Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/F0A35E2AAB3811EEA7367E13C4F9AE02.roa
File: F0A35E2AAB3811EEA7367E13C4F9AE02.roa (raw, json)
Hash identifier: PdrDJC2ZMYYx3k9/BaKsauBi85HRAUbTfOLVb1Hw4J8=
Subject key identifier: E2:1D:A8:32:43:94:F4:2E:53:C8:89:C1:30:E0:6C:C9:98:69:25:98
Certificate issuer: /CN=A9178AF2/serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Certificate serial: 024C
Authority key identifier: 10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/F0A35E2AAB3811EEA7367E13C4F9AE02.roa
Signing time: Thu 04 Jan 2024 19:40:13 +0000
ROA not before: Thu 04 Jan 2024 19:40:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5065
IP address blocks: 43.243.193.0/24 maxlen: 24
45.113.82.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178AF2, serialNumber=1005CCD5E18230FBA9ADD3D27F85DA38F13E4172
Validity
Not Before: Jan 4 19:40:13 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6597099d-0447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:19:d3:61:52:7f:e4:02:20:fd:a0:98:44:
e2:b3:06:b3:dd:a9:e0:ba:82:2c:49:4b:43:ed:b7:
34:53:8b:84:1c:d3:80:b9:1a:9c:9b:25:eb:f6:5d:
48:79:5f:58:f2:77:89:d5:76:c6:b2:d8:7d:c1:4c:
cf:2c:bf:c4:ff:df:fe:50:78:3c:82:9c:5d:70:93:
66:eb:16:c0:b0:fa:a5:d4:f6:10:8a:64:15:0a:37:
0f:9a:ac:59:46:44:39:1d:4d:ef:1a:b8:b0:09:74:
2e:2c:0d:5c:8c:1b:3e:35:62:7f:b0:eb:0d:85:fc:
a5:13:e3:d2:20:62:42:eb:ac:6e:14:0f:5a:a1:c0:
1b:2a:b9:2a:68:83:0d:4b:b0:a6:f8:2f:1a:22:e4:
87:db:8f:e3:2d:27:35:85:2e:1b:94:27:ee:d2:e1:
07:11:d3:a4:ae:8a:5f:34:f4:f0:d6:27:d5:26:45:
fd:6a:1a:34:58:59:55:1b:ce:30:93:53:0a:c2:80:
6c:15:ce:d0:96:97:41:03:c7:3d:9a:c9:af:5d:44:
3d:df:11:18:81:d9:3e:28:a0:bb:f4:5d:df:98:fe:
23:03:b5:51:18:ab:de:66:59:3e:38:de:33:87:3a:
d3:58:36:df:6a:0e:fc:8f:ed:36:1b:f6:e4:b5:2d:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:1D:A8:32:43:94:F4:2E:53:C8:89:C1:30:E0:6C:C9:98:69:25:98
X509v3 Authority Key Identifier:
keyid:10:05:CC:D5:E1:82:30:FB:A9:AD:D3:D2:7F:85:DA:38:F1:3E:41:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/EAXM1eGCMPuprdPSf4XaOPE-QXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAXM1eGCMPuprdPSf4XaOPE-QXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178AF2/73C88792E06711ECB9D2FF81C4F9AE02/F0A35E2AAB3811EEA7367E13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.243.193.0/24
45.113.82.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a8:2e:86:27:4c:6e:2f:24:ba:47:3f:a0:2d:5d:21:00:76:
a5:b4:de:ab:59:93:0b:dc:de:bc:09:37:48:d4:7f:74:6b:3a:
9d:e1:0f:cb:72:6a:5f:7b:3d:c7:67:67:28:cb:6b:82:9d:95:
c5:da:d3:57:d2:fd:da:58:4c:f7:d4:70:0f:e4:41:04:b3:20:
72:cd:55:bf:23:46:20:77:ee:10:11:83:49:a0:fd:7b:81:4e:
2f:ae:45:c1:29:c3:89:02:ef:12:19:47:64:46:1b:95:83:34:
04:b2:09:0d:01:7a:c1:a8:d4:83:06:99:0e:c9:a8:35:87:ed:
e0:57:18:dd:c5:b8:2c:fb:67:f8:cc:c2:ad:e0:8c:fc:68:f6:
d2:bd:b0:1b:bb:15:d7:01:28:87:a0:4a:0e:2c:67:b4:bf:48:
2e:44:8e:9b:f8:27:5b:a9:d9:1b:f0:63:91:de:da:a5:06:0a:
a8:19:c8:5c:97:71:b1:a2:d3:b1:8a:34:8a:d2:0f:55:01:e8:
1e:ce:94:31:01:b1:7b:a6:36:55:ce:b7:58:00:eb:f0:7a:d6:
70:34:05:06:ae:06:02:cd:77:c7:b5:77:e6:62:2a:cd:33:04:
f9:35:60:82:bc:63:71:03:b5:64:89:01:db:7e:46:5d:bb:74:
1b:dd:8c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:05:18 2025 by rpki-client