Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/2E18B9F4F91E11EC9E48A02BC4F9AE02.roa
File: 2E18B9F4F91E11EC9E48A02BC4F9AE02.roa (raw, json)
Hash identifier: yAfRR/+DRnQdilFydbUlQYYyxtfNQlGh28KEstk9hsc=
Subject key identifier: 42:08:B0:B8:60:9C:E6:75:99:CA:51:4A:C8:F2:C1:83:BC:40:05:8C
Certificate issuer: /CN=A91CE35F/serialNumber=81A38C8B09667225EE04F73AECFA09590D1F414C
Certificate serial: 01A7
Authority key identifier: 81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/2E18B9F4F91E11EC9E48A02BC4F9AE02.roa
Signing time: Mon 01 Jan 2024 04:05:10 +0000
ROA not before: Mon 01 Jan 2024 04:05:09 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 63927
IP address blocks: 103.125.244.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 423 (0x1a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE35F
Validity
Not Before: Jan 1 04:05:09 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=659239f5-75f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:2e:a3:89:82:28:c0:58:5e:51:93:3d:d1:
09:03:9b:05:99:f3:74:b7:cd:be:bc:8d:34:15:2e:
07:c0:21:5d:05:f5:b3:da:32:ed:e1:95:61:65:7d:
5c:af:9b:55:04:09:3f:0f:cc:19:c1:7f:0f:16:fe:
63:42:13:d6:5b:3f:52:e8:c1:cb:43:e7:d3:24:19:
08:11:56:64:2c:9e:4d:91:8c:34:18:77:0e:07:66:
04:6a:ca:8a:c0:2d:80:d9:03:fa:0f:f6:75:af:fd:
33:75:d2:d0:20:58:7e:e5:86:03:c3:63:c8:87:f3:
5d:8e:2a:14:a9:2c:28:b0:da:83:bf:03:f3:f2:9b:
50:5b:28:91:c0:c6:c3:4d:bf:e9:43:cd:6a:1d:f6:
bd:7e:28:97:5a:16:bd:4e:cb:44:ce:2d:54:8f:22:
bc:d8:eb:9a:d8:70:8e:ee:2d:e5:6f:81:11:5d:bb:
93:98:6b:29:75:13:b2:12:d3:b2:2f:3b:a8:15:c5:
5a:89:5a:3e:a8:d0:e8:a8:97:df:e4:96:ff:eb:08:
45:0a:db:1c:90:7e:b5:5f:c5:ae:ff:14:91:e7:59:
72:e7:23:6e:fd:da:d6:01:6f:dd:b4:01:b1:82:1e:
cf:e2:03:22:37:97:e0:b9:7e:c3:3e:76:9f:a7:28:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:08:B0:B8:60:9C:E6:75:99:CA:51:4A:C8:F2:C1:83:BC:40:05:8C
X509v3 Authority Key Identifier:
keyid:81:A3:8C:8B:09:66:72:25:EE:04:F7:3A:EC:FA:09:59:0D:1F:41:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/gaOMiwlmciXuBPc67PoJWQ0fQUw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaOMiwlmciXuBPc67PoJWQ0fQUw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE35F/EC34742CF91A11EC901B8F25C4F9AE02/2E18B9F4F91E11EC9E48A02BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.244.0/22
Signature Algorithm: sha256WithRSAEncryption
16:f6:13:8a:96:0c:af:ad:5b:35:91:ea:4a:0b:70:b0:02:92:
48:fa:21:bd:77:ed:bc:88:37:36:8f:85:67:0f:9a:d2:0b:b0:
ec:46:7d:9a:2d:9f:fb:03:03:09:1b:f7:4f:5f:82:45:26:70:
34:bb:5c:66:79:ef:57:fc:bc:a8:e0:95:81:e7:dd:8f:43:ae:
fd:be:0e:5f:41:04:74:c3:bb:ad:65:c3:2a:03:99:d0:4a:ef:
aa:ce:ba:36:10:c8:5e:d5:4c:00:a7:d2:9b:1e:eb:ca:82:5b:
36:26:ae:4d:9e:b0:6d:62:3a:95:49:b5:fd:c2:02:08:17:15:
db:5c:be:f1:01:9b:95:b5:51:2f:2e:be:d8:d2:ae:5e:16:57:
83:78:0d:fa:44:28:09:93:0b:84:99:83:c1:69:c3:8c:6f:c2:
c3:2d:96:55:f7:37:41:81:e2:8d:8f:2a:f8:3d:28:19:2d:df:
6e:dc:33:cd:7f:96:28:12:4f:c3:ad:ba:7a:6e:cd:5d:16:99:
df:21:59:bb:28:b0:96:11:c7:46:e0:ce:2c:76:1a:30:06:8e:
56:1b:50:80:d5:72:01:63:52:6c:89:16:cb:01:c1:67:f6:bc:
40:14:30:d0:6d:df:fe:d5:bf:e5:4e:d0:b4:8d:98:78:eb:5d:
99:55:d9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:05:02 2025 by rpki-client