Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/CC9BF248E04911EFB44FF948C4F9AE02.roa
File: CC9BF248E04911EFB44FF948C4F9AE02.roa (raw, json)
Hash identifier: Qeh39YcMyWikO46N22ioLBNqofcJ/3CZ907/Kzd7V8w=
Subject key identifier: 7E:5C:39:8D:1E:65:6C:94:88:7D:8A:ED:A0:25:0A:7A:E6:1F:62:92
Certificate issuer: /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Certificate serial: 017D
Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/CC9BF248E04911EFB44FF948C4F9AE02.roa
Signing time: Sat 01 Feb 2025 03:08:24 +0000
ROA not before: Sat 01 Feb 2025 03:08:24 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 150108
IP address blocks: 103.122.222.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 381 (0x17d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918664E
Validity
Not Before: Feb 1 03:08:24 2025 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=679d9028-9ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cf:c6:4c:08:32:cf:e8:03:44:3a:52:27:79:
e1:b5:7c:f4:d7:55:c1:14:4c:c3:4e:fb:f4:c4:26:
3c:eb:45:df:a6:43:db:93:1d:54:bb:f9:10:84:9a:
f2:ef:16:17:d0:14:65:e2:e9:54:2a:7c:83:dc:3e:
1b:57:2a:f9:79:80:cf:6a:fe:cc:ab:5b:6a:8c:40:
82:f9:bb:3b:e1:9b:fd:8a:89:e7:e6:93:6a:39:ae:
b0:6e:72:21:80:4c:3c:f8:f2:83:95:b3:62:38:4d:
1f:30:d8:1d:07:5c:5f:50:36:14:64:a4:87:8b:0b:
54:04:60:39:ed:a7:c3:df:4a:fc:d0:b3:0d:f7:4b:
cd:25:f7:a8:f6:92:d8:34:27:4e:5b:0b:20:95:f3:
0b:d4:4d:12:9c:fe:3f:d3:4b:4f:87:05:a1:01:74:
a0:8d:a3:e0:09:98:73:75:f0:76:41:1e:bf:88:28:
cf:83:cb:5b:38:9b:32:78:20:0b:b9:00:75:d1:23:
69:cf:64:c3:53:dc:84:7c:9e:3d:b4:ba:00:32:be:
31:01:06:90:fd:92:d0:51:b0:ac:5b:ba:d3:b4:55:
d2:9f:69:36:eb:38:ff:f6:11:f0:ac:1b:f4:01:44:
45:59:79:a4:bb:08:d6:3e:b4:51:59:88:05:da:cf:
24:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:39:8D:1E:65:6C:94:88:7D:8A:ED:A0:25:0A:7A:E6:1F:62:92
X509v3 Authority Key Identifier:
keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/CC9BF248E04911EFB44FF948C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.222.0/24
Signature Algorithm: sha256WithRSAEncryption
15:e0:f0:ec:54:d4:33:27:6c:d3:68:0d:88:ea:4c:7e:77:3a:
bd:0d:d4:fc:4c:cd:59:e7:5d:51:a2:fe:9d:7f:b9:48:58:56:
61:25:9b:3f:d7:2b:b0:78:7e:02:21:0c:e7:44:d3:f4:12:00:
e4:b7:bc:fd:99:8d:c3:29:fc:80:b8:e8:0d:a1:20:e2:02:4f:
73:df:ba:a8:ce:ec:be:db:6a:54:cf:d0:21:9a:71:4e:af:9c:
90:5b:e4:86:24:7e:37:c0:1c:04:89:c3:52:89:cb:b6:2a:bd:
9d:51:a9:cb:c6:5e:51:9b:cb:1e:22:7f:8c:38:2a:19:f2:d4:
ae:c5:ff:38:a4:9d:b0:7b:87:89:46:be:64:75:64:62:e0:5b:
d9:78:57:4e:5b:0b:f2:c1:16:22:85:54:5d:5d:c6:56:f8:d6:
00:36:db:bb:36:e0:87:8e:90:d9:0c:98:d3:17:73:67:3e:1c:
de:7b:f6:94:ff:98:b0:71:0f:54:06:ef:1d:30:af:7d:3a:f4:
7c:97:e2:7d:85:8f:36:55:fe:be:44:9b:a3:9e:f2:05:38:68:
03:cc:f7:fc:0c:5d:37:45:fd:ee:7d:dc:76:d0:83:0a:2b:67:
d7:ba:bc:1b:fb:f3:d8:80:07:0d:11:79:40:68:e1:03:57:17:
39:c4:bd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:00:43 2025 by rpki-client