Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/8FA45DCA24A811EE8B0B0E72C4F9AE02.roa
File: 8FA45DCA24A811EE8B0B0E72C4F9AE02.roa (raw, json)
Hash identifier: 4TV4nnUir7jPjMm5Z0CIIZZplMPg1VvXD3/+LtjUvi8=
Subject key identifier: F3:6F:4E:FC:C1:1D:D8:EB:F5:7C:D9:26:E1:0C:A9:77:0F:AA:B7:92
Certificate issuer: /CN=A911AE4D/serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Certificate serial: 32
Authority key identifier: B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/8FA45DCA24A811EE8B0B0E72C4F9AE02.roa
Signing time: Thu 31 Aug 2023 05:34:52 +0000
ROA not before: Thu 31 Aug 2023 05:34:52 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 209043
IP address blocks: 103.120.13.0/24 maxlen: 24
103.120.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50 (0x32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911AE4D, serialNumber=B459B915D67B72D8335384202DBFBB39565C94D8
Validity
Not Before: Aug 31 05:34:52 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64f0267c-3c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:b7:03:18:ef:6e:f8:7e:21:9e:aa:15:63:
e2:a8:3b:6f:04:48:76:71:23:76:c6:35:31:4e:08:
17:09:7d:e8:35:d5:d5:c4:3c:a3:5b:a9:fa:2f:d8:
86:ad:2e:b5:70:74:42:ed:0a:34:1e:17:e8:33:e4:
15:3d:39:4d:de:2b:f4:02:74:ec:eb:9a:f8:dc:ab:
78:03:6b:82:02:96:24:90:89:d5:20:b1:8a:fa:da:
bd:6b:a8:7a:3b:7c:c6:90:ba:c1:07:2b:e5:65:35:
cb:ad:b7:be:21:85:8b:9f:60:03:21:65:1b:29:92:
4d:2e:0a:d1:82:92:71:5d:7a:dc:e5:ad:0d:d4:1e:
72:c6:82:ae:79:25:48:c7:dc:12:35:38:02:ca:6c:
f6:1d:12:74:54:41:12:60:a5:af:f1:fb:71:2e:eb:
64:4f:ac:20:6a:93:f5:8b:32:5d:41:e9:8c:62:51:
de:c5:85:4a:9b:2e:6e:39:29:fa:b4:82:c4:cb:85:
f5:99:76:5b:47:a1:ff:ff:5d:1e:77:47:55:ca:a2:
55:4c:15:4e:a8:99:00:5e:74:67:4a:1e:65:fc:81:
f1:78:4c:3e:55:ac:89:07:98:2f:bd:a9:f6:61:25:
e7:68:75:74:ba:ed:25:03:08:35:ba:15:e0:bf:40:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6F:4E:FC:C1:1D:D8:EB:F5:7C:D9:26:E1:0C:A9:77:0F:AA:B7:92
X509v3 Authority Key Identifier:
keyid:B4:59:B9:15:D6:7B:72:D8:33:53:84:20:2D:BF:BB:39:56:5C:94:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/tFm5FdZ7ctgzU4QgLb-7OVZclNg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tFm5FdZ7ctgzU4QgLb-7OVZclNg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AE4D/57C37E380A5711EE8C635A46C4F9AE02/8FA45DCA24A811EE8B0B0E72C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.13.0-103.120.14.255
Signature Algorithm: sha256WithRSAEncryption
03:d6:b7:7f:e2:6a:f9:dc:c3:7c:6e:af:9f:3e:27:48:5d:47:
e5:c7:ef:f9:23:97:0a:16:0e:3d:08:f4:84:11:2d:74:f3:45:
37:05:4d:33:aa:3b:87:1b:11:9b:47:c6:a3:5d:89:65:d1:5a:
73:bf:3f:a9:40:0e:20:77:b6:84:61:7b:fb:7c:11:a6:3e:77:
81:16:32:30:b1:f7:f5:23:d9:e1:50:ca:ec:cc:72:42:73:d1:
66:d3:ee:a1:dd:35:29:c9:66:db:21:5c:b3:8f:1c:a5:2a:a6:
1e:08:7e:da:63:8c:cb:cb:fc:78:6c:9d:7b:98:10:9e:5b:37:
b7:36:f1:fa:f1:7a:07:53:1b:86:c1:0f:03:1f:33:1c:43:4a:
ef:f0:a6:48:23:15:81:ac:10:69:56:b4:c9:d5:e8:44:a9:10:
5e:03:70:55:87:d5:a4:2a:1f:1f:82:6d:22:9f:f2:e0:21:2f:
a7:55:21:10:ba:9c:e8:8e:f0:cd:9f:3c:77:48:85:19:ed:3b:
79:8e:5f:6a:a5:fa:a6:1c:e7:09:f5:11:55:32:8c:eb:19:ed:
02:c5:6a:2a:db:31:87:96:d4:11:ed:b2:b5:9c:f6:68:54:f2:
27:28:d3:14:06:27:8e:7a:6d:f3:a1:17:d8:19:15:56:e3:99:
25:98:70:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:57:29 2025 by rpki-client