Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/BE62A470D42411ED8AA9290AC4F9AE02.roa
File: BE62A470D42411ED8AA9290AC4F9AE02.roa (raw, json)
Hash identifier: b5F3MTm+6FyM1Qz96Awh54RUHjcVviZkq0Mitrp703g=
Subject key identifier: 51:86:D1:4B:C2:A5:73:DE:88:81:DC:F6:8A:9C:B8:EE:8C:E2:C7:79
Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C
Certificate serial: 034F
Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/BE62A470D42411ED8AA9290AC4F9AE02.roa
Signing time: Thu 06 Apr 2023 02:43:00 +0000
ROA not before: Thu 06 Apr 2023 02:43:00 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 208392
IP address blocks: 103.173.126.0/24 maxlen: 24
103.173.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 847 (0x34f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E83FE
Validity
Not Before: Apr 6 02:43:00 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=642e31b3-9fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a0:d0:99:cd:40:80:14:46:00:0d:5e:c3:3a:
c8:a4:23:43:b2:54:c5:ff:58:50:8d:50:58:db:a9:
c1:36:4c:a3:d3:a7:73:25:71:ce:7c:93:60:a5:18:
6e:56:c7:9c:22:7a:eb:5c:59:20:f7:7c:e2:fb:c0:
89:27:ea:03:7c:73:3c:11:c2:6f:97:85:fd:44:dc:
30:9f:f4:c0:f8:38:45:3e:6e:42:10:98:e6:db:ef:
4b:21:6a:7a:87:e3:21:0c:99:e1:7e:4d:8c:78:05:
25:65:bd:bc:09:bf:b2:2f:a1:33:ae:17:d3:df:26:
38:d9:81:bc:29:60:8c:16:89:c0:04:f6:a3:5c:8b:
eb:f7:11:5d:47:87:d2:2f:2f:3b:14:61:b1:b5:2a:
0c:81:c5:11:d6:18:ba:a0:15:8f:d9:ea:10:b2:65:
8a:51:32:17:f0:9b:66:56:ee:16:dd:3e:46:b9:aa:
a4:68:b1:68:78:7f:84:7d:33:a2:6c:25:1a:71:67:
7e:b6:79:79:16:43:87:3b:a5:1d:84:45:33:5a:62:
00:cf:b0:e8:db:49:61:7a:06:30:f3:3c:2a:26:07:
ed:f0:2d:30:84:93:83:67:bb:fd:5e:37:c1:98:c4:
b6:7c:e3:98:a1:a9:b9:de:d3:b6:c4:70:1f:2b:71:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:86:D1:4B:C2:A5:73:DE:88:81:DC:F6:8A:9C:B8:EE:8C:E2:C7:79
X509v3 Authority Key Identifier:
keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/BE62A470D42411ED8AA9290AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.173.126.0/23
Signature Algorithm: sha256WithRSAEncryption
14:b1:d1:56:74:ba:cd:43:84:7e:85:f1:28:c8:cc:24:fc:38:
73:e0:07:59:2f:9d:1e:cc:9c:86:55:3e:a2:b8:5a:4c:4b:78:
c5:65:73:32:17:5e:c5:0a:af:3f:3e:51:53:c5:a1:93:63:44:
ee:8a:56:38:c3:cd:47:2f:76:ce:ea:58:43:72:88:2d:cb:5b:
96:21:85:36:e9:84:22:68:a4:5d:02:31:a4:4e:ef:ad:db:91:
b7:d1:6a:7d:a7:84:a9:14:23:88:95:de:7a:30:f1:4b:f6:30:
d2:47:be:ad:ff:02:5a:be:39:29:04:45:22:48:92:16:6a:bb:
5c:86:2c:b3:05:de:91:95:ab:f1:a2:12:71:de:fa:e3:47:fa:
71:77:72:2d:0d:b0:be:02:97:f3:c4:e0:92:89:0d:39:36:f3:
f2:d8:0e:00:bd:da:02:d1:61:78:c2:e1:f0:b8:df:c1:45:d4:
f8:cb:67:59:17:b2:cd:42:1c:ba:1d:5b:e1:df:42:7a:80:d3:
79:9f:d5:9b:62:6a:31:5f:45:70:77:4a:ca:0a:06:28:cb:8d:
46:a9:a9:75:6a:51:28:44:f8:6b:d2:46:f9:53:0f:f3:bb:6f:
a6:da:e6:17:0e:31:ef:ec:77:03:f8:32:54:40:8d:89:c6:3a:
bb:1f:f9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:41 2025 by rpki-client