Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/B6C2A6FE4D2711ED8D49D62FC4F9AE02.roa
File: B6C2A6FE4D2711ED8D49D62FC4F9AE02.roa (raw, json)
Hash identifier: 9EfbhPkHb082CGd1OB7Wzimyl2Xlw8Jg7vIdZ9hIY50=
Subject key identifier: 1B:F1:9A:57:8F:AD:C2:24:EC:D5:91:AE:F3:72:64:DD:D6:33:36:24
Certificate issuer: /CN=A91B569E/serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17
Certificate serial: 0194
Authority key identifier: DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/B6C2A6FE4D2711ED8D49D62FC4F9AE02.roa
Signing time: Sun 01 Dec 2024 02:25:12 +0000
ROA not before: Sun 01 Dec 2024 02:25:12 +0000
ROA not after: Sun 30 Mar 2025 00:00:00 +0000
asID: 150372
IP address blocks: 103.19.122.0/24 maxlen: 24
103.19.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 404 (0x194)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B569E, serialNumber=DCB839319FD52EAD9FCB97782984FD1FD4492C17
Validity
Not Before: Dec 1 02:25:12 2024 GMT
Not After : Mar 30 00:00:00 2025 GMT
Subject: CN=674bc908-4906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c6:5a:7c:6e:09:85:c5:5e:ad:0d:5b:2f:2f:
ad:98:67:3b:ca:d9:ef:35:1b:d6:83:ea:38:b8:83:
58:86:93:17:33:99:de:13:e9:ef:f3:4a:67:a4:ba:
bc:5d:3a:f7:28:c4:7b:12:16:8a:b8:04:95:f2:a1:
ff:3a:34:03:ef:6d:bc:59:78:2f:87:ab:ab:f5:dd:
72:43:27:fd:8e:b9:43:23:09:29:4a:d7:e9:80:60:
66:0b:1a:d6:1f:1d:ce:9a:88:2f:be:d4:8f:7c:65:
22:63:6d:17:f1:8a:4a:df:b3:2f:6d:fe:d8:92:0d:
10:4d:7f:c0:72:2e:4e:d0:94:a4:06:fe:ab:48:16:
12:c4:c3:78:9e:d6:fa:dc:19:cc:61:fc:fb:da:94:
a9:70:3f:da:2c:b2:1d:e5:64:67:0b:0b:50:8d:bc:
ff:ba:b1:e9:9c:4b:61:61:58:bd:1e:4c:22:7a:cb:
75:98:fb:f9:ef:3e:58:be:b6:9c:72:76:f3:63:5f:
95:dc:85:01:b0:2b:d6:21:eb:3a:4b:bb:fa:c6:ba:
d0:5a:06:d6:bb:3d:aa:a9:c1:28:c2:ef:d3:6c:b8:
86:4a:c5:1c:86:9c:0f:dc:0e:42:41:ce:45:89:3e:
9f:6b:17:62:7e:e6:d4:d7:65:7f:31:5c:ff:e2:d1:
3e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F1:9A:57:8F:AD:C2:24:EC:D5:91:AE:F3:72:64:DD:D6:33:36:24
X509v3 Authority Key Identifier:
keyid:DC:B8:39:31:9F:D5:2E:AD:9F:CB:97:78:29:84:FD:1F:D4:49:2C:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Lg5MZ_VLq2fy5d4KYT9H9RJLBc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B569E/2525C7C84D2511EDA6DDD22EC4F9AE02/B6C2A6FE4D2711ED8D49D62FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.122.0/23
Signature Algorithm: sha256WithRSAEncryption
36:e4:bb:c4:a5:69:d8:51:60:d3:c1:95:91:42:0f:10:16:53:
a0:9d:d8:81:af:ee:f6:5d:9b:90:fb:e2:64:fe:0a:51:73:b0:
21:0f:10:48:1b:42:91:5b:4c:92:91:5a:96:87:d9:83:10:b3:
92:27:fb:2c:eb:9f:75:48:25:33:0a:bf:5a:9c:71:8f:55:09:
1b:17:ea:c6:c9:37:5a:38:92:d8:21:64:b9:57:71:6c:80:8a:
a3:2b:73:9a:91:6b:16:f1:d2:fc:2e:fb:d8:84:f2:2d:f8:4f:
e2:30:e8:d0:42:f7:f1:59:00:ea:9e:41:9c:ab:2b:b8:23:d9:
56:fc:52:da:d3:8e:b6:da:d1:e9:07:66:9e:a6:8b:f8:69:8b:
82:fa:62:22:88:21:9f:7e:48:64:b6:d2:de:1d:d6:9a:de:31:
bc:53:61:b5:b1:9b:1e:fd:d6:f5:98:1c:1a:01:de:c6:e4:36:
4d:df:1b:ef:53:1d:fd:08:2b:f5:8d:07:ba:35:03:f4:b3:3c:
bf:80:04:6d:5c:2d:f1:d6:9b:b2:a5:20:d0:40:71:0e:85:25:
6e:89:20:e7:0f:3d:d7:8a:18:4d:e2:e5:53:47:01:ff:64:f5:
a2:93:15:55:0d:62:ba:d6:4b:b7:5e:32:49:47:9d:64:f6:73:
19:ae:02:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:50:57 2025 by rpki-client