Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/F763EED2A41F11EBAD458428C4F9AE02.roa
File: F763EED2A41F11EBAD458428C4F9AE02.roa (raw, json)
Hash identifier: w2PK4cT2zP4cw9b0mdsNadP7HhjFbbG8oQGlHUYLC7o=
Subject key identifier: 2B:97:82:5C:75:54:A1:A2:5F:C2:12:D4:A3:63:FC:F3:23:6B:08:46
Certificate issuer: /CN=A9131B40/serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
Certificate serial: 04D7
Authority key identifier: 99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/F763EED2A41F11EBAD458428C4F9AE02.roa
Signing time: Sat 02 Sep 2023 23:50:11 +0000
ROA not before: Sat 02 Sep 2023 23:50:11 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 399073
IP address blocks: 103.142.130.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1239 (0x4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131B40
Validity
Not Before: Sep 2 23:50:11 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=64f3ca33-43ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b9:fb:a3:34:67:df:12:8d:89:41:8b:4c:84:
00:81:5a:8b:7a:ee:ce:20:a7:48:14:e4:60:e9:b5:
04:53:8c:d2:40:f4:8e:06:8b:eb:6c:a7:40:f7:2e:
1f:0e:f8:88:8e:b2:8c:fa:38:b1:f7:a0:c1:7c:f5:
6f:d1:57:75:ef:c6:54:74:e0:fc:ff:d1:72:1e:4b:
63:5e:a7:14:d9:0a:6b:b4:c8:f8:8f:9e:57:99:dc:
1c:a3:18:09:e2:87:60:23:ff:6f:d9:79:8d:9c:b7:
55:c8:43:2a:a3:0c:23:4d:51:cd:ac:f9:63:08:fe:
da:ec:06:12:c2:42:da:30:ac:7b:a5:2a:7a:f1:4a:
5a:5c:c0:ae:e2:55:3a:86:55:bc:d7:67:4f:8e:42:
82:e0:96:27:2a:58:90:1e:56:ad:4b:75:71:ae:fa:
28:6e:9d:64:39:00:72:f4:04:63:bd:c4:6e:48:8c:
ee:85:82:a1:9e:3c:f6:f6:0d:40:9f:a8:07:f9:75:
f8:bb:ff:67:7e:16:34:53:95:5b:5c:63:ae:f3:0b:
cf:b4:c3:35:4a:4b:8c:2f:72:98:91:dc:ba:27:40:
d4:6c:fd:ff:e6:ab:df:f8:4c:19:7d:6f:2e:ca:bd:
09:ce:db:72:d0:ca:ec:ee:ab:19:b4:f5:57:72:81:
1c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:97:82:5C:75:54:A1:A2:5F:C2:12:D4:A3:63:FC:F3:23:6B:08:46
X509v3 Authority Key Identifier:
keyid:99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/F763EED2A41F11EBAD458428C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.130.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:5c:eb:77:49:d5:99:f5:7a:5e:51:e8:ed:83:4d:8e:b5:a5:
47:29:55:be:9b:ab:8b:30:f8:cd:3d:71:50:ab:ed:2c:b0:0f:
ad:00:d8:3b:fb:69:bb:de:50:78:10:d7:fd:b1:bb:06:74:49:
ed:f8:85:d4:da:fc:b5:41:43:ab:c7:7a:e2:2d:2c:db:b5:68:
98:ec:55:c3:13:ba:64:af:a1:ea:8b:82:05:f2:0e:35:00:f7:
f4:ce:da:e6:44:8f:32:45:93:db:42:5f:0c:60:bf:88:7b:74:
22:b9:b9:b8:05:43:3a:bb:e2:20:c4:2f:6d:90:66:9c:cb:e5:
5a:04:0e:10:ee:6b:69:5c:de:6f:92:b2:55:64:07:22:39:98:
88:da:f9:27:27:c4:11:05:0d:20:1e:f3:d9:e8:d5:09:fa:e2:
20:76:be:58:22:a3:9c:e8:a2:29:7d:51:88:9d:7d:18:bb:7c:
63:50:ef:da:3e:9c:53:9d:f7:a8:35:07:af:2c:8c:fe:3e:8f:
77:e1:a2:ce:f7:db:d6:00:51:39:0a:7f:ad:54:10:21:70:7c:
1e:e6:52:bf:d6:76:fa:71:e2:7b:40:d0:b5:06:b7:87:1b:e8:
b2:7d:be:06:3d:96:c8:be:a4:99:70:5e:58:9e:36:c3:43:4c:
c9:4f:9c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:12:09 2025 by rpki-client