Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/4487AB74A0DC11EF956C710AC4F9AE02.roa
File: 4487AB74A0DC11EF956C710AC4F9AE02.roa (raw, json)
Hash identifier: Z300NrBYHzM9rn80EMKPxJ4QiAkUobQlOjAkxqP39Lg=
Subject key identifier: A5:17:E3:D4:BD:B8:07:5C:22:73:5A:3A:27:32:75:B7:68:94:4F:0F
Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial: 011E
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/4487AB74A0DC11EF956C710AC4F9AE02.roa
Signing time: Tue 12 Nov 2024 09:55:37 +0000
ROA not before: Tue 12 Nov 2024 09:55:37 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 150774
IP address blocks: 103.179.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 286 (0x11e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Validity
Not Before: Nov 12 09:55:37 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=67332619-28a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:bf:ea:fd:bc:78:6b:9c:f6:97:29:44:d2:
9e:d6:a1:e9:de:80:47:73:e9:a3:7f:5f:d1:ee:18:
2f:31:7c:c2:96:4c:f9:f8:66:bb:bd:5d:09:ba:b1:
a5:fb:df:13:17:fc:cd:e2:52:7a:a1:2c:de:34:61:
a8:ab:e9:8a:24:ae:af:0d:87:a6:da:bb:bd:27:f9:
d1:1e:51:cb:1f:ec:3c:56:1d:84:12:8b:1f:ae:47:
39:24:6a:b0:e2:6a:4f:ec:f7:af:b9:f1:96:f9:89:
69:8a:bc:46:5e:00:93:a4:99:12:fc:c2:36:d4:7a:
32:9e:9d:3d:c6:b2:19:4f:15:53:f3:52:f7:44:c0:
d3:18:11:00:0e:d0:b8:f3:1b:af:c9:a3:b9:47:b3:
b4:c4:be:f9:76:2f:ff:29:1c:86:1f:0b:53:cb:e9:
8e:30:1e:c4:91:90:54:5e:a0:82:a3:bb:f1:61:2c:
d0:25:ec:b3:18:72:d6:08:29:eb:dd:81:da:a1:ba:
9b:39:54:4f:78:f5:2d:02:6c:a5:dd:22:78:21:08:
01:1d:1b:22:02:b5:04:bb:e1:5f:3c:cc:54:15:b7:
d8:27:56:08:8e:98:93:6d:76:b9:8d:4f:68:bf:99:
7a:6c:2a:74:fa:02:42:71:21:ed:ee:9e:3b:2b:d2:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:17:E3:D4:BD:B8:07:5C:22:73:5A:3A:27:32:75:B7:68:94:4F:0F
X509v3 Authority Key Identifier:
keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/4487AB74A0DC11EF956C710AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.127.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e4:b0:a4:7c:23:db:a5:51:1a:36:f1:40:6b:c9:f0:bf:f9:
40:5b:d5:67:bf:b7:49:58:63:1b:99:a0:16:16:9f:eb:2f:db:
0d:c9:ba:52:c0:08:7b:bb:d6:77:c5:b2:0c:ac:e8:68:bb:8d:
83:ce:61:3d:90:65:94:6c:9a:53:f9:25:7c:7c:ed:b9:15:67:
51:09:8e:46:d0:96:13:24:88:be:44:26:87:5b:31:50:01:d1:
c9:db:76:7b:68:04:6a:04:43:6c:da:4c:9c:a4:78:d7:e0:94:
4f:32:17:78:88:7a:00:2f:fb:9e:4c:fc:a7:1e:37:7a:50:4a:
24:77:24:bd:9d:a8:5c:74:4c:78:a5:08:8f:e0:da:94:36:45:
ac:0b:f2:a6:50:a3:fb:ed:b4:c8:af:2b:22:50:69:54:af:cc:
84:c1:1a:3f:8d:a6:4a:cf:76:77:a8:1f:1a:84:b4:3a:e7:18:
02:09:f6:fe:1d:2d:02:5b:4e:d2:70:20:cb:fe:0b:f4:45:3c:
b4:e0:14:65:d6:e4:d1:30:09:2a:2f:d1:11:0b:f9:03:af:25:
e9:a5:94:86:5a:3e:19:4c:d4:4d:3f:41:2e:05:bc:1c:0a:a9:
5d:f9:09:e0:a6:f9:8a:fc:12:14:89:e5:88:e9:3a:3b:9c:15:
10:d3:d5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:06:04 2025 by rpki-client