Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/8E7B6E6EBDDD11EFB1946851C4F9AE02.roa
File: 8E7B6E6EBDDD11EFB1946851C4F9AE02.roa (raw, json)
Hash identifier: HWeon4+0727Vg30Pc3i2sEJpvPAFC/cggK0CJS7c6y0=
Subject key identifier: 70:43:2B:8A:8D:B2:08:43:2A:F5:97:8E:36:1C:59:08:BA:E4:C8:C5
Certificate issuer: /CN=A916732F/serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
Certificate serial: 0541
Authority key identifier: 1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/8E7B6E6EBDDD11EFB1946851C4F9AE02.roa
Signing time: Thu 19 Dec 2024 07:47:55 +0000
ROA not before: Thu 19 Dec 2024 07:47:55 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 140068
IP address blocks: 103.161.46.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1345 (0x541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916732F
Validity
Not Before: Dec 19 07:47:55 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6763cfab-b094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:51:4f:94:a2:60:5d:5c:2a:7b:29:1d:1a:49:
e1:0f:05:81:a7:88:fa:b5:d2:86:68:a8:0c:94:4e:
1b:0d:1d:f9:85:07:c7:14:ca:41:87:a2:76:ac:5c:
4a:52:ed:59:e5:71:c9:00:49:ca:35:57:19:31:49:
10:9a:ed:ca:55:d6:3b:0c:f5:37:c2:13:48:10:ac:
60:ef:dd:73:44:d9:61:79:c3:ff:c7:46:32:38:5a:
54:6d:c0:8a:f5:f7:ae:b5:c7:10:be:dd:45:c9:5d:
75:bf:06:3c:90:15:27:76:d4:d5:14:b1:27:06:2b:
66:bb:3a:91:b3:b5:3b:56:c1:ed:85:f4:64:c5:84:
ba:bc:cc:6d:df:9e:e4:69:f9:31:16:55:82:e8:51:
81:fd:44:3f:68:71:dc:c6:df:c5:e3:47:1a:7d:ba:
0b:b3:6b:2d:ff:7c:69:33:c1:b7:4d:6e:df:81:39:
19:67:0b:3e:b2:dd:b1:a9:af:71:77:92:10:78:ec:
31:6c:a8:6a:85:7a:53:1d:e4:3b:e9:74:e8:99:55:
5a:ea:37:3c:5f:58:84:07:0b:da:e8:a8:47:1d:ff:
83:18:d9:8f:d6:ad:01:e6:5d:64:34:f5:d3:0f:d3:
ff:01:36:6f:8e:b5:5c:2d:42:09:28:86:2b:51:33:
3a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:43:2B:8A:8D:B2:08:43:2A:F5:97:8E:36:1C:59:08:BA:E4:C8:C5
X509v3 Authority Key Identifier:
keyid:1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/8E7B6E6EBDDD11EFB1946851C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.161.46.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e5:97:12:a0:9c:ba:7b:ba:3f:06:11:47:2f:c2:7e:16:ff:
13:77:e7:9a:91:0e:ba:36:01:ca:2f:16:15:9b:a6:7d:d7:d0:
a8:d3:52:0c:40:29:fb:25:e8:44:e0:43:30:12:bf:db:90:d9:
ab:7e:b1:62:db:1b:52:dc:2e:2a:6a:82:64:1f:e2:55:b8:ed:
80:ad:23:77:d0:c0:31:f6:19:48:92:55:22:40:77:55:8e:fc:
68:f3:c8:15:10:f2:2e:7a:47:88:4d:9e:94:34:b3:b2:20:d9:
cf:7d:4b:98:05:b2:57:e9:55:20:97:1e:1b:c6:ff:98:e0:02:
bd:76:7a:f0:2f:3b:ad:0c:e6:79:25:b0:47:d6:20:c7:27:7c:
1a:6f:cf:22:a7:85:2a:b5:c7:2b:31:3d:99:e0:8e:04:a8:6e:
19:89:26:e4:48:4e:1a:4b:7e:da:2a:1a:8c:70:16:14:aa:71:
bd:e5:b5:ee:c4:6b:4e:65:e3:ad:9f:7a:bb:f1:89:35:12:b9:
69:f1:26:6e:89:b3:20:c2:cb:bb:72:0a:bf:0e:19:3c:ce:d5:
a9:a4:20:85:67:00:11:d2:43:5b:fd:03:90:1f:09:4a:68:80:
c1:3f:75:7e:f6:dc:2a:79:05:43:b3:86:23:3a:89:5d:04:c7:
eb:ca:8b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:20:43 2025 by rpki-client