Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/F73763D485FE11EA97A7400AC4F9AE02.roa
File: F73763D485FE11EA97A7400AC4F9AE02.roa (raw, json)
Hash identifier: 4XV7/uoWFMN9lYhMwdl7zpm4vThuoHkrx3SO62zOpZg=
Subject key identifier: 6F:49:9B:69:CC:92:D5:A5:46:41:2F:3A:34:96:EF:51:04:71:E1:DB
Certificate issuer: /CN=A91DC302/serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
Certificate serial: 23E9
Authority key identifier: 39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/F73763D485FE11EA97A7400AC4F9AE02.roa
Signing time: Tue 06 Sep 2022 16:12:25 +0000
ROA not before: Tue 06 Sep 2022 16:12:25 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 9230
IP address blocks: 103.129.244.0/22 maxlen: 24
122.144.8.0/21 maxlen: 24
182.163.96.0/19 maxlen: 24
202.84.32.0/20 maxlen: 24
2402:c000::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9193 (0x23e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DC302, serialNumber=39BF96994AB4C54C983EE0F510365F4FD9841541
Validity
Not Before: Sep 6 16:12:25 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=63177168-9c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:06:fe:62:97:2b:6c:b6:c2:3d:bf:04:47:4c:
92:db:06:d1:c6:3c:85:5f:eb:04:e1:85:bf:b6:a5:
52:57:7b:4b:d8:41:f4:4b:09:ba:60:a4:1d:c1:35:
19:7f:74:c7:de:fb:a6:5a:bd:6e:cc:5b:fe:e4:e3:
46:c3:f9:b5:b3:3b:93:61:22:a3:e1:ab:8e:5d:4b:
73:06:52:f7:26:da:45:34:a5:4a:b3:9c:e9:f8:85:
ca:ff:2d:af:f6:fc:a5:97:47:0e:93:79:cf:a9:33:
1a:c9:d6:fe:81:66:9e:4c:cf:5c:1d:c9:4f:3a:67:
ea:3b:fb:c1:45:11:1c:c4:12:9d:7b:32:81:ec:42:
5a:93:a1:b8:ac:b7:3b:6a:c5:fd:2f:54:31:a1:45:
73:f8:55:e4:6e:c0:39:da:c0:bc:51:fd:81:bd:84:
53:d4:c9:c2:4e:e8:34:e8:13:d8:3f:5d:00:f0:79:
7f:4b:74:b2:29:e9:90:19:a0:37:ae:4e:58:fd:bd:
e7:c8:9d:fa:88:f5:c8:01:a2:54:30:a4:31:41:eb:
25:07:2d:e1:e5:81:5a:26:8f:23:98:8d:80:b6:42:
d7:46:5a:d1:25:87:e4:d7:9b:cb:39:97:b9:6b:36:
92:6f:f3:fb:a9:b6:44:9b:91:ea:4b:ea:24:a7:f7:
19:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:49:9B:69:CC:92:D5:A5:46:41:2F:3A:34:96:EF:51:04:71:E1:DB
X509v3 Authority Key Identifier:
keyid:39:BF:96:99:4A:B4:C5:4C:98:3E:E0:F5:10:36:5F:4F:D9:84:15:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ob-WmUq0xUyYPuD1EDZfT9mEFUE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC302/4EA48E84FBA911E4A8B34C23C4F9AE02/F73763D485FE11EA97A7400AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.129.244.0/22
122.144.8.0/21
182.163.96.0/19
202.84.32.0/20
IPv6:
2402:c000::/32
Signature Algorithm: sha256WithRSAEncryption
31:2c:1c:03:6a:54:62:18:81:5b:69:df:91:ff:27:8f:23:5c:
8c:76:e9:88:50:76:d7:91:c2:1d:3c:9b:da:62:25:23:b6:a8:
a7:6a:9b:31:82:18:31:75:d8:94:1b:81:b9:b0:a9:6e:6d:5f:
b8:78:1a:b6:93:09:db:eb:b4:d0:fa:cc:fc:53:fb:84:56:22:
c9:b3:9e:f0:2e:e0:1e:9e:fe:29:bb:97:bb:2b:a2:fc:57:09:
1c:24:6f:38:2f:f6:6f:77:ce:0c:dd:7c:6d:5e:af:58:6e:b6:
7f:33:9b:98:49:98:bb:b1:69:d7:2b:45:0b:c9:9a:8b:7c:cd:
d7:97:af:38:4f:7f:b7:42:5e:85:d4:2f:f1:cb:ec:ca:49:8e:
a2:f3:f5:11:fd:1f:76:0b:33:24:68:50:9d:fc:11:77:a4:f3:
24:a1:ef:44:bf:b8:18:10:51:d0:c8:2c:63:f3:7b:d0:90:85:
ee:6d:05:2a:1e:9c:8f:37:ed:ee:78:9a:46:e2:97:4a:c7:3b:
d3:17:00:d9:2e:26:d0:96:bc:4d:2a:f9:95:24:99:05:f3:35:
a7:2f:e6:5e:7f:37:d3:3a:a6:7a:e4:dc:03:e9:33:8c:82:bd:
63:fc:06:ce:f0:1d:47:fd:cf:b2:fd:29:fd:eb:c6:71:40:40:
07:72:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:46:07 2025 by rpki-client