Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/C4569EA2114511EC87605376C4F9AE02.roa
File: C4569EA2114511EC87605376C4F9AE02.roa (raw, json)
Hash identifier: Z/kzaf6G1ZuvYShwn9mwrfmTGxkR+dAMuUIZMOzoxbI=
Subject key identifier: BB:CE:97:36:4C:CA:AF:F5:77:CE:1A:BD:9C:39:A1:F3:98:53:95:A3
Certificate issuer: /CN=A9148BFA/serialNumber=157B0BDE0E3CADB294839BC9815655644DB26E91
Certificate serial: EB
Authority key identifier: 15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/C4569EA2114511EC87605376C4F9AE02.roa
Signing time: Tue 04 Jan 2022 15:41:47 +0000
ROA not before: Tue 04 Jan 2022 15:41:47 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 40676
IP address blocks: 103.46.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 235 (0xeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148BFA
Validity
Not Before: Jan 4 15:41:47 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61d46aba-3405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:04:67:93:ee:88:04:4c:3a:53:96:10:95:
fe:43:75:af:a3:3b:96:8f:bb:72:7a:e3:14:8f:17:
a4:ca:af:33:e3:24:64:f2:7b:fd:0d:75:ad:ae:79:
c9:e4:4d:e3:58:da:56:0d:3c:b6:8c:f4:10:ea:36:
a4:21:76:75:2a:0f:64:1c:06:14:5a:53:aa:d2:62:
96:55:25:00:03:f2:86:14:12:98:18:23:f4:30:a3:
e6:29:8e:89:41:b6:fc:1a:49:be:ed:9d:b6:fc:e6:
06:3e:ea:cc:45:ae:79:08:73:4a:bf:11:08:2a:c1:
b1:5e:00:70:ac:59:76:25:20:e0:ff:f2:10:84:ec:
d2:c9:29:f4:96:43:e7:94:82:a2:19:db:06:18:f3:
5c:0c:7c:80:20:c2:a0:01:ce:52:7a:b9:77:c8:27:
f0:e9:9f:62:ce:ae:4d:9c:a9:3a:05:07:e7:69:cf:
c9:38:a3:19:9a:2c:20:6e:c1:bb:b7:06:ee:66:f7:
a1:e7:d4:e4:d8:fb:c7:ff:83:5b:57:6a:f4:a6:f1:
ec:2f:75:b0:42:3a:f3:5b:cf:ca:7d:72:be:f2:7d:
ea:b7:3f:6d:38:08:67:8f:07:3f:65:fc:97:e3:69:
bb:c8:3a:47:f1:ce:81:4d:3a:25:20:e9:12:9e:1b:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:CE:97:36:4C:CA:AF:F5:77:CE:1A:BD:9C:39:A1:F3:98:53:95:A3
X509v3 Authority Key Identifier:
keyid:15:7B:0B:DE:0E:3C:AD:B2:94:83:9B:C9:81:56:55:64:4D:B2:6E:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/FXsL3g48rbKUg5vJgVZVZE2ybpE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FXsL3g48rbKUg5vJgVZVZE2ybpE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148BFA/04A24C34114311EC97369F73C4F9AE02/C4569EA2114511EC87605376C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.141.0/24
Signature Algorithm: sha256WithRSAEncryption
26:0b:b9:c8:81:84:da:02:05:a6:fa:a0:65:85:ed:9c:8d:10:
1f:97:7f:be:b3:d3:b5:ae:da:71:01:a4:27:a7:35:e9:56:0a:
59:d6:e8:c7:0b:15:9c:7f:0c:c6:49:c1:02:17:10:28:a5:c2:
80:5a:25:6e:99:83:75:be:e6:6e:5e:43:1f:24:f2:a0:73:27:
85:b1:dc:39:89:0b:0d:4c:6a:bd:4d:11:21:46:88:41:b7:9a:
af:2f:a2:8f:be:80:4a:e9:85:51:9a:0a:ed:dd:80:39:bb:44:
14:18:6f:2b:57:91:95:4b:e9:5e:b7:c1:47:85:e1:18:c7:a9:
d2:c3:1c:ee:0a:ab:21:67:ec:58:1b:6f:62:ce:a0:3f:2f:af:
79:6e:70:0b:c7:4f:74:c2:be:99:18:42:44:2b:81:0f:dc:16:
47:28:3d:10:5c:8e:d3:73:d1:d0:d8:f1:27:a6:0b:06:73:35:
52:54:a4:17:1b:e6:05:96:17:5a:aa:c9:5e:d9:c6:88:54:34:
33:33:c8:ef:a6:88:e0:65:7f:b8:23:73:49:cb:7b:e6:fd:ee:
31:6b:fc:a3:31:e1:69:59:58:c0:ae:d4:99:71:0d:eb:95:fc:
5d:b7:01:9f:ec:1e:37:3f:77:e2:de:4d:a9:00:c3:ed:6f:c5:
1e:7f:d3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:12 2025 by rpki-client