Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/D1F8B76CD17711EE97C5D47EC4F9AE02.roa
File: D1F8B76CD17711EE97C5D47EC4F9AE02.roa (raw, json)
Hash identifier: iKjPIduJZZHDwOmzPh9lH9BvawjpB8DJ8wGHfHT9DWM=
Subject key identifier: 56:31:51:AD:69:EF:F9:C5:CC:36:5A:B2:6B:48:CA:1F:6B:A8:CD:A8
Certificate issuer: /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Certificate serial: 0559
Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/D1F8B76CD17711EE97C5D47EC4F9AE02.roa
Signing time: Thu 22 Feb 2024 12:21:15 +0000
ROA not before: Thu 22 Feb 2024 12:21:15 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 141743
IP address blocks: 103.163.94.0/24 maxlen: 24
103.167.10.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1369 (0x559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9184279
Validity
Not Before: Feb 22 12:21:15 2024 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=65d73c3b-7db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:1e:18:2f:98:6f:24:07:9c:ea:b6:83:dd:
58:78:36:f9:e4:22:a3:08:de:5a:cd:af:2f:82:1f:
39:55:26:89:f3:b7:9b:c6:60:63:93:b5:35:76:43:
bd:45:cf:65:6c:c1:a4:77:76:d5:38:b4:0e:2e:0f:
23:d5:f7:56:cd:df:5f:2b:ba:30:d6:46:f0:b5:2f:
63:ef:c7:0c:78:03:ef:15:32:c8:82:fc:d3:43:89:
0e:6e:4e:96:1e:1d:97:51:4e:e2:38:87:e9:57:5e:
f5:7e:b4:9f:c0:c0:cc:2f:04:ea:1f:d9:97:db:71:
d1:b6:5d:f5:e8:5d:f7:e6:29:20:d1:19:fe:40:3b:
35:16:7c:af:a9:20:2e:25:64:cd:77:96:77:86:5d:
ff:ae:b2:df:42:30:50:a1:e1:f9:c7:79:c8:85:dc:
ad:1f:9d:6f:0a:fe:78:dc:07:4f:d8:ef:af:32:e8:
02:0f:3e:3a:78:81:0e:6d:2b:73:16:70:f7:57:51:
77:6e:4a:0e:06:55:97:fb:79:44:a7:17:bb:e7:73:
97:9c:f1:9e:91:36:a8:56:e4:68:d3:e4:a8:a9:50:
b9:74:30:29:53:1a:17:31:cc:66:23:12:98:31:f9:
a3:2a:db:b0:df:b2:8a:29:1c:ee:07:9a:78:b6:c0:
ac:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:31:51:AD:69:EF:F9:C5:CC:36:5A:B2:6B:48:CA:1F:6B:A8:CD:A8
X509v3 Authority Key Identifier:
keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/D1F8B76CD17711EE97C5D47EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.94.0/24
103.167.10.0/24
Signature Algorithm: sha256WithRSAEncryption
04:77:e2:6b:b6:d1:7b:c3:da:54:a9:36:27:ba:86:26:95:6e:
3d:77:ec:d6:92:b9:b9:ff:b9:ef:b7:bc:ee:15:63:ae:45:e5:
0f:00:5c:d7:de:c2:0c:f9:65:62:f4:e7:0c:bf:9e:61:3f:8c:
2c:5a:0d:d6:c1:2b:23:8a:70:5b:e0:1d:94:77:65:3a:84:37:
8b:e4:e0:c4:8c:25:7a:0f:9f:29:33:0b:eb:d6:64:67:2e:69:
85:c0:d6:e1:a5:f3:48:38:69:7d:25:88:18:cd:e1:dd:c5:1b:
61:b0:43:2e:89:8f:51:82:7d:67:00:66:90:78:54:e4:28:d3:
68:16:1c:37:d4:1c:fd:37:8a:2c:55:6e:e3:e6:b7:94:5b:53:
bb:f0:b2:51:df:40:9e:a1:c7:12:00:3e:2d:f0:eb:05:10:0b:
64:2a:cb:1f:0f:95:d0:ec:35:34:0b:4f:8b:1f:87:f0:f0:1c:
ac:7c:0f:62:75:d8:66:d5:51:26:47:68:86:09:f8:02:3c:3c:
e3:8d:8c:23:7f:74:c4:c8:d5:06:39:a5:0f:cc:bf:99:31:f1:
95:6c:ea:a6:ea:34:76:a6:47:2e:a4:88:56:e8:32:54:11:5b:
26:8d:be:5a:8e:a4:f7:28:a6:c2:65:5f:c6:1f:e9:35:00:d4:
ab:48:8f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:28:32 2025 by rpki-client