Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/0A73DE900E9211EEB070CC49C4F9AE02.roa
File: 0A73DE900E9211EEB070CC49C4F9AE02.roa (raw, json)
Hash identifier: jyGRTd6+9b2p2eqtEhiyqJChHsET3khADs9AkBL4Rfs=
Subject key identifier: 18:86:F1:53:AF:20:64:5B:29:1E:05:A8:28:56:C3:CE:1F:10:6D:78
Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial: 02
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/0A73DE900E9211EEB070CC49C4F9AE02.roa
Signing time: Mon 19 Jun 2023 11:11:30 +0000
ROA not before: Mon 19 Jun 2023 11:11:30 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 149437
IP address blocks: 103.179.126.0/23 maxlen: 23
103.179.126.0/24 maxlen: 24
103.179.127.0/24 maxlen: 24
2001:df0:4cc0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Validity
Not Before: Jun 19 11:11:30 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=649037e2-d345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b0:6f:09:37:36:d7:5b:e1:71:ab:2b:ff:97:
98:22:80:46:67:ee:74:8f:31:e0:23:1c:17:30:2f:
23:e6:59:2a:1f:5c:db:e1:9f:90:67:2b:17:ff:92:
7b:4f:88:df:1a:d7:a5:17:df:3b:cb:d0:ea:bb:a6:
a8:b8:1e:53:c7:09:7e:cd:ae:cf:9c:ec:2e:1e:c7:
52:81:86:77:8c:aa:b8:7c:a7:4b:ec:2f:f3:91:0b:
ae:b2:22:09:81:46:8a:2d:e7:0a:cb:15:57:2e:cb:
4b:3b:bf:c3:a9:53:a1:1a:eb:53:68:85:ab:63:bd:
24:78:ef:54:b1:81:2c:97:f0:bf:c2:4f:7e:d3:01:
c7:4a:6b:09:de:3c:42:aa:d8:b5:06:97:52:c4:01:
48:2f:cb:66:6d:6c:b5:63:47:36:81:37:2b:7b:5b:
3c:21:c8:a3:37:3e:02:36:4c:bc:a0:49:d1:bf:ea:
90:8f:50:7e:b3:a7:ed:f5:5d:52:7e:38:16:e3:d3:
3a:fb:2a:c2:60:fa:5d:35:bf:2d:86:50:d9:c1:3f:
fa:37:01:81:ec:ca:de:e6:09:d6:3c:51:60:25:e5:
de:77:4e:f9:bd:8f:5b:b7:40:87:46:15:08:e2:3e:
53:2e:f8:58:0f:53:93:4d:e4:7e:72:82:2e:4e:88:
43:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:86:F1:53:AF:20:64:5B:29:1E:05:A8:28:56:C3:CE:1F:10:6D:78
X509v3 Authority Key Identifier:
keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/0A73DE900E9211EEB070CC49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.126.0/23
IPv6:
2001:df0:4cc0::/48
Signature Algorithm: sha256WithRSAEncryption
3b:8c:61:b8:4d:89:b6:45:70:9a:47:04:49:41:07:4f:21:71:
16:f4:48:e1:4a:fb:0f:ba:dc:c5:4e:10:eb:1b:b8:3d:b9:06:
32:b7:d5:b4:56:b9:e7:6c:8e:59:21:b0:69:30:4a:54:95:e4:
18:9c:c7:ab:8b:fb:a5:4e:7f:66:79:41:ed:9f:04:8d:f1:72:
b8:f3:fb:64:d1:50:14:5d:fe:73:85:20:41:23:a3:08:cf:80:
8c:7c:0b:f9:42:57:f2:26:f1:f2:f6:47:6c:5f:6d:5d:7d:b4:
bd:06:bd:b4:3e:ba:52:cd:17:38:6a:6f:88:04:61:3d:62:87:
6c:30:0f:de:f0:1e:a9:91:10:f3:36:ea:94:a4:0a:df:03:c2:
e7:ce:74:5a:8d:a0:43:20:ab:a8:de:78:39:a5:09:94:21:fc:
15:70:f8:18:75:47:7f:9e:e1:83:93:15:32:87:8f:18:5a:37:
82:38:4f:b1:3c:b5:5f:b0:1f:a4:95:0b:a6:82:2f:70:51:98:
b5:00:9b:aa:26:8c:c1:62:8d:c4:17:ce:c8:5c:71:1a:51:92:
27:7f:ba:09:7a:78:de:41:c5:f8:94:86:88:ec:e8:80:eb:57:
64:50:f5:dd:2b:dc:6b:b2:4b:ff:1f:22:ba:66:a0:d4:5f:30:
57:54:79:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:49:19 2025 by rpki-client