Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/CF1D128CB67911EDA11B7758C4F9AE02.roa
File: CF1D128CB67911EDA11B7758C4F9AE02.roa (raw, json)
Hash identifier: VB3jyAKKUc13uCHCBP6Dj0OAW0hFCMvoiehtNBOI3tA=
Subject key identifier: 27:6A:98:8E:9C:06:F8:A5:D7:DE:45:D4:83:E3:54:6A:20:00:42:14
Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial: 03
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/CF1D128CB67911EDA11B7758C4F9AE02.roa
Signing time: Mon 27 Feb 2023 08:36:20 +0000
ROA not before: Mon 27 Feb 2023 08:36:20 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 149621
IP address blocks: 103.182.210.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9130416
Validity
Not Before: Feb 27 08:36:20 2023 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=63fc6b84-ef2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:a2:81:6a:b5:39:36:e3:f8:5f:0a:fd:f1:
df:f8:88:49:a4:e3:ac:a7:20:c4:93:98:f7:8d:69:
be:b6:19:2c:0b:99:90:63:03:8e:2d:7c:eb:0e:56:
4b:66:9e:80:4b:25:7d:5e:0c:50:0c:e8:f6:ba:95:
37:5b:13:77:2a:90:53:5b:ec:69:02:fc:eb:2c:8e:
1b:d3:a1:f9:77:83:a6:20:d9:51:6c:2f:b5:5c:fb:
49:e2:9f:59:a6:5a:f5:d1:c9:9d:52:71:43:db:20:
d9:55:6e:06:c3:95:cf:01:cd:42:a0:cf:70:4a:45:
72:08:78:a3:ce:b1:2d:a0:63:b4:67:2e:a4:05:40:
fc:71:8d:da:e3:ff:f4:2a:b2:6e:88:d4:ea:99:b8:
29:9d:7a:7e:d1:c3:5b:74:dd:89:f3:c5:07:ac:1e:
2f:e8:a6:f4:5f:9e:50:ed:ea:35:9f:3d:66:5b:71:
dd:7d:e4:67:3f:b6:4f:fd:9e:12:45:2a:94:e9:68:
88:c4:88:18:d3:0c:4a:44:61:eb:6c:cf:73:a7:92:
f6:14:83:8d:db:b8:ba:e1:ba:97:00:e2:12:ce:f5:
89:72:8b:45:2b:7a:7b:77:fc:93:e6:1d:66:d5:67:
34:b8:e3:05:07:45:4d:97:bd:9f:2c:85:e6:63:fa:
89:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6A:98:8E:9C:06:F8:A5:D7:DE:45:D4:83:E3:54:6A:20:00:42:14
X509v3 Authority Key Identifier:
keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/CF1D128CB67911EDA11B7758C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.182.210.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:60:a2:2e:58:b9:e8:c1:ec:be:6a:00:d7:d8:e0:de:a7:e0:
06:f6:60:4c:cd:45:83:21:bd:99:b5:ae:12:92:09:56:b3:22:
2c:1a:e6:d8:6b:aa:10:8a:cb:dc:6f:6e:44:ad:7e:22:13:59:
5e:3b:b3:bc:19:ad:25:a2:7a:af:3b:bf:9a:87:9f:78:57:55:
4f:8d:e1:63:3d:21:fd:99:92:2b:e9:bc:6e:d6:60:fb:9e:54:
3c:a6:46:7d:95:7c:4a:53:b6:00:35:36:85:87:6f:7d:5d:42:
f0:1b:df:b7:5d:46:f1:69:e5:ea:83:8d:b1:17:3c:43:6f:89:
7a:27:f7:e3:5b:d6:f3:9a:f2:88:9d:16:65:b5:de:9c:5e:c2:
6e:38:90:1e:f2:d8:a5:42:e2:c5:1d:42:10:b6:53:17:00:b1:
1c:23:ec:82:1a:dc:de:6c:d0:56:fc:84:50:35:ac:34:cd:d3:
04:3f:f0:15:20:45:ca:ee:09:7a:ec:2c:14:c6:5d:3e:a9:b7:
af:2f:ea:00:45:d5:02:fd:1b:35:7c:09:71:ea:56:0c:91:3a:
df:84:15:93:03:34:a5:47:5e:11:3b:44:4f:17:f4:9f:bb:a3:
e1:6f:de:bb:28:d2:99:e5:a1:93:d1:89:5a:3f:f8:dc:b5:f3:
49:65:ec:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:33:56 2025 by rpki-client