Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/C8263126592011EEB194A333C4F9AE02.roa
File: C8263126592011EEB194A333C4F9AE02.roa (raw, json)
Hash identifier: SVAqe66PAhga5xg/sprqwrSHhVD8yi2ivMsKruNwHwo=
Subject key identifier: F8:47:5D:1F:19:29:11:F1:A5:F9:1A:BB:27:93:BE:AB:00:9C:64:E4
Certificate issuer: /CN=A91F715C/serialNumber=E77132E4FEAD04EED4FE946D607A0DCB57A42065
Certificate serial: 10
Authority key identifier: E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/C8263126592011EEB194A333C4F9AE02.roa
Signing time: Fri 22 Sep 2023 08:20:18 +0000
ROA not before: Fri 22 Sep 2023 08:20:18 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 151790
IP address blocks: 103.72.62.0/24 maxlen: 24
103.72.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16 (0x10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F715C
Validity
Not Before: Sep 22 08:20:18 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=650d4e41-0cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:5d:13:06:32:ad:fa:53:ee:14:46:43:21:
e2:db:ca:d2:03:d4:12:64:e4:e5:d9:af:93:30:7a:
34:e8:78:cb:4e:96:97:54:8f:3f:91:e6:56:5b:88:
a6:9d:9d:7f:f7:79:27:27:fb:9e:35:a6:2c:7a:29:
a3:1e:69:50:3f:53:37:2c:16:e6:9d:9e:4a:66:57:
c8:e4:1e:ff:61:3b:b5:59:c5:12:99:7e:2e:5a:f9:
e5:a6:04:6b:a8:69:a2:cd:9d:e0:9f:d9:2a:76:97:
87:15:bd:29:4f:d4:92:6b:12:d8:e6:7a:5d:6d:c7:
e0:17:3d:00:1a:54:ab:01:ef:4e:57:a5:0d:c6:b7:
89:87:58:00:a7:e0:5f:09:39:3c:da:c0:1c:31:0e:
e5:05:95:9f:b8:a3:3b:0a:6c:88:a1:c5:21:a9:e7:
16:bb:28:8e:3d:01:25:fc:32:60:6e:2c:ce:50:a4:
20:33:5d:32:ba:4c:8f:63:6f:13:0f:7e:9b:1a:98:
62:68:cb:6f:b2:1c:89:6a:93:86:cd:61:8f:4d:59:
d1:49:fe:60:b2:38:6b:c0:1f:8c:19:92:94:cc:89:
0c:0a:47:3c:e9:e9:ee:2f:c1:e3:08:89:0e:7c:1b:
8e:12:a0:84:0e:a3:0a:9e:bf:23:45:7c:a1:29:36:
16:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:47:5D:1F:19:29:11:F1:A5:F9:1A:BB:27:93:BE:AB:00:9C:64:E4
X509v3 Authority Key Identifier:
keyid:E7:71:32:E4:FE:AD:04:EE:D4:FE:94:6D:60:7A:0D:CB:57:A4:20:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/53Ey5P6tBO7U_pRtYHoNy1ekIGU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53Ey5P6tBO7U_pRtYHoNy1ekIGU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F715C/5F0726384F3311EE966E0F72C4F9AE02/C8263126592011EEB194A333C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.72.62.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:23:b5:ca:b3:e5:ff:1f:75:01:76:59:3a:91:87:bc:07:c2:
54:b0:40:aa:88:4f:c7:85:aa:95:7f:d7:87:03:ab:c2:6f:06:
d9:02:2c:f7:8f:7e:d0:f9:26:27:b5:fb:ec:f7:33:2e:f4:f3:
0b:38:40:2c:cb:ef:24:2b:ff:d9:d4:2d:f9:d1:e7:bc:8b:bf:
a6:b2:9b:98:6b:47:f5:fc:9e:b8:9c:cd:20:08:8e:cd:a2:38:
9c:e3:63:1b:00:d9:95:ff:53:1e:5f:de:62:dc:71:39:96:2b:
9d:79:73:bd:0d:11:6d:31:da:58:c4:af:cd:d9:52:bb:73:d6:
bc:df:a3:84:ab:87:78:79:d5:db:61:bc:50:30:4d:f2:8a:9a:
6e:24:b8:79:4f:12:d6:52:05:13:3a:f8:cf:ed:a9:e4:b2:01:
cf:fb:47:98:04:97:7e:f3:a1:25:51:39:b9:a2:b5:02:51:48:
77:43:44:c3:32:82:5f:a4:07:62:2b:41:4c:3e:67:06:97:b5:
87:1e:00:97:c9:79:27:4e:83:ac:2c:d2:f4:9b:5d:f4:22:5a:
d9:88:38:60:17:53:27:fb:45:f2:dd:23:9e:16:ad:da:10:4a:
a7:55:6b:2a:5e:54:a8:a4:f8:ad:3a:40:01:92:56:ab:14:a8:
52:f4:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:11 2025 by rpki-client