Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/DCD00D5E337311EE808C9F28C4F9AE02.roa
File: DCD00D5E337311EE808C9F28C4F9AE02.roa (raw, json)
Hash identifier: ySXjF1xBAk8OsHptg9s9NB6sRiRqQTgqPDDPgfQLxuM=
Subject key identifier: 0C:80:56:65:F3:8B:15:FE:09:4B:E9:44:46:C5:7F:D9:05:A9:E3:0B
Certificate issuer: /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Certificate serial: 0137
Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/DCD00D5E337311EE808C9F28C4F9AE02.roa
Signing time: Wed 09 Oct 2024 03:47:18 +0000
ROA not before: Wed 09 Oct 2024 03:47:18 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 24499
IP address blocks: 103.122.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 311 (0x137)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918664E
Validity
Not Before: Oct 9 03:47:18 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6705fcc6-20e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:d3:32:c1:67:48:9d:81:ac:cc:95:17:c6:
cb:3c:ae:d2:df:f6:c5:f3:2b:a1:cb:b1:15:3c:79:
52:58:5f:60:30:28:38:c1:cb:c1:28:6d:4a:ba:a4:
41:8b:cb:f7:5a:70:a1:fe:b4:3d:ac:02:06:f2:73:
67:a2:cf:9e:ab:3d:84:e7:67:50:fb:16:dd:ac:e1:
41:a6:ed:69:22:de:90:5d:75:ca:e3:87:33:58:e0:
24:e4:64:5e:1c:f6:9b:0d:e6:40:96:87:9d:94:51:
05:bb:6b:cf:1e:21:dd:19:d9:37:b2:17:b6:4a:e1:
68:06:3a:0b:38:1d:66:9e:ea:6c:f7:b6:79:c4:31:
00:c1:20:7a:28:df:23:5f:cc:62:0a:b5:2b:a0:62:
98:36:03:83:b5:d5:b5:26:b7:0a:83:52:ee:84:2d:
c3:59:37:60:f5:80:98:49:f4:7c:dd:43:1b:49:7e:
ca:67:f0:8b:70:67:a0:f1:24:7a:29:1b:00:c7:bf:
81:e0:7a:df:45:17:1f:26:d3:6b:99:c2:79:ba:cd:
0b:2d:83:a2:83:2a:d0:a9:c0:72:69:15:2e:82:d9:
3a:99:17:6c:77:1f:ec:2a:89:8f:c2:0b:ee:4e:19:
02:f0:74:45:6d:23:e8:9f:73:57:00:dd:07:45:c4:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:80:56:65:F3:8B:15:FE:09:4B:E9:44:46:C5:7F:D9:05:A9:E3:0B
X509v3 Authority Key Identifier:
keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/DCD00D5E337311EE808C9F28C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.223.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b3:9c:1e:23:c2:53:71:23:80:41:c5:50:c8:e1:e9:c6:8f:
02:e9:0e:ec:4c:01:11:fa:b3:a0:fe:34:5f:ef:5b:df:2c:ab:
b6:b0:d7:37:a6:b2:08:83:fa:51:e2:89:72:17:b1:09:3f:50:
1a:e3:27:73:fb:72:9f:f5:11:72:2e:cd:3e:51:b0:39:9f:19:
ff:0e:24:d1:5c:63:d5:9e:99:c8:19:9a:54:ca:16:e7:ed:d7:
68:14:1f:d9:3d:7b:0f:26:6b:ad:02:f9:c4:cf:17:77:7d:4a:
be:92:18:45:54:57:e6:f7:0d:d4:84:05:1f:53:cd:71:f2:14:
d7:85:65:71:52:06:3d:d7:bd:03:8d:66:71:fb:67:da:c0:c2:
82:7b:30:c1:6b:35:8f:a0:4a:70:3b:6b:64:3b:25:41:79:93:
48:de:10:0e:fd:8f:23:de:6b:92:f9:7e:3d:ee:24:79:a9:25:
b3:ef:45:b7:4e:6f:47:45:06:0a:09:4e:0d:fb:87:5a:d4:71:
3a:c3:51:8e:79:3a:34:ed:ed:85:fd:6d:43:06:41:49:df:4c:
97:4f:36:5b:00:84:9a:d9:0c:b7:ce:b4:16:e3:b9:00:13:56:
48:60:af:bd:c9:56:51:68:dd:d2:7a:a7:2e:eb:a0:ff:b0:77:
a2:71:9f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:12:36 2025 by rpki-client