Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/260E3CEAFD5411ECAA8CAF39C4F9AE02.roa
File: 260E3CEAFD5411ECAA8CAF39C4F9AE02.roa (raw, json)
Hash identifier: ff6afJQESGckNj1Faj7EScsR3T2wVQdhGcuK+eBKDvM=
Subject key identifier: D5:7D:CC:13:9C:E2:C4:7F:17:12:4D:A9:EE:78:0E:E2:C4:F5:86:79
Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Certificate serial: 032D
Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/260E3CEAFD5411ECAA8CAF39C4F9AE02.roa
Signing time: Wed 06 Jul 2022 17:50:40 +0000
ROA not before: Wed 06 Jul 2022 17:50:40 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 38254
IP address blocks: 103.167.250.0/24 maxlen: 24
2001:df6:c480::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 813 (0x32d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0D39
Validity
Not Before: Jul 6 17:50:40 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62c5cb70-d8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:83:74:b3:13:59:1c:14:2f:d0:bd:33:c2:
19:5f:7a:ab:ac:e9:5e:8b:44:b0:7f:8b:80:6a:40:
d3:5a:9d:84:06:73:db:19:26:d4:42:f2:de:de:1b:
16:42:70:5c:e4:fe:99:32:b0:5a:6c:10:a1:33:e6:
4d:14:e6:60:7b:bc:56:24:e6:ca:88:53:f4:f8:ef:
3d:f9:27:9a:7b:01:60:86:e3:09:93:44:8f:81:46:
bf:f7:3a:39:fc:9b:cd:b5:49:bc:31:ec:4c:6d:f4:
2b:e9:c9:4d:b8:64:90:d7:48:5c:af:ab:70:01:be:
33:2d:ec:0e:73:e7:38:9a:ae:85:a0:be:e6:aa:44:
39:a7:95:69:e6:d5:09:e1:4e:ee:fe:8c:35:c5:39:
d0:d1:0d:91:4a:dd:41:ff:3c:48:3f:2f:ba:e4:1c:
3f:5f:26:52:48:9d:1c:81:7f:fe:9e:9b:34:92:8c:
78:78:a4:6e:df:14:bf:3f:20:38:4f:9c:93:6b:b5:
19:5d:c1:60:af:1e:ee:c8:19:1f:18:47:b2:50:a1:
52:2a:79:fc:47:b2:ac:33:5e:7e:6d:2a:1f:4f:8d:
03:c8:5c:f4:da:31:54:f4:5b:85:da:82:cd:ba:4a:
42:83:93:6d:b2:d2:8e:8a:9a:86:4b:b9:08:02:42:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7D:CC:13:9C:E2:C4:7F:17:12:4D:A9:EE:78:0E:E2:C4:F5:86:79
X509v3 Authority Key Identifier:
keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/260E3CEAFD5411ECAA8CAF39C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.250.0/24
IPv6:
2001:df6:c480::/48
Signature Algorithm: sha256WithRSAEncryption
8d:db:35:04:d8:38:aa:11:de:6d:ce:70:be:6f:37:82:06:a8:
72:8b:b6:c0:96:c7:91:3b:25:ef:ab:1b:3f:53:c4:e7:c7:00:
e0:00:e5:1f:92:f7:e8:96:8b:95:8c:3d:f1:81:ce:b7:dc:04:
cf:3d:fd:a4:1e:ff:1c:c8:f0:15:cd:51:17:ad:64:a2:4f:ae:
6d:0c:37:58:0f:c1:c1:6e:97:f1:3a:33:46:3d:46:79:ce:39:
84:be:d8:86:d2:e2:32:40:51:da:b8:4f:01:30:6a:ef:bf:44:
73:b6:4f:c7:f5:93:29:be:76:b2:f1:1c:b9:20:d0:7c:5b:43:
7e:8d:7d:6f:a1:5b:f8:66:b7:53:04:b6:05:0f:d8:bb:5f:a5:
65:65:ad:97:57:1b:54:9f:da:82:7e:26:7b:b8:1e:9c:48:bd:
24:74:81:f0:79:19:7a:82:9e:76:6e:61:f8:01:22:0d:72:13:
24:06:72:ce:c4:a2:61:9e:57:25:74:75:dc:03:20:0b:60:a4:
95:31:10:1c:e7:75:ae:a0:b3:c1:48:a2:95:30:c8:07:3c:4a:
5d:f1:04:4d:2a:27:f3:67:af:1c:8c:bc:11:4e:cb:5c:b1:ed:
27:ec:4e:4f:d2:c3:77:fe:4f:ca:46:7a:e1:d8:a7:94:cb:02:
de:65:4b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:46:00 2025 by rpki-client