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:10:7d:34:13:28:54:4f:55:dd:13:0b:17:e7:09:05:67:99:
a3:89:8a:a0:b0:5c:b6:a7:a3:69:49:10:8a:78:b6:3b:3f:8f:
5b:af:1b:a3:94:19:8e:c1:96:6e:f0:2d:87:35:45:c5:fb:88:
97:1a:d5:db:be:cb:f2:22:c7:71:be:54:32:e9:ff:cc:de:11:
31:c2:30:56:8d:ef:09:e8:e4:ed:da:6a:74:d9:f1:34:5e:98:
99:2d:7e:0a:3b:a0:c9:50:48:27:df:79:09:1f:d5:ab:58:7d:
3c:82:14:c4:ef:09:80:40:0c:cb:c4:6d:ed:ab:b3:19:b1:68:
d1:45:15:05:dc:8d:be:61:88:ad:bd:c0:16:2c:46:05:83:96:
e5:b0:db:58:36:60:4c:d0:88:37:6b:19:70:35:b8:61:f3:e4:
1d:ad:92:79:9b:4b:77:70:cb:db:60:cf:16:f7:d8:d4:0b:51:
43:e9:2a:0d:89:89:f0:aa:57:24:70:0a:a5:1c:73:f8:a9:b1:
f7:a3:fb:74:2a:d4:a1:16:47:00:1f:4b:ab:7e:f2:42:03:e1:
cd:38:62:50:83:2b:97:95:25:35:96:04:c8:33:54:6d:d2:a6:
f8:5f:3d:0d:54:e2:ae:74:dc:62:d9:68:ff:46:0f:e0:13:01:
2c:d8:80:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:34:30 2025 by rpki-client