Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/FF410EAC14CB11EB96268C0FC4F9AE02.roa
File: FF410EAC14CB11EB96268C0FC4F9AE02.roa (raw, json)
Hash identifier: lXsNbrPDQZi0gST9KR7UvY74tYxYsKB+VXvCzebjVpA=
Subject key identifier: E7:7C:F5:3C:FB:86:1D:D5:21:CF:28:0B:63:54:C9:BC:D0:12:9E:95
Certificate issuer: /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial: 03B6
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/FF410EAC14CB11EB96268C0FC4F9AE02.roa
Signing time: Tue 08 Feb 2022 00:10:13 +0000
ROA not before: Tue 08 Feb 2022 00:10:13 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 55720
IP address blocks: 103.82.228.0/24 maxlen: 24
103.82.229.0/24 maxlen: 24
103.82.230.0/24 maxlen: 24
103.82.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 950 (0x3b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130395
Validity
Not Before: Feb 8 00:10:13 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=6201b4e5-c8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6e:2b:c2:0e:1f:85:3e:20:4a:be:f2:49:57:
c7:89:a4:d9:c1:81:d6:b4:dd:09:09:ab:f1:1c:13:
11:ac:a5:61:dd:45:c4:51:92:90:2c:26:d9:a1:8d:
e2:c6:82:85:21:ea:c1:03:43:04:23:66:83:cc:13:
fe:85:bc:be:a4:6e:dc:44:49:9e:4c:fd:6a:c7:fa:
7c:a3:5e:ab:37:76:60:64:a8:7d:0e:c5:55:06:0b:
54:1c:c2:a5:a6:87:3c:38:8e:fc:03:14:74:9a:e8:
60:9b:87:d2:97:13:47:25:e8:11:10:32:63:2d:6c:
1e:c6:ca:1b:63:19:bc:f9:a2:73:b9:73:58:3d:ae:
c4:bd:4c:d3:04:e2:09:9e:90:7c:65:9b:99:f5:7a:
61:e1:91:f9:3a:75:f0:ed:70:e4:ac:c8:e3:1e:2e:
6a:ec:70:aa:28:bc:9a:1f:13:de:19:71:96:63:89:
3c:9b:eb:75:21:24:a6:40:49:df:b7:d3:5d:ec:da:
10:b2:94:d5:ba:25:b1:c2:26:f2:da:2a:fd:59:5f:
de:5d:4b:79:07:d0:5f:85:7c:50:9d:a1:66:81:ba:
24:5e:11:e0:5e:46:e8:69:d1:51:9d:5b:db:e7:ac:
be:39:c9:41:95:0a:b7:e2:16:0b:0d:b3:09:9e:c5:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7C:F5:3C:FB:86:1D:D5:21:CF:28:0B:63:54:C9:BC:D0:12:9E:95
X509v3 Authority Key Identifier:
keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/FF410EAC14CB11EB96268C0FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.228.0/22
Signature Algorithm: sha256WithRSAEncryption
66:ed:ef:86:68:27:a2:5f:c0:91:ad:f1:af:88:e1:fe:ae:6a:
98:dd:7a:c5:05:fb:b6:28:a0:77:60:cd:15:b6:32:cf:01:94:
e4:bc:9b:a2:83:22:fc:bf:70:66:37:58:44:7a:3c:f9:83:c5:
da:d4:18:12:d0:45:b4:ee:0c:84:1b:dc:d2:1b:72:fe:d5:92:
f0:6a:d2:06:b7:5f:6e:ab:9c:91:38:f9:aa:dc:23:94:c8:fd:
1d:a3:d7:2b:87:8a:c7:b6:a9:81:f5:95:74:2f:02:22:48:7f:
19:2e:97:13:51:8b:ac:f6:e3:49:88:49:49:84:9c:54:85:ab:
a6:1c:49:0e:2e:8c:e6:f3:ce:dd:dd:b2:8f:fd:49:2a:29:93:
1a:3e:60:b8:d2:b2:4e:35:20:ca:dc:6c:e3:27:90:6e:13:84:
36:16:fa:54:68:2f:0f:8c:49:2e:6c:a1:77:32:ba:1c:8f:e4:
9d:4e:87:e9:87:dd:60:a4:9c:40:02:85:6a:50:a2:d8:7e:1a:
b4:78:97:94:78:99:74:96:8c:83:04:5b:bf:e8:05:44:18:35:
f6:ee:ee:49:41:94:00:40:c6:63:09:cb:a2:26:eb:6e:7c:01:
35:7c:4b:12:e1:0e:3d:f3:8f:c6:6c:5e:a6:26:8e:00:6a:10:
77:34:d8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:55:10 2025 by rpki-client