Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/95A8E624A6F111EF9E720A74C4F9AE02.roa
File: 95A8E624A6F111EF9E720A74C4F9AE02.roa (raw, json)
Hash identifier: AL8g8R1nvsAF5tD4H7Zxpe+Zo6BrJ4TViEiATiToe98=
Subject key identifier: 1C:0B:0F:D1:2C:E3:C4:18:73:2D:CD:14:49:63:F8:2F:62:AD:AB:DA
Certificate issuer: /CN=A9119363/serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21
Certificate serial: 02
Authority key identifier: 78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/95A8E624A6F111EF9E720A74C4F9AE02.roa
Signing time: Wed 20 Nov 2024 03:43:20 +0000
ROA not before: Wed 20 Nov 2024 03:43:20 +0000
ROA not after: Wed 28 May 2025 00:00:00 +0000
asID: 134489
IP address blocks: 103.163.49.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9119363, serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21
Validity
Not Before: Nov 20 03:43:20 2024 GMT
Not After : May 28 00:00:00 2025 GMT
Subject: CN=673d5ad8-4857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:65:33:44:21:06:af:09:c7:a9:49:aa:8c:34:
15:32:ee:0b:f9:5d:7b:fa:51:b5:bf:bc:6a:16:ec:
4f:58:e2:34:f2:8c:c1:c8:25:49:0c:0b:5e:2e:b5:
7b:52:c0:2f:d3:f2:df:98:fd:bf:a7:64:45:23:94:
7c:24:e6:13:a5:30:e9:93:ae:c8:fb:90:e6:8b:7b:
f0:6a:74:73:81:c6:64:ce:c4:29:84:88:1b:53:cf:
a8:92:28:3c:7c:6b:b1:e7:60:1c:da:42:f5:e3:32:
ee:22:62:69:ed:15:96:97:58:d4:f0:34:8e:5b:32:
d7:06:bd:7c:44:95:a6:6c:2d:64:a7:02:0e:f2:cf:
7d:89:61:78:40:88:a2:7c:33:9d:16:19:b9:47:f0:
56:13:78:ab:68:ad:75:7a:d0:d7:53:a4:de:96:db:
10:92:4f:8f:11:f3:b7:e1:49:f0:79:79:bc:ac:ba:
e0:05:e9:e2:8a:f5:0f:01:19:37:56:99:78:47:01:
38:4c:c3:80:a3:b0:d4:00:7a:0b:41:b4:23:76:2e:
a2:cc:35:2e:ef:0f:5d:be:46:86:20:32:dc:15:e9:
44:3e:e9:11:05:2a:41:48:9d:0a:e6:6d:8d:b2:4b:
dc:bf:1a:af:55:8b:e4:00:d1:77:70:9e:c9:3b:80:
fa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0B:0F:D1:2C:E3:C4:18:73:2D:CD:14:49:63:F8:2F:62:AD:AB:DA
X509v3 Authority Key Identifier:
keyid:78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/95A8E624A6F111EF9E720A74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.49.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b9:6f:5d:4e:0c:75:b6:16:8e:85:53:c3:76:56:de:33:67:
79:33:5a:46:2a:7b:f2:e6:47:ed:50:8b:91:20:e6:6f:5e:7c:
fb:ab:bb:2c:93:ab:09:ed:a3:a9:0a:dd:7b:53:9b:71:f5:ff:
37:fb:5e:25:3c:a2:bb:8f:09:c6:c4:d9:f1:e4:e3:b6:29:d9:
da:2d:19:44:01:2f:d5:a3:f3:92:68:78:13:16:fe:25:38:b7:
7f:02:92:ec:06:0f:06:83:cc:b6:bd:77:6d:17:86:c6:fb:28:
9a:54:b1:8b:4b:38:22:99:d1:ca:e4:93:14:04:56:72:39:c7:
72:3f:42:18:79:80:a1:25:aa:76:dd:05:75:86:4f:b1:00:e8:
7f:90:38:d9:f6:bf:73:49:07:02:95:34:09:d4:49:64:45:ab:
41:9d:b7:7e:f2:b4:0f:bf:bf:13:61:26:02:1a:95:ea:9f:66:
d7:38:51:1a:b6:cf:e3:46:0d:78:19:da:02:e1:39:ce:96:bb:
62:37:23:31:51:a6:67:c0:f8:e1:8f:bc:8d:7c:90:c0:82:23:
2a:d6:cb:28:aa:5c:b1:78:7d:40:bd:d2:fc:e9:7f:3d:53:6f:
b5:42:07:20:26:59:0c:21:6f:9c:c7:e9:7a:08:5b:f8:4a:fe:
71:be:3e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:05:42 2025 by rpki-client