Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/24732D1A38F711EFBB925B25C4F9AE02.roa
File: 24732D1A38F711EFBB925B25C4F9AE02.roa (raw, json)
Hash identifier: nIasTjOLH5ZfWYzaW3eTaeGna+GrNUbP+ziBakU0ZnM=
Subject key identifier: C9:A6:CE:60:6C:A4:5C:27:2E:8A:76:FD:35:9F:69:E3:F0:00:FA:EA
Certificate issuer: /CN=A91215B3/serialNumber=914850C4B8A513B2F8E4EDC4B5578707776372AE
Certificate serial: CF
Authority key identifier: 91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/24732D1A38F711EFBB925B25C4F9AE02.roa
Signing time: Wed 03 Jul 2024 04:45:59 +0000
ROA not before: Wed 03 Jul 2024 04:45:59 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 133551
IP address blocks: 103.48.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 207 (0xcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91215B3
Validity
Not Before: Jul 3 04:45:59 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6684d787-d30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:38:81:db:93:7a:56:d9:ca:e2:4f:bd:5d:
3c:a6:18:70:c2:07:f7:cc:ff:39:3e:80:87:21:a8:
7c:07:f8:f2:f6:aa:27:b7:7d:80:19:d2:71:d5:bb:
fc:b0:34:4f:8f:34:87:a2:95:dd:9d:9a:29:86:27:
a1:dc:59:4d:cd:e3:1e:a0:25:82:00:c3:65:43:93:
61:8f:49:21:4a:e3:31:d2:b0:20:d2:4a:b6:ca:d4:
5a:7f:5f:4a:a3:b5:24:bd:07:8a:0d:0d:23:ba:0b:
c8:58:96:1e:9d:87:ff:a3:d8:92:28:c4:0e:0c:a6:
7d:fc:19:19:f1:ff:d5:69:4d:a4:5d:70:3c:71:07:
d0:fc:d2:7a:ee:2a:c8:ab:bd:5c:58:0c:01:b1:ea:
38:47:55:d7:6d:a3:bb:ab:19:dd:3a:1f:bb:8e:81:
a9:9b:43:41:84:1b:5e:bf:65:af:cf:88:63:d3:8a:
15:4b:f4:f3:b1:df:34:ca:90:92:7a:bb:69:bc:37:
d4:ed:e8:97:e4:9c:8a:7c:42:2a:2e:f5:f7:a7:c5:
6a:41:0f:69:d9:c4:4d:84:bc:02:d3:df:0a:b6:69:
9b:66:e1:40:af:d0:7d:dd:c7:25:4f:f4:55:a3:5e:
fa:52:67:87:4a:2d:8b:b6:6b:cc:11:eb:73:68:d4:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A6:CE:60:6C:A4:5C:27:2E:8A:76:FD:35:9F:69:E3:F0:00:FA:EA
X509v3 Authority Key Identifier:
keyid:91:48:50:C4:B8:A5:13:B2:F8:E4:ED:C4:B5:57:87:07:77:63:72:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/kUhQxLilE7L45O3EtVeHB3djcq4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kUhQxLilE7L45O3EtVeHB3djcq4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91215B3/E6F68F060B4B11EEAB9AAD79C4F9AE02/24732D1A38F711EFBB925B25C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.48.1.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a6:df:18:b0:90:8a:23:89:ec:19:f7:ae:04:37:d9:4a:c8:
91:87:c9:3b:d7:da:a0:e1:22:ab:19:43:5c:df:45:a5:c8:10:
02:c9:93:dd:59:21:cb:1e:82:08:20:b1:5a:57:1f:dd:52:4e:
55:d9:84:5b:e9:96:91:ea:c8:1b:43:b0:a1:d3:9b:b2:55:69:
7f:64:f6:b5:92:53:df:3f:74:b9:2a:63:34:73:ef:73:5a:4a:
55:43:65:d7:b5:51:3d:ef:cd:6a:4d:31:99:e2:33:58:5d:d0:
9e:32:ea:76:f8:75:ca:dd:be:4e:12:35:38:2f:99:d7:f6:de:
48:a8:22:53:7a:48:ad:1a:87:f3:cb:b6:11:85:9f:5c:21:5e:
62:aa:76:a5:6f:e1:ab:b8:41:8c:18:2f:0c:35:95:73:50:54:
e7:ec:36:67:a1:15:17:83:22:f5:4f:d1:f3:b5:dc:17:cd:df:
e9:74:d0:9d:18:93:42:90:65:73:b8:ea:9b:17:98:11:c0:69:
d2:72:ff:95:8b:c4:53:e6:a3:bf:83:68:6e:37:74:33:ca:19:
8d:e8:c6:f4:02:82:ae:60:43:08:56:d3:9c:7b:cc:2f:b7:48:
47:b9:c9:72:2a:a6:8c:dc:6a:b4:88:da:29:48:ff:08:1e:5d:
10:d9:ed:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:33:56 2025 by rpki-client