Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/EB411BFCBD0711EFA95C8B55C4F9AE02.roa
File: EB411BFCBD0711EFA95C8B55C4F9AE02.roa (raw, json)
Hash identifier: 5+aAyT9hjA9eikKfPbASpKR62J2KIx1aDQ3N2OKZ1ec=
Subject key identifier: 1E:29:FA:79:E8:90:90:DC:36:58:9E:4F:C2:3B:B9:25:47:0B:30:D3
Certificate issuer: /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Certificate serial: 01A6
Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/EB411BFCBD0711EFA95C8B55C4F9AE02.roa
Signing time: Wed 18 Dec 2024 06:18:38 +0000
ROA not before: Wed 18 Dec 2024 06:18:38 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 137449
IP address blocks: 103.41.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A4D1F
Validity
Not Before: Dec 18 06:18:38 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=6762693e-060c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e5:61:cc:ec:d3:c2:ea:1d:c1:27:fa:13:21:
00:27:ec:26:32:8a:6b:ed:7f:8d:20:58:b2:1f:15:
78:0f:0d:5c:c8:b7:6b:e0:e0:f8:33:25:6d:b6:ba:
74:81:30:4b:c9:f9:b2:2e:fd:df:9c:69:92:5d:d5:
ee:60:5d:9b:73:8d:29:c0:61:03:8f:20:09:cf:66:
96:dc:a3:81:06:cb:c7:84:26:ed:b0:c0:5a:91:82:
95:45:4a:bd:69:29:a2:bc:92:6c:03:05:24:99:fd:
5a:e1:ce:3b:22:46:59:94:87:f6:df:ea:b1:04:2f:
ca:62:6b:e3:9a:a3:41:4a:1a:fb:c9:1b:9c:36:88:
b6:8a:94:e6:5f:3a:e6:e9:77:c9:10:fe:1f:ec:d8:
68:8d:2e:59:b5:cf:f3:4c:b9:b7:60:b5:b8:f8:3f:
6b:8a:eb:4a:02:fd:db:54:d1:53:f3:03:d2:5a:89:
00:f4:85:46:48:84:08:1b:83:a6:da:a0:ef:af:71:
13:8f:3e:02:6b:49:d1:d5:f9:43:2d:20:f0:a9:c1:
94:c5:ab:27:e4:79:5f:af:73:c1:a2:63:61:fc:e0:
3f:14:0c:c2:97:e3:da:78:3b:23:67:32:72:e1:51:
ff:31:c6:ce:5b:4b:7a:ed:3b:de:d7:5a:a4:fe:75:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:29:FA:79:E8:90:90:DC:36:58:9E:4F:C2:3B:B9:25:47:0B:30:D3
X509v3 Authority Key Identifier:
keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/EB411BFCBD0711EFA95C8B55C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.41.95.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:5c:b0:d2:67:1b:e5:40:9c:c8:6a:b8:ab:a8:c3:ea:e2:af:
c2:d6:cc:78:02:23:3e:86:c5:f8:dd:ce:92:d8:f0:f8:84:a6:
86:36:ae:bc:56:03:4c:18:a1:dd:3f:1f:c7:df:de:f9:b3:92:
1c:e0:7e:3c:a3:2a:59:cb:42:1c:ad:25:82:f3:b6:eb:b4:da:
08:cb:c1:eb:10:59:08:98:b1:bc:4b:a6:c4:45:83:50:6c:79:
75:3f:c0:c1:c8:c4:13:46:76:f9:e8:62:a6:39:bc:35:1b:22:
a1:de:83:e8:b7:02:ff:2f:72:e8:6c:e5:dc:9a:80:39:33:17:
65:76:bc:c2:95:8f:4a:72:cd:a6:fe:de:3e:b5:b8:82:da:61:
d5:00:c1:d9:f9:43:ec:86:1f:29:83:eb:cd:20:ed:a1:b3:72:
b5:0b:8e:05:4d:ec:4f:64:48:c2:4a:3e:25:fd:08:a9:50:6b:
4f:6d:73:42:9e:e5:c9:a4:00:42:d1:aa:c0:54:9d:95:d9:ec:
92:6c:16:17:55:0c:90:2f:c1:77:31:59:1e:83:ab:a2:94:14:
53:2a:d7:b4:70:61:f9:ef:28:e4:25:e1:6d:33:60:23:cf:3e:
66:81:da:f0:b7:c2:ae:5e:1e:6e:52:04:bf:2a:cf:ac:c8:b8:
1f:db:f5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:59:10 2025 by rpki-client