Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/B0C0F38EC60711ECA38AF363C4F9AE02.roa
File: B0C0F38EC60711ECA38AF363C4F9AE02.roa (raw, json)
Hash identifier: jS4O2GwUWJ8p2HngG7EoJ6pnl2bfxzC4U/HRnuQuEkI=
Subject key identifier: 42:9B:40:D3:34:2D:93:78:13:74:73:FE:8D:4C:65:3D:21:17:9D:D0
Certificate issuer: /CN=A91702B9/serialNumber=ACE2C4CCB089D21B370454B00E6B593AF28862F6
Certificate serial: 02
Authority key identifier: AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/B0C0F38EC60711ECA38AF363C4F9AE02.roa
Signing time: Wed 27 Apr 2022 08:54:48 +0000
ROA not before: Wed 27 Apr 2022 08:54:48 +0000
ROA not after: Sat 30 Jul 2022 00:00:00 +0000
asID: 132742
IP address blocks: 45.115.240.0/22 maxlen: 22
103.56.24.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91702B9
Validity
Not Before: Apr 27 08:54:48 2022 GMT
Not After : Jul 30 00:00:00 2022 GMT
Subject: CN=626904d7-5a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:09:ed:19:f0:e1:d4:65:28:05:9a:f3:70:fc:
8d:16:87:32:82:88:0f:ce:63:4c:50:09:64:57:27:
ab:08:5d:8f:8e:c1:16:99:d2:32:d3:32:e2:08:1c:
04:69:4c:96:52:4b:43:d0:de:09:1e:20:7a:cf:57:
c2:23:70:9c:e2:df:be:f9:65:0b:51:f3:56:dc:b4:
cb:43:0a:7d:ef:df:17:c3:4e:a1:01:cf:16:d7:e6:
fa:4e:56:e2:ff:6c:f3:df:56:59:52:1f:58:67:c5:
7b:d5:c6:05:81:67:30:51:04:52:2e:a7:6e:4e:0f:
d5:53:56:ba:c4:dc:0d:d9:1f:19:c5:1c:d5:7b:34:
9e:cc:7c:38:66:17:61:5e:bb:52:1c:3f:6c:30:46:
e4:1c:9e:ca:44:dd:2d:78:90:56:87:e2:7a:d9:19:
01:4c:1f:d5:f8:51:7a:8f:82:77:6b:66:a8:7c:23:
76:72:a5:28:92:2e:0b:41:bd:49:2c:7f:3e:9f:16:
29:82:50:3b:97:58:2f:86:03:af:65:72:04:f1:10:
62:11:04:7c:b2:91:e2:b9:6b:8d:d9:8b:2a:70:a7:
e2:3b:8d:1d:83:72:a1:47:cc:a6:ff:3c:d8:f2:4f:
77:e2:c0:af:cf:5c:f9:ca:7a:b5:af:4a:99:40:ce:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9B:40:D3:34:2D:93:78:13:74:73:FE:8D:4C:65:3D:21:17:9D:D0
X509v3 Authority Key Identifier:
keyid:AC:E2:C4:CC:B0:89:D2:1B:37:04:54:B0:0E:6B:59:3A:F2:88:62:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rOLEzLCJ0hs3BFSwDmtZOvKIYvY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91702B9/3B72EE90C60511ECAB74D962C4F9AE02/B0C0F38EC60711ECA38AF363C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.115.240.0/22
103.56.24.0/22
Signature Algorithm: sha256WithRSAEncryption
45:d1:2e:13:79:af:d9:b9:73:c4:b7:97:13:a5:55:7a:84:bf:
51:48:ff:c0:c9:d6:c2:d5:9d:cb:34:24:8a:03:f0:6f:b0:dd:
09:9a:1a:22:dc:5a:a6:39:70:7e:57:bb:bf:ac:0a:96:5a:cd:
cd:6c:b0:c1:fd:5d:60:1e:63:36:33:20:88:74:03:2f:f0:b8:
52:a2:8f:f9:f3:89:26:10:f9:37:69:da:b2:5b:6a:6f:10:fa:
1b:74:9f:bc:73:fa:a7:5e:93:f2:2e:a7:e1:82:e2:24:51:28:
da:e3:58:cb:23:c6:27:69:df:7b:a8:3b:f1:95:0e:5c:c2:de:
9a:9a:b0:90:4e:bf:aa:c2:dc:2f:85:c9:ab:1d:6d:19:18:f6:
91:91:dd:52:a5:86:fb:d2:2f:65:08:56:e1:35:f1:f6:b7:36:
7b:76:b5:40:b0:3d:f7:a0:92:25:a9:7c:d5:52:c0:8b:68:77:
a9:93:8e:0a:04:13:98:d0:f4:94:08:6a:0a:65:27:8d:56:c3:
ea:4a:f3:60:c9:0e:c5:3d:a2:ff:33:52:9a:47:a7:93:d8:c1:
bb:45:7c:16:49:f1:88:88:a5:d2:41:26:c1:4a:9d:20:53:5b:
de:17:ba:a8:74:2d:0c:98:5b:01:f7:7c:90:65:ab:b3:11:07:
eb:f0:01:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:52:19 2025 by rpki-client