Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/29E4542AB79311EF8F81F950C4F9AE02.roa
File: 29E4542AB79311EF8F81F950C4F9AE02.roa (raw, json)
Hash identifier: eZ3j0C9M1blMFycX+/Y3nvo5HTVuukkcAoL+fNVpFqw=
Subject key identifier: 0C:8A:28:5C:BE:70:5E:89:9E:1B:E6:70:F8:17:9A:E7:10:9B:EF:5B
Certificate issuer: /CN=A91FD90A/serialNumber=4B9A63881A8556021054E94BDC32274EC7B7DDF2
Certificate serial: 059D
Authority key identifier: 4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/29E4542AB79311EF8F81F950C4F9AE02.roa
Signing time: Wed 11 Dec 2024 07:40:16 +0000
ROA not before: Wed 11 Dec 2024 07:40:16 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 136969
IP address blocks: 103.145.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1437 (0x59d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD90A
Validity
Not Before: Dec 11 07:40:16 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=675941e0-286e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:89:d6:bb:ff:e4:d2:f2:8b:d1:81:64:7f:
ec:f8:69:37:c2:aa:37:47:f3:19:31:83:25:2a:81:
00:b6:66:3c:d5:69:81:41:54:d9:28:97:43:68:4b:
6f:54:03:24:42:88:58:a4:95:e5:07:82:04:af:c3:
2c:b0:de:44:30:5d:e5:f4:7c:c8:5b:33:0e:ec:ea:
c4:a6:02:4a:14:8b:37:c9:5d:07:5f:7c:2e:e8:5d:
0d:1e:ed:fb:81:76:d1:0d:4a:07:7b:04:b2:5b:ec:
72:ce:6b:10:83:99:78:89:7e:5d:1c:11:0a:71:fd:
ff:06:fc:43:89:19:23:9b:f9:b8:ba:94:63:19:8b:
a3:99:ea:04:f7:18:cf:b6:c1:64:68:a7:57:82:82:
70:cc:64:04:26:68:67:40:fd:88:9f:35:8a:3b:af:
b8:3b:c0:d0:c1:03:24:67:27:7f:dd:75:19:c8:33:
a0:f1:55:b4:d8:4e:6b:a8:62:8d:c0:71:8b:7f:25:
47:88:11:61:59:af:0c:17:fe:88:cd:05:53:51:ec:
0f:68:2d:87:53:59:5e:45:bf:7b:f9:fa:a6:01:7f:
41:08:27:d3:da:fd:b6:c9:06:c7:71:f2:12:d6:79:
4b:dd:59:87:9f:34:64:57:0a:76:df:62:dc:a5:f4:
07:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8A:28:5C:BE:70:5E:89:9E:1B:E6:70:F8:17:9A:E7:10:9B:EF:5B
X509v3 Authority Key Identifier:
keyid:4B:9A:63:88:1A:85:56:02:10:54:E9:4B:DC:32:27:4E:C7:B7:DD:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/S5pjiBqFVgIQVOlL3DInTse33fI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5pjiBqFVgIQVOlL3DInTse33fI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD90A/17E2CF50B5C511EBB54E0146C4F9AE02/29E4542AB79311EF8F81F950C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.145.184.0/24
Signature Algorithm: sha256WithRSAEncryption
98:82:44:72:82:82:42:ec:85:27:19:55:d2:84:05:8c:b0:c1:
50:d5:3c:34:a0:a9:81:bb:e7:e9:b9:1a:f7:3c:40:08:a1:35:
9b:cc:71:fb:7a:3c:79:90:08:d5:51:9d:5a:d2:36:d8:2c:5f:
fc:b8:a4:bf:6e:9f:eb:15:43:67:6f:61:a0:33:2a:25:7a:36:
fc:28:16:64:10:1a:dc:26:94:94:d5:1e:ef:a2:48:bb:ab:d7:
65:dc:44:96:fd:ae:76:c0:fc:62:a8:ed:c5:55:27:93:65:c1:
38:30:ca:68:e0:33:f3:74:92:e4:8a:8a:03:1f:90:06:3c:59:
d1:99:1b:30:06:4d:3a:34:9c:1f:e7:a6:c7:72:84:ff:4f:be:
5a:89:c8:31:89:b4:73:c9:16:68:b9:ac:14:24:05:f5:1b:5c:
1f:8b:96:03:5e:69:20:df:47:dc:c6:7a:45:82:88:1a:85:79:
3a:94:87:72:46:6a:66:1e:e7:ce:73:31:77:00:58:f0:b3:85:
7d:04:7a:f6:f7:d6:94:68:8e:fc:a9:26:a0:50:70:d3:f9:73:
a4:26:7f:13:83:8c:0e:0a:00:fa:87:4d:d6:8f:1d:83:ab:eb:
f0:81:c4:ff:ae:7f:a3:99:c3:a0:f5:ee:5f:9d:8f:0c:1b:d3:
17:88:10:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:33:30 2025 by rpki-client