Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/175798749D8E11EDBEBECE73C4F9AE02.roa
File: 175798749D8E11EDBEBECE73C4F9AE02.roa (raw, json)
Hash identifier: SzgkHASBgZSft4TCT/T1IhS5LA5ETAZLy6nM0LnzlpY=
Subject key identifier: B0:EF:1B:35:17:A9:DE:72:0B:2A:F3:13:F9:08:F9:16:36:74:6A:B1
Certificate issuer: /CN=A91A6943/serialNumber=0AB99F52C9AD9BE0B9C04470CFB1B6C2360FD0F5
Certificate serial: 07E5
Authority key identifier: 0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/175798749D8E11EDBEBECE73C4F9AE02.roa
Signing time: Thu 26 Jan 2023 15:28:32 +0000
ROA not before: Thu 26 Jan 2023 15:28:32 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 45814
IP address blocks: 103.74.21.0/24 maxlen: 24
103.74.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2021 (0x7e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6943
Validity
Not Before: Jan 26 15:28:32 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63d29c20-d6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:30:68:57:1f:61:74:60:47:7e:2a:67:d9:20:
df:0c:4a:14:f9:fc:9b:44:c3:7e:22:b7:24:2b:d3:
27:ac:31:88:15:5f:30:5b:70:81:5f:a2:5a:4b:e4:
c6:21:0e:f7:17:89:e0:32:c4:23:61:b0:96:2c:1b:
a1:4f:17:76:40:df:22:7f:c8:10:72:bc:00:42:63:
f0:a5:72:6d:2d:cf:58:2d:00:15:2b:de:46:5a:d4:
f9:71:3e:27:1e:49:3c:69:e9:94:87:aa:e4:e6:64:
46:ef:27:e6:c1:01:6f:e4:fc:34:36:7b:e1:b3:45:
bd:32:56:4d:90:fd:d6:b8:85:18:5a:b0:8d:55:cd:
7d:72:65:bb:d0:1d:1d:66:69:f0:12:8e:de:06:2e:
88:75:1c:71:68:bf:7d:b1:2b:77:48:a4:e1:d7:46:
52:e0:67:dc:0b:6b:e7:72:c0:cb:88:7b:84:5e:59:
04:3d:38:df:a7:98:42:91:86:de:45:6d:80:32:1a:
59:8e:cf:ed:84:97:c1:23:a7:22:f1:d9:21:82:4d:
52:2d:e3:fc:00:a2:c5:cd:62:79:1f:be:5d:49:37:
11:c1:8c:0a:ce:12:48:90:8c:53:00:45:12:4a:75:
d5:11:91:81:a4:ab:ae:3a:38:31:15:25:cb:e1:c2:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EF:1B:35:17:A9:DE:72:0B:2A:F3:13:F9:08:F9:16:36:74:6A:B1
X509v3 Authority Key Identifier:
keyid:0A:B9:9F:52:C9:AD:9B:E0:B9:C0:44:70:CF:B1:B6:C2:36:0F:D0:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/CrmfUsmtm-C5wERwz7G2wjYP0PU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrmfUsmtm-C5wERwz7G2wjYP0PU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6943/B71811688D5111EAB8B26384C4F9AE02/175798749D8E11EDBEBECE73C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.21.0/24
103.74.23.0/24
Signature Algorithm: sha256WithRSAEncryption
42:fa:42:76:12:75:89:aa:8d:36:a4:03:c6:99:d1:90:64:44:
b7:d6:11:d4:d9:a0:84:d3:61:77:0b:e9:aa:a3:f8:fb:23:c2:
ea:12:ea:be:e7:2d:b5:32:79:2c:98:32:20:76:b3:75:e0:0c:
f7:66:a7:36:76:86:40:12:37:ed:47:5d:c7:f4:c2:bc:24:16:
f0:cd:ca:26:e9:71:5f:c2:10:03:b3:96:d9:68:f0:a3:8e:ee:
e8:f7:d0:6e:20:ec:d0:a3:69:8b:d7:01:54:ec:35:c4:5c:e8:
a4:4c:49:23:2b:8b:94:e3:85:04:5c:6b:fd:8d:0e:cd:bd:7d:
88:66:84:5a:b5:67:0c:91:bf:86:ee:20:10:43:a0:a7:66:58:
d4:63:1f:d7:a1:b9:bc:7f:a6:e4:22:2c:4d:e0:56:f8:27:1b:
2f:72:d3:2c:16:24:d2:ce:ee:80:58:be:9c:c9:d1:a8:6e:54:
0e:2e:ed:25:d2:fc:a0:5e:76:b0:cb:4e:0f:8c:cd:91:ac:09:
84:f9:f0:cb:91:e7:b0:75:f3:b4:0b:4f:24:5f:73:ab:36:6e:
df:5f:ed:b8:63:4e:14:bf:13:e5:df:fe:4f:e5:f3:b1:e7:e0:
83:d3:e8:cb:5c:b4:3a:b6:0a:43:84:01:74:c6:8d:78:0a:43:
3d:7e:0c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:33:59 2025 by rpki-client