Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/B45AFD84DE7B11EF8FAD4045C4F9AE02.roa
File: B45AFD84DE7B11EF8FAD4045C4F9AE02.roa (raw, json)
Hash identifier: ZUGXf7vOz3SlKG8VtqJNn64mut2t6/G5QnJZOAepnsU=
Subject key identifier: C7:EA:7B:D3:95:73:10:29:62:C3:5F:89:3E:40:C1:D1:98:94:14:5D
Certificate issuer: /CN=A91B72D9/serialNumber=41E5DC2155069FF317E5EE38C75B7889C22197E3
Certificate serial: 03F6
Authority key identifier: 41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/B45AFD84DE7B11EF8FAD4045C4F9AE02.roa
Signing time: Wed 29 Jan 2025 20:00:36 +0000
ROA not before: Wed 29 Jan 2025 20:00:36 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 137868
IP address blocks: 103.178.221.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1014 (0x3f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B72D9
Validity
Not Before: Jan 29 20:00:36 2025 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=679a88e4-80d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:09:9f:ea:0a:d6:cf:b7:90:31:69:b9:a4:38:
df:07:fe:a9:23:6f:62:5f:39:ff:f4:00:5b:5e:64:
0b:14:e1:c6:59:71:41:82:6b:70:df:67:d5:cd:55:
3b:fa:8d:67:52:d6:c4:fc:df:3d:a4:5c:0c:78:eb:
13:30:8c:ac:93:37:f8:50:0f:82:ea:22:03:2f:7f:
9a:51:d9:71:b7:30:f7:2e:7a:4a:05:7d:33:45:ee:
ee:3c:12:b3:fa:c3:37:7a:2c:7b:b3:57:ab:8b:91:
73:76:16:db:93:8a:8a:f2:e6:79:a6:5f:e9:7b:92:
a5:e4:c5:c7:e9:c9:fc:ba:02:80:8f:b9:a7:d5:53:
9e:12:d3:6d:e2:61:37:a2:8d:cb:c7:a9:4b:ba:69:
52:50:fe:31:ad:e1:50:ea:25:60:bf:47:70:79:64:
b1:84:ff:71:bd:cc:b0:24:4b:a6:82:34:32:15:fb:
2c:88:ac:a5:b1:45:3d:02:db:1e:43:56:27:c2:76:
05:39:72:a2:6c:28:f1:14:83:5f:3c:0e:57:29:bf:
10:01:e7:27:b9:7a:77:a7:10:95:76:d9:3a:c6:46:
1d:7a:5a:5e:55:30:cd:9e:9f:4a:fc:7e:64:68:cb:
3f:f2:a1:df:29:79:e9:57:46:6f:8d:73:5d:db:4a:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EA:7B:D3:95:73:10:29:62:C3:5F:89:3E:40:C1:D1:98:94:14:5D
X509v3 Authority Key Identifier:
keyid:41:E5:DC:21:55:06:9F:F3:17:E5:EE:38:C7:5B:78:89:C2:21:97:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/QeXcIVUGn_MX5e44x1t4icIhl-M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QeXcIVUGn_MX5e44x1t4icIhl-M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D9/AA23FA96697111ECB625930CC4F9AE02/B45AFD84DE7B11EF8FAD4045C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.221.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6d:a4:de:af:12:6b:4c:e7:38:85:36:cc:e2:57:c9:5b:08:
ef:1e:ea:7a:14:ed:87:40:3b:ac:c6:8f:29:70:e9:55:72:b8:
dd:b0:79:e4:c2:31:f6:34:aa:57:90:b3:89:2b:73:ed:40:5d:
76:e4:d3:dd:9e:41:42:9d:86:f3:4a:3f:6a:a7:9b:a5:82:0d:
e8:b6:81:2a:34:c6:2d:3a:07:91:2b:e1:55:7a:53:6a:ec:7f:
50:2a:6b:23:09:b9:89:34:af:d7:21:68:06:52:f1:8d:74:61:
c8:90:74:67:f8:09:c3:45:e3:1b:ed:2d:61:68:bc:cf:3d:66:
22:06:bd:01:48:88:da:86:56:62:b5:59:ce:9a:4f:1b:00:b8:
56:ef:60:99:43:c9:e0:4c:72:aa:60:f6:98:9a:27:0b:97:10:
b1:32:3f:09:29:01:bc:f4:cc:e5:3c:07:e6:e2:01:3e:9b:41:
42:a0:53:5a:c7:ac:13:74:75:be:c0:78:04:6d:9e:fd:60:eb:
2d:6c:a5:d7:91:07:5a:d7:e2:75:7a:7f:7e:67:d5:8a:e1:f6:
ae:0d:e7:17:2e:ee:81:97:91:3f:5d:c4:b3:eb:60:ee:a2:d5:
01:db:1b:6b:3d:84:7a:c8:d8:c4:58:00:cc:15:59:80:cd:59:
d7:32:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:49:02 2025 by rpki-client