Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/68A2D6C4CC9111EAABB0C744C4F9AE02.roa
File: 68A2D6C4CC9111EAABB0C744C4F9AE02.roa (raw, json)
Hash identifier: ijk7QxEyB1D3dEaO5/S8+AZ1ECZJVkOwY+sjApChCyI=
Subject key identifier: ED:6A:EF:6F:81:A7:04:0E:43:B2:81:5B:12:EF:6B:79:EC:EF:3A:CF
Certificate issuer: /CN=A91E54CF/serialNumber=C1BECF97CA95E06DC06E00C239F62CC6942416D1
Certificate serial: 032D
Authority key identifier: C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/68A2D6C4CC9111EAABB0C744C4F9AE02.roa
Signing time: Tue 24 Aug 2021 11:46:12 +0000
ROA not before: Tue 24 Aug 2021 11:46:12 +0000
ROA not after: Mon 31 Oct 2022 00:00:00 +0000
asID: 136933
IP address blocks: 103.70.224.0/24 maxlen: 24
103.70.225.0/24 maxlen: 24
103.70.226.0/24 maxlen: 24
103.70.227.0/24 maxlen: 24
182.255.60.0/24 maxlen: 24
182.255.61.0/24 maxlen: 24
182.255.62.0/24 maxlen: 24
182.255.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 813 (0x32d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E54CF
Validity
Not Before: Aug 24 11:46:12 2021 GMT
Not After : Oct 31 00:00:00 2022 GMT
Subject: CN=6124dc04-ef31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3b:08:49:11:5e:fe:25:ba:5b:30:a5:26:cc:
de:49:e8:f5:1d:d8:43:df:f6:d2:8f:f6:cd:36:6d:
d1:84:3f:68:94:8a:35:c1:5f:ee:29:f5:85:10:26:
36:92:67:5f:df:0e:67:ad:16:57:96:e3:ea:55:32:
8a:89:f9:bc:e5:e4:28:af:bc:1b:c4:19:84:20:3d:
ac:71:c5:1b:70:a9:45:b9:44:88:1b:5b:78:cb:34:
e2:1b:90:c6:ed:d7:00:53:e4:c8:a1:27:fe:eb:e8:
1d:32:50:0d:8b:98:8e:8a:eb:a8:f5:05:04:61:e8:
a5:16:e4:1d:bb:fc:1d:2d:09:05:71:aa:c9:ac:1d:
9d:7a:f7:3f:d5:70:11:6e:07:f1:fe:7c:de:ba:29:
96:ac:2b:4c:07:8c:af:47:01:52:66:a0:f1:1c:56:
3c:bb:4e:8e:e7:12:c8:fd:7c:fd:fe:8a:f4:ac:07:
32:96:cd:67:6b:20:a1:52:ff:47:0f:1f:b0:c2:0c:
ab:dc:1b:29:31:57:83:0d:d3:a1:64:09:85:f6:19:
35:74:d2:55:13:c8:6b:17:8c:eb:d2:f0:e7:f7:eb:
d7:5f:ed:c6:d2:59:6a:1e:c4:bf:34:fc:98:cc:44:
75:46:27:de:93:d7:e4:96:c7:e5:4b:b7:e6:75:4a:
a0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6A:EF:6F:81:A7:04:0E:43:B2:81:5B:12:EF:6B:79:EC:EF:3A:CF
X509v3 Authority Key Identifier:
keyid:C1:BE:CF:97:CA:95:E0:6D:C0:6E:00:C2:39:F6:2C:C6:94:24:16:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wb7Pl8qV4G3AbgDCOfYsxpQkFtE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E54CF/D8F3ACACCC8F11EABC1F1442C4F9AE02/68A2D6C4CC9111EAABB0C744C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.70.224.0/22
182.255.60.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:ea:0d:9c:30:c7:42:0c:45:f7:c9:1f:91:2a:97:b0:c2:ab:
9a:9b:11:18:14:d4:55:97:88:1b:51:06:33:a1:c7:57:f6:43:
81:b1:68:f0:70:15:c5:72:7b:3c:9c:75:99:08:1c:2f:48:e5:
91:63:21:5b:e1:42:24:3d:3a:5c:a9:ab:ba:f2:3e:21:2d:57:
34:be:24:69:2f:7a:56:0e:ab:89:f8:44:dc:91:50:7e:62:34:
0f:26:21:6d:65:31:b8:95:1c:d2:00:4f:13:90:52:e8:de:32:
dc:0c:ce:a5:8a:a9:d8:1d:53:94:ec:71:84:1a:7a:be:ba:58:
db:63:f3:6c:2f:d2:7a:b7:cf:8f:8c:34:cd:71:79:a0:1b:ce:
36:a7:a6:6e:f9:a0:f0:60:8e:5b:e7:4f:e7:75:ec:8e:0e:e1:
2f:1a:74:2b:6c:ad:f4:47:e1:58:92:4b:19:41:a2:d6:96:c8:
f2:88:3e:76:b5:f9:2f:6b:3f:b4:4d:9d:e6:f8:29:9f:ba:6a:
17:bd:b1:f0:ff:78:26:95:57:05:ea:55:5d:07:90:ec:32:4b:
58:41:31:5e:1e:69:ae:a6:c7:88:1d:fc:8f:d8:66:8c:cf:9a:
47:f9:73:53:3c:39:b3:e1:b1:82:d8:07:3f:26:81:34:89:6c:
cb:8b:c0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:40:30 2025 by rpki-client