Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/4885D1FE165611EEB24C6E57C4F9AE02.roa
File: 4885D1FE165611EEB24C6E57C4F9AE02.roa (raw, json)
Hash identifier: GyzLItHUMkYGnw9k4EfRjpSP7slSpO4PqEiZhD2+vHc=
Subject key identifier: 0E:99:B7:EF:D4:61:EC:72:85:8D:1B:59:C9:D1:48:00:73:CD:5E:E3
Certificate issuer: /CN=A91BD844/serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Certificate serial: 07
Authority key identifier: 11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/4885D1FE165611EEB24C6E57C4F9AE02.roa
Signing time: Wed 05 Jul 2023 15:14:16 +0000
ROA not before: Wed 05 Jul 2023 15:14:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149621
IP address blocks: 103.116.80.0/23 maxlen: 23
103.116.80.0/24 maxlen: 24
103.116.80.0/25 maxlen: 25
103.116.80.128/25 maxlen: 25
103.116.81.0/24 maxlen: 24
103.116.81.0/25 maxlen: 25
103.116.81.128/25 maxlen: 25
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BD844
Validity
Not Before: Jul 5 15:14:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64a588c7-114e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4f:01:17:78:e1:2d:ae:bb:0d:f8:a4:3a:54:
ce:09:36:31:4a:07:87:15:c6:94:a1:aa:36:00:3b:
2c:1a:8d:da:1b:5e:e8:f1:56:40:88:00:1a:48:21:
2b:b1:1b:69:8d:0f:bc:ed:fc:e0:4d:46:f6:df:08:
05:b1:57:e9:ea:17:2d:ed:fa:b6:52:6b:9d:1f:ec:
d0:e0:ac:01:a2:af:dd:b3:65:5d:c0:d8:91:c5:ef:
2d:54:5a:9a:5a:40:0f:3a:6c:f3:46:99:93:8b:da:
cd:ae:29:26:c6:12:3f:d7:0b:59:99:89:dc:dd:f1:
14:af:8b:76:8e:61:ed:b6:19:83:b6:b1:68:8d:69:
85:14:9f:61:5d:f4:06:c4:c3:6c:15:36:b3:25:fd:
a8:ca:74:f4:44:e8:d5:27:89:2e:6f:df:f2:82:8a:
52:c7:2c:85:00:04:e6:5a:1b:d1:71:fb:92:6b:e7:
23:9c:d1:fe:50:7c:bf:11:53:0b:5a:62:94:57:6d:
85:09:9c:34:85:ac:d3:0e:b1:30:b2:87:a4:bc:77:
84:9d:1a:62:bf:3d:72:a4:b1:6d:33:65:37:b1:12:
d1:e5:94:62:93:85:c4:54:cd:c4:eb:48:7b:5d:9d:
22:c5:01:9b:cd:93:02:79:8a:8a:5a:2d:f2:fb:1c:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:99:B7:EF:D4:61:EC:72:85:8D:1B:59:C9:D1:48:00:73:CD:5E:E3
X509v3 Authority Key Identifier:
keyid:11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/4885D1FE165611EEB24C6E57C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.116.80.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:e7:c9:bc:80:47:e3:9b:c0:32:a4:f1:9f:84:84:31:9f:b1:
50:2a:e8:6b:81:cb:cf:50:40:74:82:63:04:03:82:db:8a:9a:
ed:d8:d5:a7:50:39:41:a2:4a:4b:7f:6a:c8:38:01:4c:5a:1a:
55:18:b3:3e:9e:fb:e6:1e:4c:df:fa:48:51:a1:f3:fb:af:c4:
68:b6:c4:fc:58:0b:e2:4c:1e:94:7b:e3:73:f3:0f:e3:5a:5e:
7e:81:51:a5:25:20:a7:0c:8f:2d:5e:01:b4:54:23:50:a3:df:
8a:34:f2:13:fb:08:28:19:3b:70:c7:a3:73:63:46:13:3f:4e:
cf:35:ef:c1:cc:e5:20:94:64:93:31:81:08:7c:3f:2a:6f:6e:
a9:b8:b9:36:d0:8f:70:0f:70:7a:1a:ec:62:96:7b:72:98:d6:
da:16:f8:5e:96:c6:80:5b:0b:29:dd:64:8d:43:8a:ab:b6:f7:
47:e4:0e:92:e0:3f:58:e2:e8:0e:8e:72:dd:e7:8e:af:6e:b9:
59:82:62:4f:d5:e0:81:f6:c6:6d:90:26:e9:99:ff:da:8d:b7:
25:26:ff:eb:b2:fb:24:5c:5f:dd:c7:53:2e:2c:7c:41:13:54:
4d:53:d4:d9:e0:ed:b2:85:81:06:af:43:3b:54:1b:3a:0c:8d:
83:54:33:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:33:08 2025 by rpki-client