Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/A5EB476201D811EEABCFDC80C4F9AE02.roa
File: A5EB476201D811EEABCFDC80C4F9AE02.roa (raw, json)
Hash identifier: 5RZU3ZNVwtwR3E5X7+WylxVlkEfJb6o654CeAqbYORY=
Subject key identifier: 81:0D:47:0C:51:A6:6E:24:CF:6F:53:FB:B9:D8:3F:6A:A6:03:B1:03
Certificate issuer: /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial: 0763
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/A5EB476201D811EEABCFDC80C4F9AE02.roa
Signing time: Sat 03 Jun 2023 06:34:10 +0000
ROA not before: Sat 03 Jun 2023 06:34:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59239
IP address blocks: 114.129.12.0/23 maxlen: 23
114.129.12.0/24 maxlen: 24
114.129.13.0/24 maxlen: 24
114.129.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1891 (0x763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C0BDE
Validity
Not Before: Jun 3 06:34:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=647adee2-57a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ef:ae:bc:65:08:76:8b:8c:78:1c:92:7f:3b:
c4:84:11:d2:1a:08:8e:2c:f1:d0:b3:00:b0:b5:65:
f8:b9:6f:41:46:b9:b5:cf:62:9d:75:dc:9d:4a:7e:
8f:20:09:e6:ac:10:dd:25:63:fb:73:11:63:4f:2b:
b2:51:51:f5:f9:ba:e5:7d:38:7b:df:00:99:2e:e6:
d3:0d:12:d1:8d:14:f3:cb:c2:4c:c2:c4:43:4a:35:
72:18:fb:2f:19:c3:b3:31:6b:61:f7:ba:0a:6a:a1:
97:9d:28:24:f9:43:59:10:50:d4:fb:9a:eb:48:74:
e3:ed:24:5c:79:11:c6:2d:60:9d:24:4e:07:99:b2:
c8:89:29:bb:5d:d9:68:32:f0:3c:65:d6:c3:a5:50:
8d:f5:5d:b4:ac:c6:b8:a7:7f:16:33:3f:9e:5c:22:
2f:f8:41:60:83:54:0f:98:0b:1e:4d:2e:0d:46:d2:
c4:05:b1:68:61:d5:ba:11:1c:58:5b:0c:a4:83:f8:
2f:48:15:c2:88:c9:66:68:a3:a2:95:87:64:4f:4a:
15:b9:c0:1d:2e:dd:18:9b:aa:74:48:06:38:ba:36:
a8:cb:0f:f1:d1:b5:ca:1a:8f:4e:57:06:30:06:f7:
49:66:bb:a1:a0:fc:d1:7d:56:dd:0a:9f:ef:93:a8:
58:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0D:47:0C:51:A6:6E:24:CF:6F:53:FB:B9:D8:3F:6A:A6:03:B1:03
X509v3 Authority Key Identifier:
keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/A5EB476201D811EEABCFDC80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
114.129.12.0-114.129.14.255
Signature Algorithm: sha256WithRSAEncryption
81:26:0d:03:04:aa:e8:ca:d7:ad:cb:14:c4:e8:d2:6a:73:17:
31:eb:64:89:28:7a:ce:12:07:db:fe:aa:c7:44:10:0d:5b:34:
7f:e1:7b:12:f9:de:6f:41:11:19:d2:4e:73:d1:68:d7:50:76:
c7:15:07:4f:18:5a:be:be:0e:cd:62:54:13:ab:50:8b:f7:44:
a4:23:7f:85:fd:aa:2a:0c:34:47:52:78:3a:a1:65:8d:92:7e:
41:dd:10:ad:57:a8:65:40:95:7e:76:83:89:2a:19:3d:98:04:
fd:e6:94:5f:3f:89:9b:5f:02:cf:c1:2f:aa:55:6a:9e:e8:8f:
5f:0e:59:11:55:b7:51:d7:64:88:fe:78:b7:0e:d8:27:c4:df:
1c:c4:fc:49:7a:b3:b7:12:a4:2e:ad:58:67:d1:2b:11:41:65:
5f:f4:8c:35:d6:d1:27:09:5c:fe:0a:91:b2:64:05:d7:83:90:
86:fd:ef:41:aa:f6:49:3e:f3:0f:f1:84:ec:b9:ca:b0:2c:89:
b0:19:16:93:24:46:c4:20:f9:e6:e5:12:3e:18:1e:7c:18:de:
3b:99:98:5c:18:44:65:c1:f5:0b:2a:52:e3:60:b9:09:08:ec:
3e:16:03:18:e2:e0:1a:b1:0c:77:63:1d:f6:24:d2:91:aa:59:
9a:af:66:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:55:11 2025 by rpki-client