Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/14A3A07ABC2A11EA81976144C4F9AE02.roa
File: 14A3A07ABC2A11EA81976144C4F9AE02.roa (raw, json)
Hash identifier: L9lYR9pF3LO8jRbISWSzvVuKlbY68MQ8dsDDz+esdVA=
Subject key identifier: A8:C5:51:76:F5:BF:DF:F4:E7:C1:63:0B:7C:89:2B:4B:F3:89:02:CB
Certificate issuer: /CN=A91CA297/serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08
Certificate serial: 04BF
Authority key identifier: 57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/14A3A07ABC2A11EA81976144C4F9AE02.roa
Signing time: Tue 01 Feb 2022 11:10:28 +0000
ROA not before: Tue 01 Feb 2022 11:10:28 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 9311
IP address blocks: 103.224.252.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1215 (0x4bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CA297, serialNumber=57DB42AB9EBBEFBFE21073F5007FC3762C5FBB08
Validity
Not Before: Feb 1 11:10:28 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=61f91523-c835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:35:1b:a9:03:44:0a:37:31:6a:72:bf:f1:
24:60:e5:b9:5a:61:54:31:ae:5c:4a:e7:37:90:5b:
94:da:f0:fe:1f:ed:60:93:12:73:2e:fb:b5:c3:4a:
aa:30:db:b0:b6:77:c2:83:a7:db:25:d1:9c:7c:2f:
6f:7a:20:85:69:be:3e:cc:99:a8:56:a5:51:73:e8:
29:8f:14:f4:ce:88:6c:d6:b8:6a:c8:8f:9e:d2:3b:
a6:37:34:b2:ac:b3:d6:e6:04:1a:e1:90:ab:74:39:
96:3b:55:dd:48:2a:66:16:27:8e:d9:d4:53:92:89:
04:3e:42:74:50:76:3e:2f:a0:07:0d:eb:ee:eb:21:
44:cb:cb:84:b3:67:34:19:b7:92:87:ab:f4:b1:2c:
03:97:75:1d:ae:e6:df:f4:f0:e8:12:10:43:c2:86:
c4:2f:98:13:68:d6:9e:5d:43:cc:4c:60:77:0c:b2:
0f:99:2d:12:ce:68:7d:6a:e6:3f:f5:ec:95:c6:17:
f8:3e:d5:21:82:5d:da:05:9c:d2:0d:c7:9c:3e:52:
4c:1d:26:cd:b1:6f:cc:12:2b:0e:40:4d:04:67:f2:
ea:a3:70:97:cc:52:7f:fc:58:12:c5:f5:7a:39:bd:
32:d6:cb:ae:37:d9:eb:45:ee:29:90:1b:d2:ba:fd:
75:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C5:51:76:F5:BF:DF:F4:E7:C1:63:0B:7C:89:2B:4B:F3:89:02:CB
X509v3 Authority Key Identifier:
keyid:57:DB:42:AB:9E:BB:EF:BF:E2:10:73:F5:00:7F:C3:76:2C:5F:BB:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/V9tCq56777_iEHP1AH_Ddixfuwg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V9tCq56777_iEHP1AH_Ddixfuwg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA297/24ED2156BC2811EA97F96D41C4F9AE02/14A3A07ABC2A11EA81976144C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.252.0/22
Signature Algorithm: sha256WithRSAEncryption
42:f0:03:8e:9c:21:1c:93:cc:97:62:e5:f4:c8:21:6a:cc:cd:
ec:59:bc:10:33:3d:fe:22:36:b8:42:88:87:37:d2:55:74:24:
d1:20:46:ae:ae:60:a8:22:d2:7e:90:98:cb:15:29:d1:4d:cd:
b3:b1:74:30:9e:d2:d5:d2:6b:81:a8:02:c7:08:bc:27:30:1e:
72:4b:31:70:70:ad:f5:4b:75:c4:f5:1d:be:d0:d5:77:ab:32:
18:b9:c7:61:0e:2f:65:6d:70:f6:f5:66:ff:bc:06:de:ac:d6:
73:c1:9d:60:ae:74:eb:78:d5:d8:d3:44:f5:31:60:7b:5d:86:
b6:25:31:61:7d:e5:d7:89:0f:f7:8c:b9:67:05:cd:0c:62:57:
cc:ff:2a:7a:f4:4b:65:bd:a0:5c:69:3a:bd:8d:1f:b5:19:24:
75:05:a1:dc:65:b0:b4:e9:ea:a2:c1:c0:de:be:31:20:3b:74:
39:64:6a:3f:81:71:58:0a:3b:37:e3:d0:9e:7d:55:c0:f5:52:
35:28:3c:48:48:1c:81:37:28:d5:0f:b7:65:b0:cd:42:43:bb:
24:46:32:79:06:ee:23:b7:e8:87:03:4b:49:64:9e:8a:e6:76:
7d:58:44:01:9f:bc:65:43:56:0c:ba:ec:b0:4b:17:f3:4d:42:
bd:ef:53:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:27:02 2025 by rpki-client