Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/6105460E653411EB98060C17C4F9AE02.roa
File: 6105460E653411EB98060C17C4F9AE02.roa (raw, json)
Hash identifier: C+Ri2Pq/dG4qO75rS+IDa+PhN4WzVRuwKeSvXcwxS/o=
Subject key identifier: 14:C1:B3:4C:DA:4E:82:30:62:24:01:4E:EC:8F:E0:BD:50:50:C4:99
Certificate issuer: /CN=A91B927E/serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
Certificate serial: 05D3
Authority key identifier: 2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/6105460E653411EB98060C17C4F9AE02.roa
Signing time: Thu 16 Nov 2023 20:58:18 +0000
ROA not before: Thu 16 Nov 2023 20:58:18 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 137385
IP address blocks: 103.122.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1491 (0x5d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B927E, serialNumber=2AC0AB4B5F3BB5B0EF79BD21A649CAFFE7F9C20A
Validity
Not Before: Nov 16 20:58:18 2023 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=6556826a-2bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:49:b1:34:ff:f2:e7:ef:80:0e:53:3b:87:
af:62:b0:f9:5c:17:b7:aa:a2:85:78:c2:9e:16:83:
31:15:e4:52:cb:77:77:40:06:0c:b9:30:f4:75:56:
06:4f:93:b3:84:cf:aa:a6:f9:d4:33:7b:86:0f:31:
bb:d1:44:44:0a:9a:72:75:3a:f9:17:53:c6:24:04:
6c:e9:de:cf:a2:03:b4:d9:d2:f8:52:e2:6f:a2:fe:
ed:14:aa:4b:52:c2:bc:30:3c:8a:18:41:28:f6:a7:
be:4f:92:5a:20:dc:58:85:49:7c:81:ff:51:4f:64:
b7:f5:ae:82:a1:87:dc:66:5f:f7:b9:43:65:f9:92:
32:05:c7:cf:fc:b5:8c:b7:3d:6a:9f:31:ac:2a:e8:
04:6f:19:f0:ec:8c:4b:eb:9c:32:7e:ba:68:a2:9e:
ce:40:74:f6:95:11:1b:c8:8f:f5:83:b0:7c:28:cf:
f0:c5:c3:c7:da:d1:59:a7:ab:78:8b:bc:78:b4:5f:
cd:54:6c:ae:18:5d:c1:dc:98:16:35:be:6e:e4:2c:
c2:97:d0:b4:82:03:64:57:72:10:d4:4f:81:6e:35:
13:34:34:8f:cb:29:a1:5e:e0:18:63:fe:cd:db:e4:
d3:6f:e9:47:4c:2b:7d:03:c1:41:0f:7c:0d:43:60:
d9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C1:B3:4C:DA:4E:82:30:62:24:01:4E:EC:8F:E0:BD:50:50:C4:99
X509v3 Authority Key Identifier:
keyid:2A:C0:AB:4B:5F:3B:B5:B0:EF:79:BD:21:A6:49:CA:FF:E7:F9:C2:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/KsCrS187tbDveb0hpknK_-f5wgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KsCrS187tbDveb0hpknK_-f5wgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B927E/CCD6ED1C68DF11EA97B15524C4F9AE02/6105460E653411EB98060C17C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.122.249.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e0:bc:a4:bc:02:2d:21:29:ec:f8:f2:f1:1b:3f:ba:9f:89:
f8:0e:5b:5d:84:cf:76:e9:99:35:8c:eb:ce:8b:1b:e3:e9:5e:
3a:63:ac:dc:00:ab:c0:21:78:d5:d1:2c:f1:bd:6a:ec:ff:1f:
d1:20:79:6d:31:f5:a5:25:a9:dc:6c:d1:23:80:b4:e7:8a:39:
37:53:be:4b:dd:99:9f:dd:f6:53:ea:9d:19:7c:bc:e2:44:12:
52:84:27:6b:cc:0d:2d:aa:fd:91:17:e6:ee:1a:ef:86:b7:99:
ce:38:d3:c1:9d:b0:58:ce:84:40:a7:b5:68:9b:aa:02:ab:dc:
35:5c:b0:b9:e6:d5:aa:a3:7f:e4:ef:82:63:5d:6f:95:fd:3f:
4a:ae:1d:76:9c:d6:27:b8:c9:d2:93:98:e7:64:c8:78:42:c6:
40:00:85:73:64:9e:9f:6d:ba:d6:d0:98:85:36:c5:eb:48:45:
a7:25:4e:53:66:d4:15:05:80:97:86:d6:6f:86:f5:54:63:56:
b5:a0:14:d8:cb:e0:1c:38:d2:0b:09:d3:9c:15:9a:7d:32:ba:
33:a2:a1:6d:d6:be:c5:89:9d:a0:eb:6b:18:6b:9b:5f:42:17:
a9:ab:8f:03:1b:b9:32:3f:e9:0b:fa:81:6e:e6:f2:1b:47:1c:
7f:84:31:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:51:01 2025 by rpki-client