Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/7BD35210294811EABB12B46BC4F9AE02.roa
File: 7BD35210294811EABB12B46BC4F9AE02.roa (raw, json)
Hash identifier: EEBAq1rKqCJcAwG529raHpMvuTkgWog8mKuQOqRwcJ4=
Subject key identifier: 83:65:F1:94:F8:84:8D:D1:E2:26:A2:66:07:F2:99:82:9B:04:B6:7D
Certificate issuer: /CN=A91616DC/serialNumber=9776BFB1E8EA8A1ABC8F8CFD6F6622736DD8CA34
Certificate serial: 0AA3
Authority key identifier: 97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/7BD35210294811EABB12B46BC4F9AE02.roa
Signing time: Tue 04 Apr 2023 20:17:11 +0000
ROA not before: Tue 04 Apr 2023 20:17:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137515
IP address blocks: 103.111.120.0/22 maxlen: 24
2405:7e40::/32 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2723 (0xaa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91616DC
Validity
Not Before: Apr 4 20:17:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=642c85c7-cb30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:67:32:ef:cd:fe:00:70:e3:99:86:1c:c4:
12:96:1b:af:0c:3a:f4:49:a3:99:40:ce:78:d6:f4:
81:1c:51:e5:54:a2:f3:05:37:fa:03:ce:31:b4:ea:
1d:f5:d1:ec:89:2c:fa:46:9f:d5:30:6d:de:b3:af:
05:82:23:98:15:ef:96:d1:05:d4:5d:7e:ba:c4:30:
68:55:59:68:c2:1f:0d:3b:69:61:94:26:85:15:d8:
9a:fb:40:fb:3c:8a:68:4b:09:ec:ed:30:c4:07:14:
07:6b:65:90:83:a4:74:f3:ee:e6:7e:06:8b:90:da:
41:df:28:54:30:2f:77:fd:67:fa:ed:3f:f9:9d:7f:
ef:fa:6f:4e:30:3f:af:fc:16:b7:3a:8c:b3:07:af:
10:db:ec:f8:0f:bc:36:ca:6f:cc:26:84:c8:ce:1e:
c2:bb:16:3f:d2:3e:49:d5:68:a6:02:36:e8:91:a1:
13:a9:8a:03:1f:14:b8:30:9a:d2:8f:1f:9b:a2:1d:
ec:ec:4e:8c:9d:2e:aa:65:98:bb:bb:20:8b:f0:28:
b9:d3:da:e1:36:33:a2:61:85:dd:bc:2e:d0:90:5b:
72:b4:77:8f:13:21:85:95:82:99:9d:aa:73:98:65:
a2:6b:78:cf:f5:56:0a:4e:26:5d:d3:42:48:60:67:
08:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:65:F1:94:F8:84:8D:D1:E2:26:A2:66:07:F2:99:82:9B:04:B6:7D
X509v3 Authority Key Identifier:
keyid:97:76:BF:B1:E8:EA:8A:1A:BC:8F:8C:FD:6F:66:22:73:6D:D8:CA:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/l3a_sejqihq8j4z9b2Yic23YyjQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l3a_sejqihq8j4z9b2Yic23YyjQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91616DC/44A7E5E8095F11EAA281681DC4F9AE02/7BD35210294811EABB12B46BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.111.120.0/22
IPv6:
2405:7e40::/32
Signature Algorithm: sha256WithRSAEncryption
25:d5:ac:48:58:8c:1d:78:ba:93:2b:eb:cd:54:a3:75:86:b5:
c6:ce:45:01:13:a0:a9:f8:74:4f:84:73:2c:8a:e2:d1:e0:0d:
1e:c3:a9:29:8e:12:a2:0c:53:fe:a0:69:c1:2d:0c:72:7b:5e:
3d:bf:fa:3f:4b:fc:01:35:c5:41:dc:d3:c9:8d:17:70:df:df:
4f:ff:02:5c:b7:94:d4:74:52:b6:ba:4f:09:10:00:05:a0:c5:
78:d1:5e:ab:b1:d9:c6:07:9f:c5:53:a9:cf:0a:64:d6:93:8c:
41:fc:30:75:14:0c:53:f3:a7:04:4d:6a:c1:06:d0:32:3b:4b:
11:ae:e1:41:7c:3a:7b:10:e1:0f:45:22:88:47:03:4a:62:88:
e2:e1:0f:21:aa:2b:93:18:c8:49:58:5b:ba:ab:c2:69:11:31:
df:91:b6:1f:ab:ab:5c:eb:dc:7a:0c:8a:cf:ed:06:b2:a6:4f:
2d:27:49:3b:51:7c:29:5f:f6:71:7a:ec:c9:63:b1:d7:4e:b4:
88:65:aa:2c:dc:37:0a:dc:00:55:d4:35:57:fa:02:23:ae:95:
23:36:0d:ff:f5:36:71:23:a4:56:2c:6e:19:a8:cf:d7:ab:00:
17:c6:27:4b:97:06:b8:36:bc:a5:77:dc:82:cb:25:ff:1d:1b:
4f:9e:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:45:17 2025 by rpki-client