Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/EE913C0A6C1511EDB8810D3AC4F9AE02.roa
File: EE913C0A6C1511EDB8810D3AC4F9AE02.roa (raw, json)
Hash identifier: Ieg16gpOdKj2IE8GNvKP0blTFm5nf/XC9R759/Z1LVc=
Subject key identifier: CA:FD:69:59:7C:56:DB:08:A4:45:F9:79:C2:1A:35:BB:29:CB:14:E5
Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134
Certificate serial: 1D
Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/EE913C0A6C1511EDB8810D3AC4F9AE02.roa
Signing time: Thu 29 Dec 2022 09:05:09 +0000
ROA not before: Thu 29 Dec 2022 09:05:08 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 150395
IP address blocks: 103.29.238.0/23 maxlen: 23
103.29.238.0/24 maxlen: 24
2001:df1:78c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C454C
Validity
Not Before: Dec 29 09:05:08 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=63ad5844-6583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:d0:fe:5d:83:2a:04:8e:56:ee:43:ee:2f:
5d:8e:7b:e7:07:f3:16:8d:b4:c6:8a:b3:98:0a:82:
c8:5e:16:5f:0d:6e:ee:31:4b:1b:45:e6:06:8e:47:
72:2d:ff:a7:6c:70:7f:1e:6f:35:ff:34:92:e9:ca:
bc:7b:11:c3:58:bd:18:b3:7b:4b:a1:ce:90:31:bd:
59:f9:e2:8c:af:31:9e:65:19:f9:d2:3b:ab:13:54:
b1:bc:61:e2:f7:5b:4d:80:58:9f:ae:f9:8f:ce:d0:
0f:d0:de:0b:8f:09:f6:ec:ad:1f:03:4d:d7:7b:dc:
f3:bf:28:93:af:50:58:99:04:9e:07:92:a1:ff:e4:
bd:47:e7:71:ed:86:84:da:56:69:5c:50:76:aa:35:
46:00:81:30:1b:d3:87:b6:57:90:f0:8f:d1:15:d5:
98:c2:67:50:d5:b6:b7:15:32:c8:7b:24:b1:36:9f:
c0:aa:8c:b4:27:4a:7c:11:60:cf:8f:4c:d3:f2:05:
b6:c6:0d:e6:a1:ba:09:99:9e:01:2d:cc:7f:31:31:
ad:f9:14:20:a2:fd:37:2c:15:0a:7e:01:e4:4a:1b:
bf:e8:4b:ea:64:d9:6a:a9:07:50:85:49:dd:f5:9a:
63:61:71:03:bb:3d:62:08:b0:85:1c:e2:e1:04:78:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FD:69:59:7C:56:DB:08:A4:45:F9:79:C2:1A:35:BB:29:CB:14:E5
X509v3 Authority Key Identifier:
keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/EE913C0A6C1511EDB8810D3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.29.238.0/23
IPv6:
2001:df1:78c0::/48
Signature Algorithm: sha256WithRSAEncryption
03:7b:16:f1:fc:0c:8e:ce:ba:22:18:00:26:19:70:d5:02:99:
9a:bd:4c:44:a5:9e:9f:55:db:6c:61:44:8e:24:28:6c:96:e4:
00:df:af:a5:f6:14:45:fe:fa:96:ef:47:32:02:9c:87:2b:aa:
af:2f:7f:be:eb:e4:f3:bc:4f:b3:ee:2f:74:d3:39:5b:04:b7:
70:0c:62:72:c1:e5:a6:fb:98:2f:95:1b:0b:b4:eb:a8:0f:40:
6d:2d:20:b3:ea:06:e3:ae:c6:e3:db:2b:f5:ed:21:40:dc:2b:
d9:c3:41:48:91:b5:cf:d9:eb:02:8d:88:95:0d:b5:d3:08:71:
f5:72:8e:d4:b8:15:fa:a5:40:1f:5b:03:90:8b:ab:2d:c3:f4:
f1:06:a6:3e:b2:3d:60:3e:f8:3b:6b:57:e6:27:ea:e0:cd:a1:
f5:01:a9:c0:a3:ef:2a:ca:22:c7:4b:3c:eb:93:72:b9:e2:a5:
86:be:46:d9:42:e1:86:40:a9:f3:35:bd:7c:98:2d:79:ab:f7:
ea:4e:b7:a2:39:1c:a8:fb:e9:52:70:0a:a7:bb:c6:8c:36:b3:
91:70:e5:99:28:af:7b:86:7b:82:5b:2a:e0:5c:e2:8a:14:36:
60:14:d5:50:b1:0e:8c:7c:a0:09:e7:ad:21:d7:be:fb:f6:85:
0e:ff:05:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:50 2025 by rpki-client