Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8755E3DE840611ED8720BA74C4F9AE02.roa
File: 8755E3DE840611ED8720BA74C4F9AE02.roa (raw, json)
Hash identifier: Ppl9j91Tthx7TKAVM0q3sZye+M4xCoIPu2fO8LtkX84=
Subject key identifier: 88:FE:4C:87:2A:25:DD:74:DF:E0:49:D6:EC:DF:AD:4B:F5:2F:D8:04
Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Certificate serial: 14
Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8755E3DE840611ED8720BA74C4F9AE02.roa
Signing time: Sun 25 Dec 2022 03:45:09 +0000
ROA not before: Sun 25 Dec 2022 03:45:09 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 138197
IP address blocks: 103.29.238.0/23 maxlen: 23
103.29.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C454C
Validity
Not Before: Dec 25 03:45:09 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63a7c745-5053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:09:fe:36:73:5c:1a:1e:ea:c4:de:9c:55:
52:9e:f4:13:6f:b8:fa:0a:d2:a7:75:f5:66:11:06:
d2:50:42:31:94:96:8c:d9:20:49:0b:9b:4b:52:6c:
58:38:d7:3c:72:74:e1:33:33:bb:98:33:1d:6a:fc:
cf:0a:fb:93:44:ca:8f:1e:00:7a:ea:83:6d:4f:6e:
67:b9:60:34:90:b4:57:ff:53:c7:98:b0:e2:e2:21:
a5:24:69:64:12:29:ca:93:86:a6:71:21:53:93:53:
4f:57:04:88:a6:07:70:b4:a1:a9:60:a4:a4:ec:cb:
07:76:c9:d8:34:dc:ab:d4:ef:6c:69:0e:29:97:d9:
e1:88:90:23:4b:77:f9:9c:f6:6c:03:60:bb:56:51:
3a:48:6a:c7:55:20:8b:bf:0e:f7:05:05:0e:e6:06:
f9:a8:c4:b5:d4:19:8f:53:b3:9e:2f:0d:52:6b:b0:
43:b9:b0:ec:b9:d1:3e:a4:a4:92:c2:f7:f8:b7:3d:
93:f8:a6:71:89:7c:3b:ff:95:f4:5d:c7:b9:63:23:
15:6d:ee:0b:af:62:7c:1d:a8:d7:c7:3c:e9:b1:a4:
28:b2:b7:ab:bd:45:32:09:64:f6:00:75:10:4d:93:
e3:e5:14:ca:c6:c3:0c:bc:7d:07:0e:8c:9b:f6:01:
52:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FE:4C:87:2A:25:DD:74:DF:E0:49:D6:EC:DF:AD:4B:F5:2F:D8:04
X509v3 Authority Key Identifier:
keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8755E3DE840611ED8720BA74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.29.238.0/23
Signature Algorithm: sha256WithRSAEncryption
92:b2:06:a1:90:e6:63:4c:a8:95:36:1c:92:7c:0b:97:17:7a:
b6:90:3c:42:2d:22:7c:e5:ca:06:af:0b:2b:ca:1a:f1:ae:07:
ad:1d:7e:0d:02:3e:50:85:7d:32:e4:86:4b:49:bd:43:b3:e0:
a2:73:86:a4:0e:18:a0:6e:43:4b:70:5d:83:21:23:7d:ec:cd:
d3:b7:d8:50:c3:1a:20:77:2a:92:9c:c7:ac:97:03:85:8b:5e:
66:3c:6c:1c:27:89:cf:0e:86:67:bb:93:26:8b:04:9c:e8:a2:
47:e2:c1:83:17:fb:c6:e5:01:46:5d:c2:b5:a9:28:f4:f7:bd:
2c:19:5c:5d:71:cf:4e:7d:b0:0e:8e:dd:f7:d9:ed:1b:52:a6:
76:be:5d:5b:b0:78:fb:8b:f1:66:8d:90:eb:48:18:90:7c:64:
19:be:e3:be:2a:93:af:20:0f:8d:44:22:0b:c7:03:28:5c:f1:
aa:04:aa:89:34:cd:4d:05:10:b2:8f:19:2a:6d:19:59:d9:19:
7d:fd:94:2c:19:20:e1:5e:91:ef:f2:2b:41:3f:48:3e:4c:89:
6e:cb:53:17:da:d1:df:9a:2b:90:19:68:85:2f:6a:01:05:6c:
83:c1:24:31:b5:72:5d:ee:01:e8:71:f0:f7:11:46:e2:2b:0c:
55:15:c8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:12 2025 by rpki-client