Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/D1FCD0F2D2DD11EDA4B10773C4F9AE02.roa
File: D1FCD0F2D2DD11EDA4B10773C4F9AE02.roa (raw, json)
Hash identifier: bcJsENpLW4H7lF77jZXJuUgaWbNfNb9d0DfJ/0A5/PA=
Subject key identifier: 02:8F:8F:92:5E:62:77:A4:3D:BD:13:FE:64:D6:6A:58:B1:0F:9C:0C
Certificate issuer: /CN=A9112320/serialNumber=925DA98B4E085D680D16D7BA183F0EA5426A1A03
Certificate serial: 039D
Authority key identifier: 92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/D1FCD0F2D2DD11EDA4B10773C4F9AE02.roa
Signing time: Tue 04 Apr 2023 11:42:47 +0000
ROA not before: Tue 04 Apr 2023 11:42:47 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 140344
IP address blocks: 103.230.56.0/24 maxlen: 24
103.230.58.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 925 (0x39d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112320
Validity
Not Before: Apr 4 11:42:47 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=642c0d37-dd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:25:22:a2:e6:4e:52:5f:de:17:f6:1a:f9:
70:75:6e:11:c9:8e:3b:ea:93:3c:68:70:7b:9e:55:
a6:aa:05:c5:ba:7e:cf:77:e1:45:61:d5:a1:32:3a:
37:10:a9:e5:ca:4e:89:7b:91:f1:eb:95:b6:e0:49:
2d:90:7d:3f:96:73:24:ee:ed:02:e0:67:9c:b6:6c:
6b:53:c8:c4:5a:1c:02:02:94:eb:be:31:0f:54:22:
64:7f:b8:1e:da:d6:c6:47:46:31:29:11:20:68:31:
70:5d:47:97:97:48:6b:dd:cf:ae:d6:15:70:64:f7:
6e:2a:ea:38:35:e0:6a:93:e4:06:4a:b5:a5:aa:4d:
76:bb:9a:ac:5d:ec:34:5f:82:ac:de:c7:37:6c:8f:
2f:69:93:eb:08:ff:34:db:00:9a:09:34:cb:47:1d:
8a:57:a5:86:9f:82:1e:27:8f:5e:88:db:34:f7:7e:
70:2b:3d:c1:11:54:6d:49:38:3e:6f:64:b6:10:2c:
e6:5d:53:b6:71:21:a7:b6:9f:ce:92:47:97:2b:bd:
41:b5:d9:58:16:39:a1:15:0e:99:e2:36:5a:44:b9:
d9:78:72:cb:16:b0:3d:53:fb:d5:05:ae:38:fb:96:
ca:39:ff:7a:57:9b:8d:d5:4e:f4:43:2e:c9:c3:3e:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8F:8F:92:5E:62:77:A4:3D:BD:13:FE:64:D6:6A:58:B1:0F:9C:0C
X509v3 Authority Key Identifier:
keyid:92:5D:A9:8B:4E:08:5D:68:0D:16:D7:BA:18:3F:0E:A5:42:6A:1A:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/kl2pi04IXWgNFte6GD8OpUJqGgM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kl2pi04IXWgNFte6GD8OpUJqGgM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112320/6D705BCEFE7011EB9CFB9029C4F9AE02/D1FCD0F2D2DD11EDA4B10773C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.56.0/24
103.230.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bd:5d:20:45:6d:ba:67:1e:76:c3:e2:ca:8e:c0:41:39:3f:
50:87:ac:54:ed:5d:18:6e:a2:df:60:24:e1:c2:ae:fe:51:13:
7a:ed:a9:a5:e8:d7:07:df:db:33:21:4e:33:40:af:d6:a0:50:
7f:fa:64:7b:99:4a:ce:be:13:7a:f2:62:60:44:11:fa:d8:a8:
f0:8c:b7:9e:a9:e5:87:3e:ac:2f:50:c2:b3:51:9a:83:b0:50:
a6:da:7c:4a:c4:26:01:fa:87:91:7e:c4:b9:c4:3c:b1:c7:d4:
23:e9:8c:42:b8:9c:72:a1:64:4b:98:be:83:a7:bd:4a:82:8a:
e2:79:dd:42:54:2c:3a:05:4d:77:4e:4a:a3:7b:06:ab:79:ac:
e4:a1:3d:24:a0:4d:0f:26:2a:55:94:d7:c8:c4:07:75:04:25:
d0:c9:ee:22:ce:d8:14:b1:10:dc:59:58:69:17:d0:63:b2:cb:
e5:cb:10:0f:dd:8a:0f:5c:18:ac:cd:41:54:93:48:37:45:c2:
f0:be:6e:bd:6a:09:41:0f:df:c9:13:b9:ce:70:cd:d5:ab:5e:
3b:4e:51:97:4b:e9:b0:8a:c0:06:58:83:57:de:00:82:08:26:
a3:5f:49:47:26:03:45:b2:57:10:46:13:81:7e:38:72:44:59:
a9:7a:46:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:16 2025 by rpki-client