Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/FCCF8F6E5B8111ED85FB0456C4F9AE02.roa
File: FCCF8F6E5B8111ED85FB0456C4F9AE02.roa (raw, json)
Hash identifier: qp0p19FgxJZz7DqlZ+b6D0Wx5IorPdvXYrQ3BI/Cxqg=
Subject key identifier: C0:53:12:A5:9D:E3:BC:82:EA:68:8F:E2:5A:1F:84:B0:84:60:97:13
Certificate issuer: /CN=A9176909/serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Certificate serial: DA
Authority key identifier: 3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/FCCF8F6E5B8111ED85FB0456C4F9AE02.roa
Signing time: Fri 01 Dec 2023 05:16:03 +0000
ROA not before: Fri 01 Dec 2023 05:16:03 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 135075
IP address blocks: 103.20.242.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 218 (0xda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9176909, serialNumber=3B48AB861652FAEED7E1D12583F16BB7FBB28913
Validity
Not Before: Dec 1 05:16:03 2023 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=65696c12-b09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:48:d8:0c:92:32:9a:d1:33:67:c6:b9:b4:
a9:77:97:b7:e6:12:7e:8a:23:06:94:cf:77:a2:45:
98:a5:14:4f:c0:d6:0f:53:88:ca:12:9a:a0:70:27:
78:3a:01:9b:65:c3:8f:48:8f:95:ef:f8:b1:25:29:
08:cb:a9:58:2e:15:4e:85:70:7c:76:27:1d:81:3f:
32:75:b4:9e:ca:2f:4c:90:da:9b:7a:71:cc:56:0c:
0a:66:1e:1e:6c:ac:00:6a:6f:de:35:39:ae:98:c3:
2f:33:c5:f8:85:4b:1f:08:59:7e:04:c4:27:8e:9f:
1d:a5:1c:d9:e9:4c:c4:33:53:af:10:b9:cb:0e:6d:
22:d6:25:a5:33:98:51:8a:8c:cb:69:90:3e:b7:03:
4d:ea:ba:6a:b6:ae:ff:aa:a8:f8:88:94:fb:22:41:
42:1c:d4:1f:87:ac:87:26:d7:dd:13:ff:1e:1a:de:
c9:e6:df:81:d0:0a:83:fa:47:f5:49:a6:97:10:0a:
29:28:04:e3:97:0f:25:55:bd:d6:d3:7f:78:83:cb:
f9:f4:87:8f:05:94:81:b0:47:c5:dd:fe:0d:e2:00:
2f:ee:6c:fe:ca:e5:b8:fd:db:61:cd:87:cf:0e:23:
38:c0:f7:dc:d4:b4:77:49:0c:7f:8c:d9:cc:ff:72:
3e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:53:12:A5:9D:E3:BC:82:EA:68:8F:E2:5A:1F:84:B0:84:60:97:13
X509v3 Authority Key Identifier:
keyid:3B:48:AB:86:16:52:FA:EE:D7:E1:D1:25:83:F1:6B:B7:FB:B2:89:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/O0irhhZS-u7X4dElg_Frt_uyiRM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O0irhhZS-u7X4dElg_Frt_uyiRM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176909/9ABACAC84DCB11ED82961B36C4F9AE02/FCCF8F6E5B8111ED85FB0456C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.242.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:d5:84:69:dd:05:65:cb:69:4a:a9:72:65:72:e8:7a:c2:aa:
9f:99:bd:e0:ff:47:80:c6:11:44:c8:57:c9:00:0e:b7:b9:b0:
d6:8c:e0:58:fa:56:e9:44:2e:4d:17:fd:44:fc:06:52:56:1c:
b8:04:fb:bb:88:b0:ec:24:f8:47:5f:68:bf:82:08:78:52:3b:
4d:77:52:4a:3a:c6:78:3d:cf:9c:41:37:a7:fe:11:54:a5:76:
c9:03:d8:e9:30:bb:3c:bb:15:98:09:6b:90:d8:41:2a:06:78:
34:10:bf:6f:81:79:17:2d:ab:b9:0b:50:84:ca:28:fa:88:7f:
25:6a:2f:77:0d:6f:40:e5:76:37:fd:79:cd:ac:65:5b:04:d2:
59:1e:57:74:6b:7f:f2:7a:ed:a7:51:d5:77:6d:fc:a1:7f:4a:
07:28:7d:0c:15:06:7d:dc:d5:c0:37:e4:81:9b:81:f8:3b:3a:
62:56:37:2a:a9:4f:85:47:4b:cc:48:c9:c1:f8:15:30:48:6a:
9c:0f:de:ff:99:86:a0:6c:fe:20:1c:61:72:01:d7:4c:b1:91:
9d:5c:b1:19:c4:c7:82:8c:ff:de:fc:4b:38:83:d3:25:bc:6f:
b8:77:2d:84:a8:4c:33:f3:f9:74:5e:a8:ce:a4:33:4f:50:79:
d3:54:78:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:30:05 2025 by rpki-client