Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/3475F1CEB3EE11EC80E9531CC4F9AE02.roa
File: 3475F1CEB3EE11EC80E9531CC4F9AE02.roa (raw, json)
Hash identifier: ySIGrE2LJRqWPqFDljJ5jXZYGB51ppypR+/f6FKmPPE=
Subject key identifier: 95:59:CC:EB:F2:E0:CB:A2:00:79:7A:FE:DC:DC:A3:51:91:32:56:C2
Certificate issuer: /CN=A91409DC/serialNumber=14A6CABC302EC1E3DCE74DE98BF558A042BEAC56
Certificate serial: 06D6
Authority key identifier: 14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/3475F1CEB3EE11EC80E9531CC4F9AE02.roa
Signing time: Tue 16 May 2023 20:31:04 +0000
ROA not before: Tue 16 May 2023 20:31:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138917
IP address blocks: 103.137.40.0/24 maxlen: 24
103.143.148.0/24 maxlen: 24
2001:df0:1880::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1750 (0x6d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91409DC
Validity
Not Before: May 16 20:31:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6463e807-9c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ae:49:8f:35:a7:3c:a8:07:46:66:22:d7:77:
11:a3:77:c7:5d:a5:14:0a:57:3c:9b:05:bb:bf:f9:
54:c9:d3:c4:50:51:f4:f3:d1:6f:b2:b5:5a:6a:1e:
23:bf:eb:e6:59:04:ab:95:67:4c:07:47:86:a2:a3:
77:03:a3:0b:7f:e9:9e:15:26:a8:1b:2d:a9:cc:a5:
67:63:9f:e6:4e:68:f8:04:22:80:84:c4:9f:75:f5:
25:dd:90:e5:02:2c:fb:08:62:e5:2f:6e:d9:97:38:
ab:3e:89:33:a9:f8:cf:7a:ae:2c:15:6c:c9:62:26:
73:11:27:c6:bd:ae:bf:c3:61:5e:82:33:96:51:0c:
d6:1c:c8:57:62:3e:fb:09:12:ba:ea:91:d8:fb:e3:
5d:2d:42:5b:58:3a:74:72:5c:a3:21:c0:f8:21:1d:
7d:04:48:7f:e4:ed:8a:73:bc:f8:38:17:39:92:5c:
31:c4:c3:c5:0d:a9:9d:ee:f1:6e:f6:4f:1a:c7:82:
9d:54:87:f0:9d:70:1f:80:c4:53:54:e9:a8:fb:f2:
e0:ec:7e:23:f2:9c:24:64:66:90:f2:7f:5b:c2:7c:
03:7c:ac:c9:e3:68:5e:d0:6c:64:d1:fb:ae:72:41:
28:2b:2b:58:54:f3:95:ad:44:c4:e3:38:1c:3c:39:
da:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:59:CC:EB:F2:E0:CB:A2:00:79:7A:FE:DC:DC:A3:51:91:32:56:C2
X509v3 Authority Key Identifier:
keyid:14:A6:CA:BC:30:2E:C1:E3:DC:E7:4D:E9:8B:F5:58:A0:42:BE:AC:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/FKbKvDAuwePc503pi_VYoEK-rFY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FKbKvDAuwePc503pi_VYoEK-rFY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/3475F1CEB3EE11EC80E9531CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.40.0/24
103.143.148.0/24
IPv6:
2001:df0:1880::/48
Signature Algorithm: sha256WithRSAEncryption
9b:17:eb:f4:fa:cb:07:03:1f:4e:8f:9c:b3:f2:37:f0:a4:7d:
f2:86:5b:91:4c:c0:c4:89:b8:c5:7d:34:f5:cf:30:20:76:09:
0e:cb:22:77:f5:ed:98:78:2a:69:06:ba:ef:15:db:8a:25:b2:
17:e2:d4:ac:c7:b2:81:2b:f4:a5:b6:94:75:c1:e7:23:b8:32:
8b:85:0b:f9:f2:86:7f:71:82:93:82:d7:2d:fb:21:de:aa:a7:
98:bc:53:1f:f4:9a:75:09:4e:6d:dd:4d:06:c1:ba:4d:67:f5:
c0:0d:b9:33:c2:b0:b8:a5:1c:2d:9a:4a:1e:db:06:6a:6f:82:
7e:d3:a7:a4:7e:25:b0:35:fb:c9:5e:95:1d:e0:48:f4:60:38:
9c:ff:16:6b:da:5d:fc:50:f6:f2:e0:db:ae:61:a8:87:a6:89:
57:68:6b:c3:f2:41:5d:e5:b8:62:03:04:15:37:f3:e8:f7:1b:
15:50:fd:3d:2a:eb:97:36:d2:79:20:bf:75:06:11:6d:c2:a1:
a3:29:08:18:69:bd:88:d0:9b:8a:3f:6d:32:90:a8:f0:d9:f1:
ed:c8:c4:b0:6d:1d:dd:b0:7e:70:af:be:0b:aa:3b:fa:40:9d:
35:cf:1e:48:39:29:2d:e6:d7:68:27:39:2f:85:28:0b:21:fb:
c6:00:8f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:47:19 2025 by rpki-client