Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/E3F93A2C4CB611EE850B471CC4F9AE02.roa
File: E3F93A2C4CB611EE850B471CC4F9AE02.roa (raw, json)
Hash identifier: +uxEhtnZDupF3CTd5shcfrKL4HY26jLQ/YCWe4UCFac=
Subject key identifier: 85:A3:2A:40:4E:F2:36:5E:FE:F7:62:84:AD:A2:A6:04:D8:4A:8A:05
Certificate issuer: /CN=A9186BCC/serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473
Certificate serial: 06
Authority key identifier: FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/E3F93A2C4CB611EE850B471CC4F9AE02.roa
Signing time: Wed 06 Sep 2023 13:11:29 +0000
ROA not before: Wed 06 Sep 2023 13:11:29 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 50673
IP address blocks: 103.42.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6 (0x6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186BCC, serialNumber=FD45CC5403C64CFB230AA7DEED10BC68228D7473
Validity
Not Before: Sep 6 13:11:29 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=64f87a81-0b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:5b:08:95:fd:ec:ad:93:0a:59:f2:95:9d:
87:43:10:a2:34:8e:1f:87:d1:b8:46:83:b0:1c:63:
88:80:9d:cf:04:bd:1e:76:5f:2a:03:f9:23:c8:28:
d1:88:02:84:63:70:75:fc:04:12:88:d8:3d:65:0e:
ee:04:1b:d8:b3:d0:ee:d3:66:71:56:fc:04:6d:7e:
ff:28:bd:43:f3:30:67:04:f1:4b:87:26:30:49:22:
5d:dc:12:7b:22:bc:56:9a:c7:c9:30:a5:21:cd:33:
ed:93:64:25:60:e7:19:a8:36:5f:9f:d6:fe:07:1b:
b6:79:29:e9:f1:c6:41:96:0b:9f:b7:5e:1e:6a:c9:
fe:b6:56:1a:2d:dc:24:71:1e:ef:e9:a9:a4:91:41:
0f:2a:6f:5b:a2:b6:98:04:32:56:eb:a6:54:55:fe:
f5:22:c5:ea:1d:5b:9d:0d:40:ef:ba:78:46:d4:8d:
d5:33:f0:b7:b0:20:60:78:66:99:35:d6:4a:a3:18:
6f:3d:35:c9:7d:98:9d:5e:26:96:e7:49:66:39:70:
9b:4f:3e:bd:86:c7:58:f4:6a:85:51:2b:06:d2:6b:
c8:45:bd:78:23:04:0e:b3:55:37:fa:bf:88:f5:c9:
5c:ca:5c:c5:68:cd:1a:bf:7b:40:00:99:51:09:1b:
d1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A3:2A:40:4E:F2:36:5E:FE:F7:62:84:AD:A2:A6:04:D8:4A:8A:05
X509v3 Authority Key Identifier:
keyid:FD:45:CC:54:03:C6:4C:FB:23:0A:A7:DE:ED:10:BC:68:22:8D:74:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/_UXMVAPGTPsjCqfe7RC8aCKNdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_UXMVAPGTPsjCqfe7RC8aCKNdHM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186BCC/904E50F048D411EEB5D6A17BC4F9AE02/E3F93A2C4CB611EE850B471CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.42.240.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:28:75:6d:1f:e9:1d:c9:e9:27:06:ce:eb:69:a9:90:9e:71:
60:22:21:1e:d5:10:b1:e5:65:10:cd:1d:43:06:11:71:91:12:
53:c1:cb:37:63:ef:d5:86:89:df:a2:b0:3a:1e:e9:9b:80:a7:
21:15:f3:59:a7:68:69:05:38:09:e4:a6:dd:29:a9:0d:1e:84:
14:c7:20:f0:87:9b:32:51:05:0c:32:4e:44:19:bb:d7:6b:ab:
89:84:d5:76:5a:01:7b:87:2d:91:93:ea:ef:c0:ae:e6:95:45:
26:38:c8:e4:13:ce:60:9d:d1:46:6a:ea:89:00:b7:c4:44:66:
b3:c0:e4:b2:fa:0e:6e:48:d9:a3:81:1f:2f:49:f3:ad:f9:23:
f7:b4:9e:c5:fb:f6:ad:e0:fd:46:c8:4e:e7:1f:35:2a:bd:e5:
7a:43:5f:24:ea:fc:f1:89:62:50:80:18:dd:96:23:81:e5:04:
bc:4a:e4:b4:97:40:d8:ce:55:5c:75:14:10:54:ea:81:56:2a:
60:f8:db:55:fd:c7:3f:6b:22:df:5c:79:1b:ad:09:97:c6:40:
c2:34:32:5e:90:3f:63:4d:c6:d7:87:3a:b3:af:62:45:27:fc:
c1:10:c7:2b:d0:59:99:53:2b:46:18:fd:05:61:1d:b4:53:a5:
e7:16:58:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:02:13 2025 by rpki-client