Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/7CB82392CE8B11EB800AA958C4F9AE02.roa
File: 7CB82392CE8B11EB800AA958C4F9AE02.roa (raw, json)
Hash identifier: ju+1tYphGAZrfbIT8k7IY2s2reAaYj1v/4t4D0v0qIU=
Subject key identifier: 06:26:B2:D7:C2:BF:87:BF:1B:18:BB:FB:05:4E:A1:8E:57:FF:54:3B
Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787
Certificate serial: 02C5
Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/7CB82392CE8B11EB800AA958C4F9AE02.roa
Signing time: Wed 23 Feb 2022 01:30:55 +0000
ROA not before: Wed 23 Feb 2022 01:30:55 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 131314
IP address blocks: 103.163.164.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709 (0x2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787
Validity
Not Before: Feb 23 01:30:55 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=62158e4e-9b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:c9:50:b6:e0:da:68:b8:fe:57:1a:ce:9a:
1d:99:1b:67:6c:43:35:75:f9:a2:1f:96:e3:ff:09:
b0:95:54:da:fe:4b:a2:be:06:f6:6e:64:6e:60:54:
c5:16:a4:cf:03:67:40:6d:33:dd:0c:3c:dc:ec:51:
5b:1c:1e:1d:53:77:e6:e1:4c:3e:10:8b:09:30:fb:
d5:58:e0:cb:c5:cb:d3:db:1e:d6:b6:21:5c:a2:de:
4b:fe:96:66:00:93:a0:e9:89:3f:49:0e:06:95:a6:
cb:67:df:f6:39:1d:11:7c:78:9e:82:d8:4d:b2:5e:
56:3d:8e:cf:2f:27:8a:11:41:d5:7d:f0:46:11:1c:
f0:42:29:37:41:8b:bb:4d:e3:b1:53:15:cc:5a:7b:
fb:66:0a:fa:08:bf:da:5f:c5:7a:57:c6:d7:e5:01:
e5:e8:40:69:53:b6:2a:14:45:3f:4f:a5:10:f5:cb:
b2:86:d2:b9:9c:87:13:14:e8:02:db:ba:51:00:c9:
bc:a9:be:f6:10:78:25:92:3d:e8:b1:70:35:6c:da:
78:84:6f:1c:8b:5f:55:05:a6:df:5f:f7:b9:0a:0b:
e4:b0:fe:14:70:62:94:54:a7:71:27:e2:22:44:6e:
27:4c:85:bc:68:40:3a:eb:46:8a:a6:3a:bc:b8:76:
e7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:26:B2:D7:C2:BF:87:BF:1B:18:BB:FB:05:4E:A1:8E:57:FF:54:3B
X509v3 Authority Key Identifier:
keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/7CB82392CE8B11EB800AA958C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.164.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:fd:17:49:82:1e:98:bc:2f:d7:fc:80:5b:1d:5a:9e:26:f6:
2a:36:8d:aa:fc:38:04:0a:94:cd:4f:62:09:f8:c1:fa:af:f8:
cd:68:ac:21:01:31:f4:22:f0:f8:a8:e2:c7:7f:e9:ab:7f:a7:
7d:98:84:21:d3:81:99:8d:72:83:c2:07:14:f9:ba:e0:9f:45:
d0:a5:54:d7:53:9c:84:9c:d7:a6:5c:65:05:90:e9:73:fa:1d:
a6:07:76:b2:4d:ef:c8:65:77:ef:a3:8d:fe:2e:ca:cd:d4:77:
33:91:52:05:d8:44:9b:70:11:fd:0e:f9:e8:6e:25:15:53:52:
8a:e7:bf:fd:40:7f:31:2d:9a:b2:61:d5:2b:39:e6:39:b1:6a:
d0:20:15:58:66:bd:a5:e2:5d:3b:18:23:77:25:a8:42:50:20:
0c:5a:a6:f7:a7:7f:22:d7:88:d5:49:3e:c3:02:ed:38:9f:33:
64:83:20:0f:12:e9:2e:d7:fe:4e:c5:55:40:e8:e5:d0:85:7c:
ac:17:56:0b:93:07:96:dc:3a:db:3a:7b:d0:d4:ce:bd:77:c6:
4c:c3:d7:ed:c9:d6:04:b1:88:14:e2:88:5c:67:9d:d8:59:03:
51:af:7b:be:57:2a:86:7a:4c:37:5f:bc:6c:8e:db:b7:90:5d:
cd:ae:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:10:38 2025 by rpki-client