Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/F763EED2A41F11EBAD458428C4F9AE02.roa
File: F763EED2A41F11EBAD458428C4F9AE02.roa (raw, json)
Hash identifier: nVQDvw2C750F4CpDClzoqBHeX8Cb5hQ3GIREQfHKMNc=
Subject key identifier: 8D:D6:A6:F9:E3:21:95:98:AA:A1:DF:D7:41:DD:9A:56:B0:C8:0D:D4
Certificate issuer: /CN=A9131B40/serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
Certificate serial: 03ED
Authority key identifier: 99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/F763EED2A41F11EBAD458428C4F9AE02.roa
Signing time: Thu 01 Sep 2022 14:01:12 +0000
ROA not before: Thu 01 Sep 2022 14:01:12 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 399073
IP address blocks: 103.142.130.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1005 (0x3ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9131B40, serialNumber=99587BA9C7FFF6B6C599E94E0DCE47EB56BE6AED
Validity
Not Before: Sep 1 14:01:12 2022 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=6310bb28-c586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:83:c9:cf:e4:a9:26:bc:6c:95:0f:83:e8:16:
4f:74:5c:dc:2c:43:4d:38:65:0f:7a:35:51:d9:e5:
0b:75:26:72:12:45:4e:d3:2c:04:8c:67:af:30:5c:
0d:ba:74:7b:fe:31:fb:22:6a:2e:51:84:bb:94:ad:
c3:43:c2:4e:1d:52:06:5b:e9:98:87:9e:67:e7:e8:
21:72:eb:ba:8b:2f:8a:5e:12:81:35:64:60:24:f4:
6c:be:3a:c9:62:76:a1:81:8e:f2:b0:f1:3f:0f:18:
78:c4:a5:57:3e:01:a8:ff:56:f7:ed:87:41:da:ae:
cd:a2:9b:d0:a4:33:1f:fd:d0:60:26:95:45:c5:ed:
7f:25:99:8e:6e:ec:86:f0:f2:c2:7b:b6:ee:f1:eb:
b2:db:db:3b:f6:fc:0c:09:44:ff:b6:f4:db:fe:89:
77:e1:cd:63:6c:0e:0d:28:a3:6a:f7:9a:44:bd:41:
3b:e4:9f:9f:1d:ab:f7:df:53:0d:6c:3d:c9:7e:5a:
08:10:68:2d:b6:59:e3:df:9a:db:81:8a:4e:df:a3:
f7:b3:f2:48:d1:41:b1:40:3b:d8:5d:ee:ab:60:a1:
55:10:8a:b9:85:0e:a6:84:28:75:37:77:85:3f:ef:
0a:17:8a:54:81:53:10:7d:44:f2:99:09:df:76:5e:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D6:A6:F9:E3:21:95:98:AA:A1:DF:D7:41:DD:9A:56:B0:C8:0D:D4
X509v3 Authority Key Identifier:
keyid:99:58:7B:A9:C7:FF:F6:B6:C5:99:E9:4E:0D:CE:47:EB:56:BE:6A:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/mVh7qcf_9rbFmelODc5H61a-au0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mVh7qcf_9rbFmelODc5H61a-au0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131B40/0A01665C9E9211EB9090A054C4F9AE02/F763EED2A41F11EBAD458428C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.142.130.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:95:19:d2:d1:24:e5:bf:82:bd:06:3a:b0:bb:fc:ea:c7:dd:
b5:1e:4a:c6:bc:c2:c4:28:0b:ac:b9:22:c1:08:36:85:47:ae:
5a:b9:0b:ec:93:cd:25:41:5c:8a:19:ae:d1:d6:fd:b0:67:32:
36:2f:0f:50:96:a9:3e:8e:23:1e:3e:71:b0:5c:49:bd:07:aa:
67:ba:8b:91:a7:1b:12:7b:4d:31:2f:3d:b5:8e:c5:09:c7:15:
92:c6:36:3d:c0:3c:f1:af:c8:2a:32:a5:cb:e1:31:67:3f:30:
99:9b:e1:db:c9:bd:c5:eb:cd:1e:dd:6c:7a:26:82:04:a8:e4:
e5:8d:24:68:50:0f:e1:23:05:2e:f7:21:05:48:7a:d9:30:08:
95:bd:59:88:70:83:b2:0b:1f:42:6c:4c:2a:8a:f7:28:59:1f:
54:d0:e0:fa:ee:65:90:c3:ad:a6:85:9b:2c:f5:d8:c1:6f:53:
9c:2f:61:79:2c:0f:4c:22:c0:09:bd:ca:9d:69:6d:2f:15:ff:
35:e5:06:31:0f:d1:83:3f:51:21:4e:16:16:b4:65:50:c9:16:
cd:4f:3e:66:dc:9e:41:98:96:18:ea:06:35:e1:d6:9b:ff:b4:
96:bd:d0:0d:83:36:de:84:91:e6:af:cc:6b:8c:8b:67:4b:a4:
d8:ae:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:05:11 2025 by rpki-client