Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/AA6D1378145011EC9AC2E70DC4F9AE02.roa
File: AA6D1378145011EC9AC2E70DC4F9AE02.roa (raw, json)
Hash identifier: OqP7gqCMGnLeOdeGnuzR10dXit4nR1+/HmoXtMVttho=
Subject key identifier: FF:4F:2B:3A:68:53:62:1E:4B:69:9B:06:C5:04:F6:04:37:5D:82:C5
Certificate issuer: /CN=A91B23B3/serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Certificate serial: 0500
Authority key identifier: 5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/AA6D1378145011EC9AC2E70DC4F9AE02.roa
Signing time: Tue 02 Nov 2021 10:47:24 +0000
ROA not before: Tue 02 Nov 2021 10:47:24 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 131340
IP address blocks: 103.74.228.0/24 maxlen: 24
103.74.229.0/24 maxlen: 24
103.74.230.0/24 maxlen: 24
103.74.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1280 (0x500)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B23B3, serialNumber=5C368439CBC5F5A45715D6476BEAA6686D0951B1
Validity
Not Before: Nov 2 10:47:24 2021 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=6181173b-6529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:63:48:9f:db:3b:39:6c:1e:7f:40:76:14:b5:
40:7c:18:a5:a0:8c:43:0a:aa:f7:92:12:17:f2:c6:
b0:d2:8f:aa:38:c1:83:c5:ee:bf:49:d0:9e:fc:d3:
73:4b:14:1b:5e:c8:49:f1:ab:e6:a0:7c:73:53:5a:
5f:38:dc:ac:c1:11:51:6a:ca:de:d4:cf:12:e3:c1:
10:c2:d4:15:f1:e3:61:76:fa:c7:02:af:6f:fc:24:
98:a4:df:e6:6a:fa:26:36:6d:74:c9:8f:96:98:c1:
0d:2e:d3:c3:4e:5c:50:fd:df:13:c4:6f:07:5f:1b:
75:3e:19:db:4b:0e:08:3a:a3:84:0f:79:85:be:e5:
5f:25:96:70:7c:3d:cb:c1:7b:4d:2c:fe:22:c6:58:
e6:20:c5:16:7f:40:0a:8e:78:09:41:07:41:29:73:
b9:ec:15:a9:06:88:68:b4:30:50:e6:2a:da:18:56:
d5:dd:4b:de:ef:df:62:3f:72:b8:07:7d:3c:21:4b:
a8:d2:f5:31:6b:23:1b:55:e1:5c:e9:16:89:d4:97:
4b:79:f9:39:c8:fd:87:2f:12:ff:d0:21:e8:4f:97:
15:78:f4:ce:a7:cb:df:e4:b0:0d:00:eb:8b:b1:5c:
e7:ad:5f:42:d5:0a:cb:7a:dc:e0:c0:41:93:30:5a:
8c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4F:2B:3A:68:53:62:1E:4B:69:9B:06:C5:04:F6:04:37:5D:82:C5
X509v3 Authority Key Identifier:
keyid:5C:36:84:39:CB:C5:F5:A4:57:15:D6:47:6B:EA:A6:68:6D:09:51:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/XDaEOcvF9aRXFdZHa-qmaG0JUbE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDaEOcvF9aRXFdZHa-qmaG0JUbE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23B3/E6465A108E9811EAAB58BD3AC4F9AE02/AA6D1378145011EC9AC2E70DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.74.228.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:3b:a5:ef:31:49:e3:7e:84:c5:d3:62:64:a5:a5:7a:ce:a6:
12:8f:34:fd:51:f3:40:4c:08:60:48:11:56:43:87:22:3e:49:
ef:0f:ee:49:1c:cb:cf:68:96:8f:a7:10:30:3f:fc:81:b9:ee:
7f:91:ee:9f:2c:9c:e1:10:56:9f:87:a7:1a:9d:fc:0a:cd:59:
b7:b2:94:10:a8:27:f3:c5:40:65:fe:b5:71:96:12:5e:1e:d5:
76:0e:8d:32:dc:7b:e9:2a:c6:c5:34:61:8c:8a:52:c6:f5:b5:
59:b1:d5:10:1f:8c:e2:a3:bf:48:39:b3:a9:a6:73:f1:6a:6f:
e7:65:f6:de:37:9f:af:d8:67:c2:3d:8c:ae:12:68:8f:d9:09:
0e:a8:ef:f9:03:b7:9d:d3:98:d0:c4:0b:71:a0:c7:6c:58:64:
b2:47:86:f2:0d:6f:a8:e9:14:0c:0b:f6:a1:3e:9a:2e:15:c2:
a2:f0:f8:d1:77:9a:92:fb:8f:27:7f:03:65:5c:56:66:a6:a6:
23:83:00:95:df:16:f0:27:f5:3f:0d:04:43:db:c6:b2:22:8c:
96:0a:79:4d:e6:cf:e9:2e:5b:e2:4d:e3:22:90:52:cc:33:e4:
eb:17:4f:81:82:a0:d4:ae:bd:5e:20:94:b8:ce:2b:fc:19:ad:
13:0f:9b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:29 2025 by rpki-client