Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/C783ECEC0C3311EFB37BD03FC4F9AE02.roa
File: C783ECEC0C3311EFB37BD03FC4F9AE02.roa (raw, json)
Hash identifier: 2VLLXTnr4zEsaXlmqi9WeuMPWIyaR5j7LPYpI5gTEuo=
Subject key identifier: AE:EC:24:21:1C:2C:12:AE:94:EA:42:20:C3:4F:3F:8E:F6:8B:F7:28
Certificate issuer: /CN=A91316B0/serialNumber=395AF5791376339AF9DEE56D6A1E13B47AB5C466
Certificate serial: 03
Authority key identifier: 39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/C783ECEC0C3311EFB37BD03FC4F9AE02.roa
Signing time: Tue 07 May 2024 05:36:40 +0000
ROA not before: Tue 07 May 2024 05:36:40 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 139461
IP address blocks: 103.178.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91316B0
Validity
Not Before: May 7 05:36:40 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6639bde8-8832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4f:fa:a3:5d:51:e3:9f:f3:80:fe:1b:61:db:
ea:36:56:39:7b:12:94:25:a4:9d:4c:e2:f8:60:ad:
1d:3e:bf:4f:be:0e:f5:33:b5:d5:3c:e0:7b:f5:a3:
07:e1:cc:41:0b:6c:77:a7:f2:a7:04:90:7a:20:a3:
2d:3c:f0:43:d0:ef:e6:18:f7:47:cb:e9:02:9b:2c:
1b:e8:e1:11:d6:ea:44:0a:07:6f:dd:10:13:b9:1c:
f0:15:51:79:c5:79:86:0e:5a:6c:d8:2a:70:f4:3a:
bf:88:66:8c:70:3d:13:9b:71:2b:ab:8f:70:18:f1:
12:dc:ad:19:d0:1b:df:07:32:d9:65:e2:8c:bc:16:
35:0f:5b:e6:5d:78:84:99:8c:a0:51:68:23:98:af:
d0:e0:4e:0f:d8:8b:48:fb:55:2b:39:a0:6b:8e:06:
7d:b4:23:93:77:50:12:e2:99:ca:d2:99:98:93:ed:
f3:dc:f8:9f:b8:35:cd:44:ca:74:dd:c4:18:2c:73:
ac:74:7c:0c:59:1b:60:d1:c1:ae:46:68:64:88:bf:
54:e8:01:26:8a:7a:36:1c:e6:82:16:1b:6e:6c:12:
3a:f7:db:8f:09:62:d6:49:4b:83:b5:57:6f:5d:57:
06:0d:9d:9f:a7:08:97:7d:52:c7:95:f5:ca:f2:e8:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EC:24:21:1C:2C:12:AE:94:EA:42:20:C3:4F:3F:8E:F6:8B:F7:28
X509v3 Authority Key Identifier:
keyid:39:5A:F5:79:13:76:33:9A:F9:DE:E5:6D:6A:1E:13:B4:7A:B5:C4:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/OVr1eRN2M5r53uVtah4TtHq1xGY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OVr1eRN2M5r53uVtah4TtHq1xGY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/C783ECEC0C3311EFB37BD03FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.30.0/24
Signature Algorithm: sha256WithRSAEncryption
00:e2:b1:c6:4e:b5:ba:84:f8:e8:0e:b9:56:1c:25:6c:1b:88:
05:58:27:0e:11:45:38:8a:66:f8:82:01:b6:50:94:62:9d:b1:
d1:6a:82:df:9b:6c:80:34:6d:32:f1:ca:1d:27:d3:c5:9f:5c:
d1:e1:b1:43:ff:76:21:dd:72:90:8e:ed:b6:a1:2b:28:b3:18:
53:be:33:61:54:ea:4d:41:49:6d:af:65:99:c2:97:fb:49:dd:
87:e2:06:da:1f:14:72:99:0c:1c:cb:b5:17:86:02:83:6d:6e:
7e:ac:1a:a9:76:cf:81:80:7f:ae:80:f4:88:0a:9d:7e:73:65:
29:7a:db:d7:3c:34:04:52:6c:63:37:a2:7a:8a:55:78:28:8a:
4b:64:e8:4a:48:15:9f:27:e1:57:93:08:59:8f:c5:dc:cf:04:
e5:10:32:d3:e0:48:4f:55:a8:e0:2a:d4:3b:cf:87:58:dc:1e:
93:b3:46:ea:40:51:6a:3d:7c:27:87:ca:38:c7:19:3c:a4:06:
4c:63:1a:9c:92:f4:97:66:13:33:0e:aa:83:54:bf:3f:dd:ce:
ea:18:88:ab:4b:57:0d:6a:a5:9b:c3:76:1e:7e:0b:9c:6c:5c:
df:ad:ea:ba:b6:1d:97:f5:90:3e:03:ef:e1:01:24:5c:fe:53:
f6:9b:e0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:58:07 2025 by rpki-client