Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/B5FC6F6AF42611EDB74D361BC4F9AE02.roa
File: B5FC6F6AF42611EDB74D361BC4F9AE02.roa (raw, json)
Hash identifier: 7t/0d6flC/9L2lulyRxQoxAC3FOuAGqxYkPbE7NSnNM=
Subject key identifier: A6:D3:0A:3C:75:EC:1D:1E:AC:48:2D:A4:D2:07:E7:8B:A0:BE:1E:3C
Certificate issuer: /CN=A911AE24/serialNumber=24223D0C7D101DB7AD7E3CB8DDB170629365CAEE
Certificate serial: 02
Authority key identifier: 24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/B5FC6F6AF42611EDB74D361BC4F9AE02.roa
Signing time: Tue 16 May 2023 20:17:42 +0000
ROA not before: Tue 16 May 2023 20:17:42 +0000
ROA not after: Sat 31 Aug 2024 00:00:00 +0000
asID: 17557
IP address blocks: 103.199.140.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE24
Validity
Not Before: May 16 20:17:42 2023 GMT
Not After : Aug 31 00:00:00 2024 GMT
Subject: CN=6463e4e6-27f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:be:18:35:99:cd:04:85:b8:44:a5:d7:27:
4b:53:d5:2c:ac:a5:39:ab:59:eb:24:5d:a0:d4:a4:
28:80:30:e9:8f:5f:fb:56:30:ec:9a:59:86:47:34:
cd:bd:91:5a:d0:a3:2e:cb:cb:6e:4f:ce:7e:39:16:
a3:a2:8d:11:e8:7f:9c:99:ba:59:cc:92:af:8e:d0:
18:02:73:51:37:25:d4:fa:98:77:90:48:3c:21:0e:
3f:4d:9f:a9:6d:ff:a6:97:39:d4:9b:66:14:98:40:
66:55:69:62:61:f6:78:86:eb:ad:54:8b:61:b8:79:
5d:8a:86:48:8d:7e:32:79:6f:dc:10:fd:09:eb:cf:
1e:f1:b3:59:ac:63:ee:ec:a9:ad:7f:3a:cc:10:0f:
b4:d7:43:c7:54:5c:f4:9c:67:f5:b0:17:54:31:af:
d5:e0:d3:79:c1:13:3d:de:dc:6a:20:cc:75:2d:46:
23:66:35:fa:44:79:86:aa:45:b1:36:6a:58:b6:24:
7e:19:a4:9d:e1:10:b7:bf:ef:84:44:c6:7e:7c:72:
1e:93:71:64:48:de:20:e6:f2:c2:86:ab:a5:23:be:
98:a2:2e:a5:4c:c9:6c:31:38:eb:72:98:b3:4c:d9:
b7:44:9a:9e:e9:6b:44:00:6b:72:74:b6:5c:39:e0:
a3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D3:0A:3C:75:EC:1D:1E:AC:48:2D:A4:D2:07:E7:8B:A0:BE:1E:3C
X509v3 Authority Key Identifier:
keyid:24:22:3D:0C:7D:10:1D:B7:AD:7E:3C:B8:DD:B1:70:62:93:65:CA:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/JCI9DH0QHbetfjy43bFwYpNlyu4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JCI9DH0QHbetfjy43bFwYpNlyu4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE24/F2F675FEF3FF11ED952D741CC4F9AE02/B5FC6F6AF42611EDB74D361BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.199.140.0/24
Signature Algorithm: sha256WithRSAEncryption
27:92:bb:b6:b5:58:95:c2:df:26:29:27:1d:0a:1d:5e:6b:df:
25:17:95:e6:cf:1c:46:9d:79:a9:a5:e3:ef:38:f1:2e:b3:ee:
58:b0:47:38:3f:9a:b5:bf:70:8a:af:d3:62:3f:c4:bf:ca:e3:
b8:1b:06:ae:9a:63:0e:d2:19:e5:92:27:d2:e5:88:7a:d4:f8:
e7:3c:23:28:12:0d:0e:5b:82:99:d7:84:9e:21:bd:57:06:26:
4d:48:c7:06:68:13:42:80:21:72:d3:51:92:63:2f:2b:14:3c:
1c:56:24:81:73:9a:63:30:ae:d3:18:42:f1:a7:1d:55:0d:29:
06:5d:66:34:db:44:d6:a7:0b:22:98:60:b8:42:46:b9:b1:e6:
8c:5b:19:8a:fa:69:e1:f2:3c:78:c8:75:8d:8a:e6:f8:3d:00:
9c:bb:8a:de:23:9e:b3:87:c6:8c:49:21:b1:b6:c1:62:90:91:
54:3e:e7:d4:3b:87:d1:df:2c:01:d5:23:1a:69:67:78:f5:c8:
34:df:d1:2c:7c:65:f1:79:24:7f:0c:6c:7b:4f:62:ed:26:42:
28:ed:67:0a:b1:de:bc:8f:5b:f3:25:ba:9f:c1:3a:fb:78:1f:
ce:00:b4:13:0f:cf:9c:1c:a1:0f:48:94:39:3c:a4:4a:70:4b:
b5:08:e0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:49:23 2025 by rpki-client