Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/060C1DB67BD711EDB1D2B64DC4F9AE02.roa
File: 060C1DB67BD711EDB1D2B64DC4F9AE02.roa (raw, json)
Hash identifier: rxEZAk0xADrW5xErMK7GYsGYGRB3n7djf9+H0GIWiIw=
Subject key identifier: EC:C9:08:5F:17:B2:13:2E:D1:5C:58:2A:5E:EF:BD:81:6B:0C:2D:55
Certificate issuer: /CN=A91314BC/serialNumber=168415C0C13401C0D771571DF86F8CD5F8503B14
Certificate serial: 47
Authority key identifier: 16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/060C1DB67BD711EDB1D2B64DC4F9AE02.roa
Signing time: Wed 08 Mar 2023 10:54:46 +0000
ROA not before: Wed 08 Mar 2023 10:54:46 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 55714
IP address blocks: 103.23.252.0/23 maxlen: 23
103.23.252.0/24 maxlen: 24
103.23.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71 (0x47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91314BC
Validity
Not Before: Mar 8 10:54:46 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64086975-88e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:72:d5:46:ee:ef:0e:c4:2e:1b:21:17:bf:
bf:15:0a:aa:f5:85:0b:ae:56:99:4d:95:04:a6:b8:
31:24:44:7f:67:75:9a:61:f0:08:93:b1:65:e3:97:
e4:f7:71:51:e0:83:47:f2:3f:20:10:ee:11:b3:06:
dc:2b:67:a7:9b:5a:2e:b3:6c:84:5f:2d:60:8c:5b:
f9:94:40:b1:f6:93:c7:d7:ad:0d:be:7f:27:89:6c:
d8:4e:be:bf:0f:05:26:00:83:8b:77:b7:d7:9e:0b:
f9:07:61:e1:1b:0c:be:94:dc:bf:29:db:34:88:d2:
7e:9c:df:b8:ba:53:d3:28:72:34:80:f2:6e:30:e0:
f6:2a:f0:fb:0e:95:be:9b:eb:34:89:0e:d9:92:77:
12:aa:1c:da:26:3c:c2:9e:3d:15:54:8b:73:a3:91:
d4:8f:28:55:c5:ef:f1:2d:52:33:af:ee:1b:d9:b7:
a1:6f:5c:a9:34:12:62:aa:13:76:2f:73:e5:99:ab:
db:a0:56:00:89:0d:dc:89:21:d7:fb:c6:9b:c9:9d:
f3:05:4c:8a:d1:06:26:ab:0d:e0:38:41:71:20:2f:
f1:99:b1:13:40:f5:ab:04:79:13:0f:4c:a3:84:91:
ed:8f:0e:d6:f1:6b:ed:4a:3e:e3:42:e8:22:69:7f:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C9:08:5F:17:B2:13:2E:D1:5C:58:2A:5E:EF:BD:81:6B:0C:2D:55
X509v3 Authority Key Identifier:
keyid:16:84:15:C0:C1:34:01:C0:D7:71:57:1D:F8:6F:8C:D5:F8:50:3B:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/FoQVwME0AcDXcVcd-G-M1fhQOxQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FoQVwME0AcDXcVcd-G-M1fhQOxQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91314BC/7FD0166C5A2F11EDA19E5E61C4F9AE02/060C1DB67BD711EDB1D2B64DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.23.252.0/23
Signature Algorithm: sha256WithRSAEncryption
45:73:65:4a:bb:39:17:6d:b1:ef:a4:0e:4c:d8:7c:f6:0c:59:
59:a0:1c:c9:5f:e1:a5:4c:1d:9e:c8:f0:46:a8:c1:04:9c:02:
26:1e:e4:aa:c0:6d:f1:d8:9f:58:c1:a7:fa:38:3d:7a:32:7f:
40:a8:47:13:0f:04:89:84:71:11:e8:84:31:75:af:4b:04:97:
59:ab:56:62:f3:c6:94:ce:6e:37:3e:c4:30:cc:d2:6c:c8:89:
6e:21:59:c0:f0:76:de:20:fd:31:6e:f4:17:36:18:d8:c3:f2:
51:88:cb:12:1d:57:f7:86:64:6e:0d:93:3c:42:23:99:38:69:
3f:6f:9e:ba:6f:f9:0e:52:0e:78:18:f0:85:4a:8c:ed:b1:67:
fe:ba:d5:4e:91:de:d1:02:69:eb:6f:f3:8b:ba:8d:93:72:90:
89:54:95:25:06:43:4b:82:7b:2e:3c:e0:c1:86:17:29:bb:ef:
87:c2:47:b6:e6:c6:e7:7e:7b:e8:22:32:bd:b2:dd:aa:0c:18:
89:a7:f0:ad:9d:a8:ee:bb:7a:7a:dc:6a:f2:90:ee:e5:e7:d4:
72:ef:17:20:e1:34:63:9d:ca:16:6b:15:47:04:62:51:bd:fd:
bc:92:e0:17:2d:8c:33:0a:bc:68:ae:1c:ac:f0:db:cb:6e:8c:
ae:68:03:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:10 2025 by rpki-client