Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/AB33887E726311EDBFC1323DC4F9AE02.roa
File: AB33887E726311EDBFC1323DC4F9AE02.roa (raw, json)
Hash identifier: 84kKtrFuUvrggML+2GSRHLKUK9oLNsoM9J+nU3/9wTc=
Subject key identifier: 87:EE:BC:D9:CC:8D:DE:7F:A4:7A:7C:C7:56:9E:E7:CE:17:92:97:C0
Certificate issuer: /CN=A9188F6D/serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Certificate serial: 0B21
Authority key identifier: FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/AB33887E726311EDBFC1323DC4F9AE02.roa
Signing time: Fri 02 Dec 2022 17:06:32 +0000
ROA not before: Fri 02 Dec 2022 17:06:32 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 59239
IP address blocks: 103.109.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2849 (0xb21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9188F6D, serialNumber=FD06B1508557F65F68CCBA3C203ECAAD075DD19B
Validity
Not Before: Dec 2 17:06:32 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=638a3098-03ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d4:d3:96:50:a6:27:c0:30:74:9d:21:98:62:
03:e9:a0:ba:bb:f1:00:a5:92:70:00:71:b5:f5:d6:
4c:6f:41:28:15:26:f7:5f:2c:09:8d:68:6b:bf:ae:
be:fa:df:79:b3:ce:6b:45:7c:c2:02:5b:c5:c2:10:
2e:77:ee:d8:fd:d4:b6:32:56:bc:69:d0:88:34:58:
a6:e0:a2:0e:f0:f0:42:3a:87:85:78:16:7a:c1:3a:
93:95:67:b7:a3:67:e8:a7:43:3c:12:f3:c7:aa:e4:
1f:19:ee:9a:c8:ca:2c:72:28:9b:28:4b:8b:a2:01:
1e:30:f6:8a:86:ab:c0:28:ec:82:98:85:4e:09:4e:
28:d8:d0:17:e0:94:08:5b:45:23:76:09:86:6f:a3:
95:db:a1:2c:f4:72:ea:9c:a4:bf:43:43:36:28:b5:
e7:61:3a:fc:aa:16:95:d0:85:1f:38:5e:af:19:fa:
df:19:44:f9:08:e8:ca:95:0d:d4:11:09:80:36:72:
0a:57:43:3a:79:c7:f3:19:6d:b8:da:eb:61:c4:c6:
cb:26:3f:f8:b7:b7:4f:b3:48:91:0d:70:cb:c4:ec:
de:48:f6:75:e8:98:ea:09:57:4b:6f:69:f0:43:e1:
ed:68:b1:48:07:86:c1:ac:92:51:b9:e4:3e:b0:c1:
a9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:EE:BC:D9:CC:8D:DE:7F:A4:7A:7C:C7:56:9E:E7:CE:17:92:97:C0
X509v3 Authority Key Identifier:
keyid:FD:06:B1:50:85:57:F6:5F:68:CC:BA:3C:20:3E:CA:AD:07:5D:D1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_QaxUIVX9l9ozLo8ID7KrQdd0Zs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F6D/9A5B1A9EF66A11E9BF50697AC4F9AE02/AB33887E726311EDBFC1323DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.93.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:22:2a:fa:0b:95:4e:3d:17:f4:bb:22:e3:20:27:f6:0f:8b:
06:1c:ae:b8:90:ff:6d:da:0f:7f:e2:39:54:bb:9a:05:0c:f8:
8f:44:89:30:08:76:8c:59:4e:11:b8:d1:e3:c7:cf:22:1e:48:
8d:ae:4f:31:40:65:0e:4b:d2:83:92:03:f2:39:fe:03:70:12:
d6:13:9e:a9:c9:f0:82:71:e3:21:e7:d6:d2:97:36:8e:4d:18:
43:bd:6b:06:ab:43:14:7f:86:92:a4:e3:c1:3d:72:0b:74:02:
db:8e:cd:b5:6b:57:a0:6b:a8:74:45:a0:a2:a0:35:6f:4e:d0:
d8:9c:b4:a5:3d:c9:b6:dc:2e:91:05:df:0c:4d:74:b2:96:dd:
de:c5:e6:d6:6e:66:61:23:fc:ef:99:f9:ab:a0:a4:56:a6:8d:
5e:0b:e7:6a:3a:78:5d:9a:e8:bc:85:20:9d:ab:92:a2:4c:ec:
79:9b:98:4b:aa:e3:d9:c6:b5:8e:3a:72:12:c4:eb:9d:a5:b2:
fc:95:00:9e:88:ae:ed:18:26:85:65:07:44:d7:2e:e6:dc:a8:
cf:c3:17:f7:f8:f2:f0:c9:28:55:03:12:c6:bb:d2:14:c0:60:
62:3c:7b:ab:2c:63:c3:e0:b5:e4:76:04:af:6d:9b:3b:60:30:
9e:c2:fb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:20:33 2025 by rpki-client