Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/726E609ADF3211EDA19BBC85C4F9AE02.roa
File: 726E609ADF3211EDA19BBC85C4F9AE02.roa (raw, json)
Hash identifier: RLhgLA/4vaGApkJ4n8G7dI2gdMhYnaXWL/RuG77TxuE=
Subject key identifier: B7:05:D4:DE:38:B3:CD:A0:2B:12:8E:25:B3:E3:18:B0:55:5F:92:EF
Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28
Certificate serial: 0A9E
Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/726E609ADF3211EDA19BBC85C4F9AE02.roa
Signing time: Thu 20 Apr 2023 04:18:48 +0000
ROA not before: Thu 20 Apr 2023 04:18:48 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 139872
IP address blocks: 103.145.208.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2718 (0xa9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28
Validity
Not Before: Apr 20 04:18:48 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6440bd28-8cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:52:11:08:76:61:d9:aa:23:06:6a:f9:01:
5f:f2:65:64:da:4f:11:59:67:fc:50:d7:cc:6d:f8:
5b:0a:7d:40:c3:cb:25:f0:52:94:72:a5:2f:ae:e0:
48:1e:d8:6b:32:db:0b:e5:e1:af:4e:33:06:d6:6a:
b2:04:76:f2:a2:31:48:43:d7:5f:c9:07:48:b2:f0:
e3:58:e7:fa:6b:02:3d:35:c2:8c:86:0f:65:aa:5f:
f5:01:34:ed:13:6c:f1:58:ad:4d:3a:a5:82:9a:77:
b2:a7:bd:1a:0f:9b:30:1f:f6:30:27:dc:db:00:24:
fe:26:cb:97:79:f9:15:9a:1f:f4:53:e8:68:4a:f7:
fc:e5:29:8f:fa:3d:27:d6:b5:55:49:90:ac:85:b1:
37:f0:78:98:7d:30:eb:4c:0f:5d:6c:7a:05:cc:cb:
64:a8:65:a1:31:2b:29:22:1a:61:e3:b7:53:e5:ec:
c8:2c:5f:33:15:ec:96:9a:21:af:90:2d:a4:fd:e4:
67:23:db:1b:d6:94:99:db:0a:ae:b2:39:ab:10:c3:
71:e0:f6:01:85:e6:4f:f7:3b:be:7b:63:b9:0b:9f:
52:70:49:07:c6:1b:23:20:df:9d:5b:3a:0c:84:70:
7c:fe:44:7f:d6:89:3a:75:ef:02:a1:cf:67:ec:16:
a5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:05:D4:DE:38:B3:CD:A0:2B:12:8E:25:B3:E3:18:B0:55:5F:92:EF
X509v3 Authority Key Identifier:
keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/726E609ADF3211EDA19BBC85C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.208.0/23
Signature Algorithm: sha256WithRSAEncryption
19:c6:cb:f6:4e:71:c5:89:8d:fd:12:ed:1e:d8:be:14:c1:44:
38:24:55:81:3a:df:73:0e:3c:94:ad:e0:22:26:b1:14:26:52:
d3:a5:bd:d3:8d:ea:f0:f8:d0:ae:e4:c8:9d:84:c9:ac:86:b3:
63:c5:67:26:bc:fb:15:c9:13:6c:a7:25:65:81:df:28:40:b7:
92:19:05:25:f5:cf:d0:4f:da:a5:19:84:fa:e6:7d:01:ad:2c:
fe:91:2b:09:a8:1a:02:6b:05:89:53:23:26:1b:0b:a8:87:a6:
ba:b7:bc:dd:2e:fa:f6:3f:33:57:b9:87:03:13:76:43:db:c2:
d9:90:b1:90:18:34:4a:8c:4c:20:4b:fd:54:51:54:11:79:18:
d8:17:ef:b8:62:50:a3:fd:85:cc:b2:be:4a:fe:47:ac:2f:e6:
48:a3:2a:71:39:50:06:22:e5:e3:5e:5d:85:02:ea:a2:78:1d:
40:66:fc:12:75:ef:eb:dc:bd:17:41:12:9f:ee:0b:c9:bb:c0:
12:8e:78:8d:0c:20:6d:74:b7:03:0f:b0:c0:14:f3:2b:87:17:
0a:9a:8e:a9:cb:55:b1:36:6f:8b:f0:09:c5:da:0f:92:02:99:
f0:4e:ac:9e:3c:28:b7:58:9f:14:c5:85:90:55:dc:10:00:d8:
c2:0c:cb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:32:04 2025 by rpki-client