Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/BE23528623A111EDB57D9C75C4F9AE02.roa
File: BE23528623A111EDB57D9C75C4F9AE02.roa (raw, json)
Hash identifier: q7DebyJ/AmLcLfGr2lRZr5KdZzhRaf2Mv7mc8BRGK0Q=
Subject key identifier: 67:4B:16:42:C6:69:19:5F:AC:5E:A7:A8:0E:A5:83:FF:DA:DA:BC:97
Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial: 0464
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/BE23528623A111EDB57D9C75C4F9AE02.roa
Signing time: Wed 03 May 2023 03:03:01 +0000
ROA not before: Wed 03 May 2023 03:03:01 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 203945
IP address blocks: 103.97.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1124 (0x464)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7761
Validity
Not Before: May 3 03:03:01 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=6451cee4-c6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:35:95:7d:3e:2b:ac:7b:81:bb:ce:9f:58:
8c:98:e5:00:4c:97:4e:ce:6a:8e:77:a8:51:0e:bd:
e0:d0:0b:32:63:ea:3c:41:47:48:9b:0d:01:2f:1a:
ba:05:de:18:4e:5a:e6:cf:46:83:80:4e:e7:d9:33:
61:b4:4c:a4:69:2d:c0:2f:06:26:30:ff:0c:a0:9c:
6a:35:b0:c0:9f:16:fa:29:24:db:49:c6:d9:d6:e7:
5e:ca:d2:17:ee:60:c2:90:54:b3:23:19:b7:5c:12:
c1:d2:c3:8e:3c:99:4e:5f:e9:0f:88:09:f9:4e:e0:
ec:f0:16:70:1b:68:56:61:05:cb:1f:d8:1a:b3:c0:
54:a4:bc:bc:f4:05:3c:fb:b9:30:ca:c8:e6:eb:81:
fa:6d:17:92:b9:78:10:8d:b3:89:31:d1:9d:37:3a:
ff:7b:59:7d:f5:5b:68:7d:56:cf:fd:71:32:26:11:
da:63:ff:39:4d:d3:48:e9:e1:3f:f1:53:7e:c7:78:
4a:6d:e1:84:64:7b:d7:57:49:3c:5b:2f:b0:59:9e:
77:e1:21:72:cf:33:16:e7:a3:01:07:35:d3:e0:89:
3a:9e:68:b0:47:d1:7f:a7:2a:8b:75:15:53:9a:a7:
c1:6c:d4:27:cb:2a:90:ff:44:f4:7e:36:44:26:01:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4B:16:42:C6:69:19:5F:AC:5E:A7:A8:0E:A5:83:FF:DA:DA:BC:97
X509v3 Authority Key Identifier:
keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/BE23528623A111EDB57D9C75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.175.0/24
Signature Algorithm: sha256WithRSAEncryption
39:1c:34:51:cf:df:3d:27:7d:52:73:b5:0b:40:8e:62:d4:f8:
6e:ce:d5:35:16:b2:32:09:4a:32:94:91:aa:62:1a:46:9c:56:
d0:25:89:89:86:ad:18:0f:46:e3:f6:bb:2a:ed:dc:05:d3:62:
df:fc:af:16:74:34:74:3c:01:80:5e:04:a0:97:7c:3c:a2:35:
47:77:3b:59:d6:4c:c2:7a:cd:cd:e7:0e:d4:94:07:41:46:ec:
20:a2:43:e4:a4:da:46:33:39:14:50:a9:b9:b9:6a:d5:53:d9:
58:fd:7b:07:54:84:ab:87:cb:84:1b:ed:36:f8:e1:73:2f:9a:
0b:29:e1:36:f5:48:0b:4c:08:e0:84:d0:6b:92:5b:a7:4f:4f:
2b:92:d2:f8:8a:a0:43:9a:da:17:87:5a:34:02:c1:60:7a:5e:
d0:67:92:c5:13:6c:46:f9:2c:45:f8:dc:98:f2:f0:88:6f:54:
6d:77:ca:a1:fd:02:48:c1:92:18:1a:ef:18:08:f5:f5:c4:e3:
f7:af:c3:e6:d9:07:69:f3:c4:bb:e6:8b:18:1f:3a:37:30:7b:
5e:51:eb:c8:58:23:b5:b7:20:da:80:98:32:23:53:05:d9:74:
28:2c:cd:99:69:68:58:9c:87:29:1d:7f:d0:2d:08:86:fb:ac:
12:c1:72:24
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTc3NjExMTAvBgNVBAUTKDUxRDVDQzJENUU0MjhGQzk1NTE0OUY1NzYyMTE5MDRG
MDVCQUYyMTEwHhcNMjMwNTAzMDMwMzAxWhcNMjQwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDUxY2VlNC1jNmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvic1lX0+K6x7gbvOn1iMmOUATJdOzmqOd6hRDr3g0AsyY+o8QUdImw0BLxq6
Bd4YTlrmz0aDgE7n2TNhtEykaS3ALwYmMP8MoJxqNbDAnxb6KSTbScbZ1udeytIX
7mDCkFSzIxm3XBLB0sOOPJlOX+kPiAn5TuDs8BZwG2hWYQXLH9gas8BUpLy89AU8
+7kwysjm64H6bReSuXgQjbOJMdGdNzr/e1l99VtofVbP/XEyJhHaY/85TdNI6eE/
8VN+x3hKbeGEZHvXV0k8Wy+wWZ534SFyzzMW56MBBzXT4Ik6nmiwR9F/pyqLdRVT
mqfBbNQnyyqQ/0T0fjZEJgHszwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGdLFkLG
aRlfrF6nqA6lg//a2ryXMB8GA1UdIwQYMBaAFFHVzC1eQo/JVRSfV2IRkE8FuvIR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzc2MS8wRTRCOTE2OEJE
MzQxMUVCOTBFNTU0MjhDNEY5QUUwMi9VZFhNTFY1Q2o4bFZGSjlYWWhHUVR3VzY4
aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VkWE1MVjVDajhsVkZKOVhZaEdRVHdXNjhoRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTc3NjEvMEU0QjkxNjhCRDM0MTFFQjkwRTU1NDI4QzRGOUFFMDIvQkUyMzUyODYy
M0ExMTFFREI1N0Q5Qzc1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnYa8wDQYJKoZIhvcNAQELBQADggEBADkcNFHP3z0nfVJz
tQtAjmLU+G7O1TUWsjIJSjKUkapiGkacVtAliYmGrRgPRuP2uyrt3AXTYt/8rxZ0
NHQ8AYBeBKCXfDyiNUd3O1nWTMJ6zc3nDtSUB0FG7CCiQ+Sk2kYzORRQqbm5atVT
2Vj9ewdUhKuHy4Qb7Tb44XMvmgsp4Tb1SAtMCOCE0GuSW6dPTyuS0viKoEOa2heH
WjQCwWB6XtBnksUTbEb5LEX43Jjy8IhvVG13yqH9AkjBkhga7xgI9fXE4/evw+bZ
B2nzxLvmixgfOjcwe15R68hYI7W3INqAmDIjUwXZdCgszZlpaFichykdf9AtCIb7
rBLBciQ=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:02:20 2025 by rpki-client