Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F60AAAC0F6911EE9C6BFE46C4F9AE02.roa
File: 3F60AAAC0F6911EE9C6BFE46C4F9AE02.roa (raw, json)
Hash identifier: gVtKzNFqdYtJ0ZzZpfxRi4xiEUg4Q0Ql/1mG0cq9GRU=
Subject key identifier: E9:6E:57:B9:8B:49:7F:3D:D8:EA:DB:C3:7B:98:DA:77:78:5E:0C:BE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 743D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F60AAAC0F6911EE9C6BFE46C4F9AE02.roa
Signing time: Tue 20 Jun 2023 12:52:01 +0000
ROA not before: Tue 20 Jun 2023 12:52:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137134
IP address blocks: 103.109.182.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29757 (0x743d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 20 12:52:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6491a0f0-adc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:74:20:81:b9:76:d4:5f:56:d4:48:12:c4:
12:e0:87:80:27:6f:97:0d:6c:d4:bd:8a:b3:42:64:
55:ce:d3:e4:10:68:cb:8d:13:af:9b:b1:6e:4c:05:
43:f5:4d:83:ed:a2:2d:1a:b1:95:e8:c7:f0:18:d3:
71:36:c6:98:00:9d:a1:9b:36:70:2e:44:ad:e9:fa:
b9:41:f1:ea:04:16:97:dc:c0:8f:44:37:38:76:14:
38:1b:d7:97:e2:97:43:5b:de:cc:61:5d:fc:d2:71:
32:67:1a:bf:c6:ae:e3:37:29:80:14:49:21:53:a1:
0c:73:49:84:d9:0b:69:8f:ec:72:03:a3:de:7a:36:
45:90:ea:f8:8f:9c:6b:81:91:05:44:8c:33:cb:d0:
ae:2c:db:51:31:43:a0:62:0a:a8:0d:fb:dc:e1:a6:
38:c9:db:c4:84:8f:61:fa:8e:da:e2:53:42:a9:fc:
61:65:8c:98:de:55:bb:a0:69:dc:3a:3f:3c:b4:a0:
29:be:fa:c9:2e:44:b4:f7:01:0b:b4:fb:5f:36:ff:
8d:bd:ca:57:90:47:7b:fd:57:c6:ce:21:eb:74:c0:
33:7c:ef:7c:4b:6e:d8:ea:62:39:24:91:af:87:2d:
79:43:0f:7f:32:64:6c:b3:41:14:c3:3c:70:79:12:
9c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6E:57:B9:8B:49:7F:3D:D8:EA:DB:C3:7B:98:DA:77:78:5E:0C:BE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3F60AAAC0F6911EE9C6BFE46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.109.182.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:07:f8:b8:e2:99:e9:3a:86:8d:68:5d:e5:77:73:0a:07:b2:
a1:32:dd:10:d7:c9:6a:c9:dc:37:25:2c:97:fd:a7:73:5b:dc:
76:8e:9d:1a:6f:35:bb:40:f3:15:42:0e:fe:7b:5c:e0:93:93:
d6:d5:64:dd:4d:b6:79:61:59:57:0f:6a:13:93:95:36:b3:15:
9d:4e:77:61:cf:16:c3:33:cc:b1:58:db:85:3d:b1:77:ed:d1:
e7:bf:53:cb:6a:2a:6e:6b:0a:b5:e7:81:2b:ac:1c:a8:b2:4d:
5b:f1:a8:87:f9:29:67:d1:84:30:2a:64:39:71:ad:19:8d:be:
ee:36:55:93:bd:1f:a4:69:10:f7:c3:e6:c0:95:39:d5:55:27:
16:2c:3f:75:a4:6f:b9:91:c4:15:d0:dd:8d:bd:b6:b9:dc:9f:
c9:2e:e5:8a:c8:19:bf:6d:92:e6:68:4f:6c:d1:72:69:18:44:
36:f1:4a:b3:c5:30:38:a1:c7:c9:af:9b:77:62:d3:3f:11:68:
f3:b3:c1:17:25:cb:d1:25:45:50:fd:c0:67:66:f8:5e:12:39:
4d:1e:34:4a:c7:23:2f:9a:57:c9:dd:93:96:1e:7c:a9:1b:e3:
ea:0d:9d:b9:40:e3:64:46:fe:d0:7d:ce:ff:e9:cc:ca:5b:be:
60:f1:db:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:42 2025 by rpki-client