Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/7D83605A6AFE11ED9CE78543C4F9AE02.roa
File: 7D83605A6AFE11ED9CE78543C4F9AE02.roa (raw, json)
Hash identifier: lPS1X49tjXUhYrqBrTNSRS8XOkuLFpaso8QQHnzpCXw=
Subject key identifier: 8E:DD:B8:D9:3F:36:35:61:55:C9:76:5A:FE:35:D7:27:A5:4A:C4:47
Certificate issuer: /CN=A91ECC24/serialNumber=F497D17169276D43C585215C198331C33C225A75
Certificate serial: 02
Authority key identifier: F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/7D83605A6AFE11ED9CE78543C4F9AE02.roa
Signing time: Wed 23 Nov 2022 07:14:38 +0000
ROA not before: Wed 23 Nov 2022 07:14:38 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 14901
IP address blocks: 103.176.204.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ECC24
Validity
Not Before: Nov 23 07:14:38 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=637dc85e-c95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:55:72:a0:75:64:df:48:1f:88:e0:e5:68:
a7:9a:5d:b0:f6:6b:77:48:a0:00:a2:b8:56:dc:88:
05:db:bf:17:6b:07:74:5f:ad:b0:54:d0:1c:11:1f:
d1:0a:05:7d:23:e4:8d:ec:6d:ca:ab:15:d4:ae:4a:
9f:fd:22:88:6f:3f:0b:e4:77:27:2c:da:82:3e:2e:
24:eb:bb:30:29:b9:7f:61:19:b0:ce:75:ce:4d:b1:
f8:90:ee:b3:37:1c:4e:c1:4a:bf:56:25:49:c1:bc:
c8:f6:47:ca:fb:43:83:bc:82:de:82:98:2c:70:10:
dc:b0:3f:1b:9e:78:5d:2d:5f:e7:55:dd:88:b1:11:
59:4b:c0:49:b6:9f:50:0a:ed:01:04:a9:0d:96:ed:
d6:13:8d:1e:b5:9f:55:91:ba:1a:3a:46:50:c3:60:
f1:0b:02:3b:ac:eb:e1:6d:e3:67:5a:54:7c:a4:88:
8c:c5:36:c7:12:b8:eb:f5:c7:ae:ab:a6:60:e6:be:
02:c4:39:d6:fb:ce:8d:df:b4:5c:20:e8:62:6c:80:
19:4d:36:45:86:03:79:f7:ae:96:12:c2:b7:ba:d7:
b8:92:9b:92:c8:67:c2:22:77:2a:16:6e:0d:30:27:
a8:7a:8f:58:2a:d9:b0:51:65:92:29:54:e8:14:5d:
f7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DD:B8:D9:3F:36:35:61:55:C9:76:5A:FE:35:D7:27:A5:4A:C4:47
X509v3 Authority Key Identifier:
keyid:F4:97:D1:71:69:27:6D:43:C5:85:21:5C:19:83:31:C3:3C:22:5A:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/9JfRcWknbUPFhSFcGYMxwzwiWnU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9JfRcWknbUPFhSFcGYMxwzwiWnU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECC24/16C613166AFA11EDB706FF3CC4F9AE02/7D83605A6AFE11ED9CE78543C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.204.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:06:58:24:82:20:e8:9a:58:78:e5:d9:b8:94:df:53:0d:11:
12:2f:4e:fd:be:72:a0:ab:15:ea:35:d1:f9:78:9d:dc:be:26:
30:21:18:ed:6c:2a:7d:a7:d4:6b:5f:af:69:f4:bb:aa:ca:63:
a7:fd:72:1a:9d:64:a7:1a:1b:33:95:33:1e:3d:a2:a8:93:c9:
a8:43:b1:ce:55:90:60:76:d0:a2:82:6f:2b:47:6b:af:c3:10:
d2:21:ac:82:ad:0b:71:6b:c2:a6:ef:97:9f:5e:06:43:0d:dd:
72:2e:f0:6d:44:85:28:28:d1:fa:7e:04:ac:1a:21:f6:dd:6c:
5d:d1:14:40:90:9f:3b:c1:97:1a:f0:96:7b:44:dd:9d:b6:55:
48:92:ca:29:bf:c9:49:90:2a:0c:3e:eb:60:47:db:50:42:e2:
60:da:db:d3:c1:e7:d3:f7:d3:70:74:ac:c4:36:b1:ca:99:28:
80:b7:82:6f:ff:58:47:96:fb:b6:1c:a6:53:ec:0d:24:c4:ed:
a1:d6:f6:e5:fd:d1:52:bc:5a:ba:bc:52:da:40:5e:7c:04:36:
d2:c2:be:59:14:d3:53:dd:eb:89:ba:85:cc:d9:18:bc:f0:3c:
9e:ce:fc:44:75:d4:2f:18:9d:7d:be:6a:78:1e:50:33:97:fa:
2b:a1:4c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:33:12 2025 by rpki-client