Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/519B349815B011ED810C0D40C4F9AE02.roa
File: 519B349815B011ED810C0D40C4F9AE02.roa (raw, json)
Hash identifier: coSaL63GxekML/K2125XqEygiG/JbaKZLnH8jk4J6WM=
Subject key identifier: BD:A9:70:DC:72:10:3F:6B:CD:4E:F9:17:E3:01:23:C3:ED:0C:16:1B
Certificate issuer: /CN=A91B0D39/serialNumber=97388EFC45D496EEEEAE94847DA60ACCE5D117F9
Certificate serial: 0377
Authority key identifier: 97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/519B349815B011ED810C0D40C4F9AE02.roa
Signing time: Sat 06 Aug 2022 17:50:55 +0000
ROA not before: Sat 06 Aug 2022 17:50:55 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 9267
IP address blocks: 103.167.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 887 (0x377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0D39
Validity
Not Before: Aug 6 17:50:55 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62eea9fe-2311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:90:51:5c:41:2c:af:0a:2f:81:fc:fa:78:41:
31:4c:67:2e:b4:57:d8:1f:4e:99:40:c6:a3:1a:ea:
d5:92:22:62:d8:00:f8:5a:82:6c:83:a5:1a:b3:2f:
ac:54:93:38:e1:47:33:c8:b0:33:02:d3:5e:c5:68:
13:0c:23:91:94:7b:99:19:11:5d:04:8a:e4:08:26:
87:4f:b6:2e:4e:0b:7c:4e:29:c1:5b:c6:5a:3a:33:
ba:8d:c4:0d:3f:0a:a4:12:cf:0e:d5:3d:d7:6f:7d:
6c:a1:70:9e:44:8b:b4:9c:1c:40:54:06:b3:f6:0c:
7d:14:16:35:09:f4:dd:4f:75:9e:78:a6:ed:54:48:
09:6b:a3:78:ed:d5:67:5e:9b:9e:38:4e:82:e3:14:
84:dc:83:9e:04:24:04:07:74:84:22:52:63:4f:99:
ac:9e:4f:5e:f9:72:4c:8b:91:a8:a6:73:7c:bd:a0:
5a:58:56:cb:10:b1:6c:69:1d:05:57:f8:38:d0:40:
2f:63:82:e0:ab:71:a5:a4:98:ba:41:eb:07:7e:59:
32:ab:73:f1:66:7c:38:33:89:bd:fc:73:7f:e1:d3:
d5:8e:6d:3f:2c:ee:da:2c:7e:39:ff:6e:10:8a:1e:
a6:b4:77:c9:4e:45:7e:66:c4:d2:fb:22:06:22:c9:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A9:70:DC:72:10:3F:6B:CD:4E:F9:17:E3:01:23:C3:ED:0C:16:1B
X509v3 Authority Key Identifier:
keyid:97:38:8E:FC:45:D4:96:EE:EE:AE:94:84:7D:A6:0A:CC:E5:D1:17:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/lziO_EXUlu7urpSEfaYKzOXRF_k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lziO_EXUlu7urpSEfaYKzOXRF_k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0D39/7F24FFD0C85811EBBE0EF834C4F9AE02/519B349815B011ED810C0D40C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.251.0/24
Signature Algorithm: sha256WithRSAEncryption
28:be:49:6a:61:73:55:f4:c8:3a:27:5f:0e:36:ee:76:36:48:
ff:d8:c2:62:14:9c:50:6e:3c:5d:9d:fe:ea:6d:80:c2:d6:2f:
c4:4d:c1:e4:d0:85:df:7f:61:ce:07:0d:39:25:6f:0a:a9:fa:
67:c4:e6:11:39:6f:4b:f8:12:2d:f2:4f:78:30:44:8b:0b:18:
74:c6:5e:0d:2e:e6:8f:23:6f:00:0f:8d:b7:6e:c7:25:13:63:
01:b2:bd:5f:11:83:d8:55:b4:72:91:38:e7:aa:6c:57:d0:a0:
3d:ee:b9:6f:fe:5b:cc:8f:86:18:65:8b:30:4b:06:bb:14:54:
b7:aa:1b:8b:72:26:c7:54:53:47:dd:0e:c0:28:bb:76:b9:b4:
0c:df:76:6f:9e:87:19:83:c6:72:d3:ea:49:e7:df:c6:2a:59:
bb:38:96:4a:0e:bd:70:b6:ed:2d:e7:46:60:2b:96:d2:64:08:
e7:ad:75:74:ea:ef:5b:15:6c:e7:e1:14:73:f7:dc:7c:b8:4b:
1c:78:3e:3b:3a:0f:22:42:4d:ff:95:df:8d:c8:8d:fc:57:8d:
9e:71:ce:16:94:f3:7a:ca:ab:d5:b3:6e:79:88:12:ca:42:44:
be:c4:16:07:42:3d:73:5d:a1:45:40:95:c8:ad:39:4a:4f:a6:
59:9e:c0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:55:52 2025 by rpki-client