Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9EFB7EA876911EE89569146C4F9AE02.roa
File: B9EFB7EA876911EE89569146C4F9AE02.roa (raw, json)
Hash identifier: TCigwj1gD8SJVBQINfXnZUTrrHLTDYT9u8++XYySlXY=
Subject key identifier: 2D:3B:02:63:3F:1B:36:1E:AE:EE:75:0D:14:3C:39:4C:52:90:25:87
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7E0C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9EFB7EA876911EE89569146C4F9AE02.roa
Signing time: Mon 20 Nov 2023 05:57:46 +0000
ROA not before: Mon 20 Nov 2023 05:57:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141836
IP address blocks: 103.171.174.0/23 maxlen: 24
103.173.98.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32268 (0x7e0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 20 05:57:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655af559-ad5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3f:6b:33:5b:ff:db:5f:4b:40:97:bd:ec:68:
8b:b9:d4:07:89:6c:b5:96:fb:0a:a3:66:89:11:53:
db:32:99:c4:89:29:66:62:9a:2b:b9:01:18:22:4a:
a4:77:be:f2:a2:28:c8:fb:61:02:db:58:d7:91:1c:
d3:99:d2:91:e8:d7:7e:ba:c2:86:f7:a6:ab:41:7f:
e1:e3:46:6b:9c:53:64:4c:32:cd:69:67:56:95:15:
22:86:dc:f1:32:3c:49:9a:8e:bf:73:a4:fd:ed:32:
aa:94:c5:f6:b7:f4:2d:67:45:e5:f9:f4:90:e0:48:
2d:2f:4d:30:25:b1:cb:9e:c6:3e:36:ce:08:7d:f6:
a6:5b:d6:fd:1d:2a:e7:81:30:5f:df:0e:08:6c:8e:
26:8e:22:a4:32:1d:90:9a:f6:75:ca:47:db:ae:a4:
1e:4e:93:eb:6c:76:0a:d8:6c:b8:28:8d:10:dd:a5:
f0:c4:ed:43:ee:51:fe:ad:b4:ed:86:2b:51:62:ed:
cd:80:c4:3c:c8:c1:81:4a:38:6a:e4:85:90:28:e1:
d1:00:94:9a:8f:fe:27:70:1d:91:52:79:d1:38:8c:
51:ed:39:4b:91:df:11:b3:19:96:9e:d7:25:b8:c8:
a0:fb:45:c9:b9:3c:9f:2a:4a:52:88:be:c8:f1:a1:
48:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3B:02:63:3F:1B:36:1E:AE:EE:75:0D:14:3C:39:4C:52:90:25:87
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B9EFB7EA876911EE89569146C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.174.0/23
103.173.98.0/23
Signature Algorithm: sha256WithRSAEncryption
11:e1:e3:6e:46:56:7b:bf:fd:c9:69:9c:66:03:f7:f4:03:b3:
0a:a8:17:34:6c:48:0b:26:93:db:11:be:45:82:d5:f5:eb:34:
90:a2:7d:61:5e:6f:c4:4c:f6:f9:e6:af:0a:1a:8d:83:e2:6d:
a8:d9:f6:c5:0f:0e:dc:6e:b6:d6:1b:28:ed:67:b5:da:c1:14:
51:db:89:e2:48:c9:95:f9:a7:3f:b6:22:39:73:0a:ca:e8:a9:
43:ed:a1:57:a8:86:b3:54:c9:05:4b:44:c0:39:69:30:c0:49:
ce:cb:3a:6f:bd:57:a8:a7:53:99:ea:56:9d:ce:fc:da:10:d6:
15:f7:05:1a:87:95:fe:1f:c1:fd:4f:11:20:79:58:3f:89:f5:
3d:b1:44:06:7d:25:74:b1:63:3b:bb:12:0d:25:64:08:62:91:
a3:1c:72:c3:6b:51:4e:66:bb:2d:ae:53:5a:14:9e:eb:60:6a:
e8:27:59:f6:39:ef:42:8f:31:e9:a3:92:f5:4b:26:12:5c:b6:
79:67:c0:ab:10:49:4e:6f:6a:db:be:f7:67:f5:13:34:35:76:
c9:e7:16:16:4d:8d:e3:b1:f6:42:d3:3a:0e:a3:72:c8:83:14:
9b:c6:51:ec:e9:5e:ad:fa:da:6a:29:af:87:b8:9f:51:ba:76:
ab:b8:82:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:49:38 2025 by rpki-client