Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/092420B8CCE211EE8A4B3130C4F9AE02.roa
File: 092420B8CCE211EE8A4B3130C4F9AE02.roa (raw, json)
Hash identifier: 8CfIPF+Nrx8IRiAZt+LNcaGBTdRfC4kg02DdfGMnImA=
Subject key identifier: EF:D7:3E:A0:38:B7:31:B0:FE:9C:D2:DC:72:83:C1:08:A2:A1:D6:49
Certificate issuer: /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial: 0842
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/092420B8CCE211EE8A4B3130C4F9AE02.roa
Signing time: Fri 16 Feb 2024 15:42:49 +0000
ROA not before: Fri 16 Feb 2024 15:42:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138590
IP address blocks: 103.112.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2114 (0x842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Validity
Not Before: Feb 16 15:42:49 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65cf8278-f35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:f0:88:9c:2d:82:c0:95:fe:28:4f:17:9c:
85:74:19:b3:58:0a:7c:d4:1c:ad:0b:d6:f2:c8:77:
92:40:fe:34:d9:36:d8:3f:ee:f6:8c:10:02:71:c7:
0d:64:79:08:15:7e:c1:96:f9:0f:d0:68:b7:ea:1e:
00:4f:ba:c1:e5:9d:99:9d:fc:df:c9:a4:76:91:f1:
be:ee:3d:24:85:a9:de:ec:77:6b:9b:8d:1a:bf:61:
ad:c6:a4:cb:54:5e:ca:da:15:84:2f:c4:34:55:76:
11:d7:b2:31:8c:25:06:9e:29:76:41:d5:47:e8:91:
e3:94:6d:34:47:2d:b8:31:22:09:1a:53:5f:54:2f:
d6:38:1a:0a:e7:20:7f:7a:d7:59:05:7f:fb:1c:78:
e3:4e:de:ec:8e:35:e4:41:26:79:3c:9d:a9:c6:a7:
b5:5c:46:bf:46:57:8a:fe:14:cd:7a:0b:f6:1d:db:
4e:e0:c8:3f:2c:b4:41:8e:9f:60:d0:cd:e7:b0:41:
7b:df:1c:3a:4b:d6:46:07:9d:ec:b2:e3:f4:65:f1:
48:29:4e:88:7e:cd:af:d1:21:fb:f7:17:07:05:ea:
05:dd:6f:a6:15:3e:af:aa:3e:1b:03:7d:4b:8e:e9:
23:6b:f0:e8:9b:a9:1d:bc:27:2e:37:06:f4:1f:38:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D7:3E:A0:38:B7:31:B0:FE:9C:D2:DC:72:83:C1:08:A2:A1:D6:49
X509v3 Authority Key Identifier:
keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/092420B8CCE211EE8A4B3130C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.112.0.0/24
Signature Algorithm: sha256WithRSAEncryption
23:ab:3e:3e:1e:96:53:85:0f:76:53:86:6b:69:52:b8:d8:84:
0d:b6:aa:2d:79:e5:6f:65:73:55:8c:51:9b:a3:ec:38:35:f1:
1e:66:b8:f7:99:0a:89:f9:6b:38:d5:c5:0e:29:40:31:1b:ef:
b7:76:9c:f0:8b:04:d3:9b:1f:3f:a2:fe:19:da:7a:dd:94:6d:
b9:9e:62:2d:1e:7a:9e:31:6d:95:fd:41:fd:b6:29:e8:3c:27:
20:0e:9c:ec:28:f2:91:d3:30:30:b1:fd:b0:ff:a9:01:51:e1:
2b:d8:54:4a:42:c1:56:06:96:12:4f:fb:b4:2c:8d:36:be:e4:
c3:6b:e5:03:dd:76:a7:e1:2e:7a:1d:b8:1e:b5:cf:ad:2f:66:
a7:64:00:cb:bc:9f:d4:4b:b7:15:56:1c:c9:20:05:22:f9:c8:
bc:f7:d5:39:03:93:9a:93:5d:fa:13:94:9f:2c:c2:ff:b4:c7:
83:f5:16:b8:5c:9f:10:2d:61:3f:1a:4b:fa:ad:76:36:45:ad:
cf:18:6f:79:ea:7e:9b:26:d6:d9:b8:6c:07:c8:f9:03:1e:a0:
ef:f9:e1:05:0f:0e:89:c5:bc:9c:fa:f7:7e:aa:df:2e:0a:54:
9c:fc:84:b3:2f:f4:09:1a:e9:1a:33:09:df:8e:d0:3c:b4:69:
0a:7e:df:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:49:20 2025 by rpki-client