Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/1324C3945ECB11EAB9A53075C4F9AE02.roa
File: 1324C3945ECB11EAB9A53075C4F9AE02.roa (raw, json)
Hash identifier: Gj6P0hvRFS1vzEC264ECM2IUV37Ayz6A5+ZUKMlGXCQ=
Subject key identifier: CD:5F:51:2C:F1:F3:98:B6:21:A3:31:17:46:EB:29:FF:30:A6:E5:13
Certificate issuer: /CN=A91D4413/serialNumber=8AA8786526852346839372631DFB09984BC3005E
Certificate serial: 098C
Authority key identifier: 8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/1324C3945ECB11EAB9A53075C4F9AE02.roa
Signing time: Tue 30 Jan 2024 16:43:33 +0000
ROA not before: Tue 30 Jan 2024 16:43:33 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 134983
IP address blocks: 103.204.200.0/22 maxlen: 24
202.181.12.0/22 maxlen: 24
2404:c280::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2444 (0x98c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4413
Validity
Not Before: Jan 30 16:43:33 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65b92735-950c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:11:d8:37:01:a2:5c:fa:a4:9d:0f:23:be:14:
15:ed:4f:69:84:83:74:61:ad:ed:24:7f:52:d9:3e:
dd:67:53:29:e3:c6:49:96:0e:8e:34:07:25:ea:a4:
1b:67:ea:1b:6a:c0:ca:a9:e6:ee:dd:e7:a1:b4:8a:
5e:41:c2:43:7f:05:4b:fa:61:fc:24:41:31:ce:20:
67:5c:9d:b6:1a:e4:5e:72:3d:de:f7:ee:8e:36:16:
2c:35:a0:a8:a1:15:24:45:68:6a:d3:7a:8a:80:e6:
76:29:55:da:ce:94:70:0a:87:ea:4b:35:ef:3e:c9:
b3:fb:f0:04:dd:2a:ce:55:29:6e:25:a6:70:d9:0e:
ee:06:7b:70:00:ab:fa:56:e6:c6:c8:1f:52:34:5e:
d8:b6:b6:7f:e4:e1:7d:83:2f:c9:e0:1f:f3:86:7d:
b6:ce:fe:75:cf:23:69:e2:bf:d6:93:c7:d6:47:47:
2c:43:8a:93:96:78:41:1b:f0:c2:0f:aa:e4:4d:64:
14:c0:14:75:47:a6:4a:e6:af:0b:74:fb:7e:c5:7a:
4b:99:90:aa:4b:d3:41:ec:54:c5:ef:16:a1:1c:c9:
36:ca:67:a3:fb:4b:b8:6f:64:90:f9:ae:7c:e5:ed:
53:92:49:64:40:0a:22:2e:12:aa:3c:89:37:8d:dd:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:5F:51:2C:F1:F3:98:B6:21:A3:31:17:46:EB:29:FF:30:A6:E5:13
X509v3 Authority Key Identifier:
keyid:8A:A8:78:65:26:85:23:46:83:93:72:63:1D:FB:09:98:4B:C3:00:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iqh4ZSaFI0aDk3JjHfsJmEvDAF4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/1324C3945ECB11EAB9A53075C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.200.0/22
202.181.12.0/22
IPv6:
2404:c280::/32
Signature Algorithm: sha256WithRSAEncryption
7e:11:ea:03:ff:d8:9c:f4:47:7d:78:e8:33:46:11:4d:61:6b:
30:21:1d:dd:78:a8:72:f6:c2:51:7a:c1:84:4b:8c:f6:4e:40:
bb:c7:9b:2e:a8:5b:c7:77:9a:46:db:85:fe:24:2c:2e:b5:93:
87:7f:01:02:8f:97:11:ed:e4:5f:20:dc:98:57:56:ae:b3:e8:
02:8d:4e:fd:4a:b9:98:90:74:4b:3f:30:1f:2d:e5:e9:95:9e:
80:35:11:5a:e2:a1:5b:be:2f:02:35:68:67:de:7f:12:fa:c5:
7b:51:4a:a4:6e:74:cf:ae:c6:ee:89:81:ce:48:f0:40:6e:5b:
92:7b:fb:b0:dc:8c:f6:cf:9c:70:fb:53:d9:fa:70:87:93:26:
f4:6a:aa:6a:ba:12:fa:2a:1a:1a:98:0d:f2:2a:1e:4d:dd:fe:
c2:e4:c9:45:65:db:68:19:86:0c:61:f8:e8:1d:0e:60:8c:43:
48:3d:c6:d7:78:fa:b5:93:e8:b7:26:2e:be:ab:cf:d2:00:04:
1a:27:c5:92:d8:56:d8:9e:ba:93:f9:66:b8:c6:af:4d:4d:aa:
a9:c1:b0:48:7e:95:d8:6f:07:5e:b5:f9:e3:93:c6:68:42:18:
34:d9:79:11:84:04:aa:66:04:f1:74:21:70:3e:45:e3:cf:ee:
ce:77:a6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:08:26 2025 by rpki-client