Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/91137D024E2F11EE9B605B6FC4F9AE02.roa
File: 91137D024E2F11EE9B605B6FC4F9AE02.roa (raw, json)
Hash identifier: /k0RpNYcAbA2bpABF1rGvyP7xP2beLkAU6JluA9wLsQ=
Subject key identifier: 97:BA:E2:93:59:6F:2A:AA:0B:02:F0:A3:AB:59:17:4F:17:C8:5A:55
Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial: 71
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/91137D024E2F11EE9B605B6FC4F9AE02.roa
Signing time: Fri 08 Sep 2023 10:07:50 +0000
ROA not before: Fri 08 Sep 2023 10:07:50 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 9583
IP address blocks: 103.182.210.0/23 maxlen: 23
103.182.210.0/24 maxlen: 24
103.182.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113 (0x71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130416
Validity
Not Before: Sep 8 10:07:50 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=64faf276-44c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:61:86:29:5d:7d:ca:76:11:e9:8c:9c:f7:b3:
ae:e6:1e:9b:e0:0d:00:a1:e5:30:1c:14:70:f2:a9:
85:fd:57:8d:bf:f6:ac:cd:e1:03:e7:99:f1:6c:9c:
b2:91:aa:3a:76:b4:9d:33:07:d6:a7:d4:79:9e:9e:
df:83:0e:42:28:22:53:c8:d6:77:9d:2a:f2:4b:37:
b9:6a:20:4d:87:68:6d:5e:b0:52:24:c0:66:dc:19:
83:c3:40:2f:03:4c:63:7c:10:51:55:8a:e0:87:01:
30:33:a6:ba:f5:ed:4b:9c:72:da:49:42:74:60:08:
df:4d:19:a0:f4:7f:9d:80:0e:f1:d5:10:ab:fc:41:
36:35:09:8d:b1:3a:3c:dd:14:7b:96:61:bd:da:71:
23:11:b5:1d:4a:5c:b3:bb:7a:7b:bd:73:79:2d:f6:
b8:ae:73:b1:21:68:89:cf:13:39:ed:26:bf:d4:c3:
4a:5f:62:7e:d9:39:13:a1:de:cf:66:94:18:d1:30:
82:d3:2a:bd:89:9e:b4:97:ab:9f:61:76:5e:b3:63:
f4:25:c8:ca:ac:23:b5:21:c5:ad:6f:c6:87:9e:47:
fd:7f:5a:9b:c9:cb:5b:37:78:e0:03:32:82:1f:93:
21:81:34:bb:58:46:e1:3a:c2:54:ed:72:c2:80:45:
42:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BA:E2:93:59:6F:2A:AA:0B:02:F0:A3:AB:59:17:4F:17:C8:5A:55
X509v3 Authority Key Identifier:
keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/91137D024E2F11EE9B605B6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.210.0/23
Signature Algorithm: sha256WithRSAEncryption
69:15:19:46:10:57:6b:56:91:b1:94:b0:77:ec:d9:f6:87:3d:
dd:72:31:cf:e5:2e:98:25:2a:a3:1d:d2:3a:5a:59:1a:41:0e:
d6:c4:be:a0:af:78:e0:64:5a:3c:7a:87:22:42:d1:00:98:af:
33:6c:94:c4:3b:6b:ca:ef:af:37:79:9d:0f:2c:bc:1c:af:92:
0a:89:2b:c8:08:16:71:04:8a:93:a6:da:f9:7e:15:52:29:9b:
d4:f1:2d:30:fd:76:2a:6b:66:f4:5b:90:11:40:07:e7:98:49:
9d:32:61:a9:88:6e:5e:b6:9a:5e:3c:54:e4:dc:73:d6:7a:d1:
0d:55:e9:bb:2a:03:6f:4b:19:7d:07:9c:3c:be:1b:62:62:a5:
e2:84:c8:bb:46:45:4e:0f:2b:87:9c:b5:e4:b8:17:47:30:c0:
1c:4d:e5:5a:02:03:3e:39:cd:f6:dd:49:c0:e3:36:8d:c3:a9:
c8:6d:b7:d3:71:dc:c0:f9:df:00:fc:a3:a3:ba:13:1d:76:a0:
1f:86:36:bb:43:cc:85:49:5c:82:36:db:9f:37:f3:30:87:fb:
2b:71:80:22:8c:24:14:cc:5d:06:64:dd:31:79:b5:14:fa:11:
cd:d8:0f:fb:0a:27:6c:e6:8e:8e:5a:03:9a:4b:22:95:01:1c:
3d:b1:8e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:33:58 2025 by rpki-client