Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/9F5D4E321D3F11EDA8A00A31C4F9AE02.roa
File: 9F5D4E321D3F11EDA8A00A31C4F9AE02.roa (raw, json)
Hash identifier: vERIedK9kis6a2tkYMvsdl8udrko2RW9w/9WO+PgPhc=
Subject key identifier: 8D:0F:E0:B5:CC:FF:B4:BE:89:F9:E5:4F:EC:2E:A7:C0:18:04:4A:4D
Certificate issuer: /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Certificate serial: 1D
Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/9F5D4E321D3F11EDA8A00A31C4F9AE02.roa
Signing time: Tue 16 Aug 2022 08:44:21 +0000
ROA not before: Tue 16 Aug 2022 08:44:21 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 3491
IP address blocks: 103.188.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91447E7
Validity
Not Before: Aug 16 08:44:21 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=62fb58e5-e95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:af:84:d7:eb:59:26:2d:b6:02:88:03:90:
83:10:99:75:78:17:91:65:d1:bf:ba:d4:d4:69:33:
8a:fd:d1:b8:97:ed:1b:e6:c4:66:1f:b5:d4:f6:e4:
e0:e1:fb:b4:6a:cd:b0:1e:fe:d6:81:dd:cd:40:96:
fe:ba:da:af:28:a2:20:15:81:a1:8b:ab:f8:4c:3a:
db:c7:31:9b:26:d9:e3:b2:50:e1:b5:08:dc:1b:d5:
42:8c:78:5f:ec:9f:7b:0f:86:4c:a6:85:c7:47:73:
e7:78:1c:fd:ee:85:93:ae:e2:7a:15:68:9d:85:28:
bc:ba:74:f3:e6:6e:14:ba:d1:89:83:3f:42:b2:d5:
12:04:e1:de:dc:68:41:9b:5f:da:f9:e1:1e:f4:6c:
6f:3b:76:f8:94:76:1e:d2:b9:37:e6:81:98:b3:fd:
35:1b:96:1c:70:72:89:63:ed:f8:22:cd:92:a5:72:
34:7e:b7:e3:d4:5c:f1:e5:97:cf:07:d3:74:67:86:
7e:78:bb:94:b4:a1:5c:4c:e0:b0:71:a9:57:5a:62:
4f:4d:27:5e:a8:b3:cb:24:33:bd:d9:52:f5:f3:41:
8a:ff:50:c5:f6:5a:8a:7c:1a:9e:ec:4a:d5:ca:40:
d0:89:14:81:14:d9:34:f7:ff:54:81:e7:52:2e:b9:
e1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0F:E0:B5:CC:FF:B4:BE:89:F9:E5:4F:EC:2E:A7:C0:18:04:4A:4D
X509v3 Authority Key Identifier:
keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/9F5D4E321D3F11EDA8A00A31C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.188.234.0/24
Signature Algorithm: sha256WithRSAEncryption
85:8e:9b:f1:3c:fe:f5:e3:7a:0c:81:75:87:c6:7b:5e:c8:b0:
b9:ef:01:bf:4f:17:46:a9:46:51:70:11:3d:e2:d9:33:56:7c:
57:fb:0a:3a:c7:00:e4:77:9e:13:bd:6f:7d:73:3a:1f:e1:c9:
85:37:ac:ea:21:59:1e:6d:d9:90:59:6f:8d:f9:47:05:a7:f4:
4d:02:9b:a8:69:25:cc:60:53:49:d1:d7:9b:f5:1d:6a:5c:8b:
18:17:7b:36:1f:a2:8a:b9:4f:56:e5:70:71:df:79:b4:fb:6f:
67:d8:ee:4a:fa:b2:b5:5d:4b:a3:24:a5:61:5d:ac:15:9e:f0:
9b:f9:05:53:f2:c5:c3:6a:c4:77:4f:48:bb:a7:99:eb:ac:df:
2f:5b:9c:ec:13:d1:f1:f9:9c:56:04:af:83:26:0e:18:76:4b:
b5:8c:08:f3:7f:6c:92:c5:bc:f5:ce:a2:c1:dd:30:8d:37:54:
e5:86:48:3a:b3:93:33:cf:2a:b4:3e:75:9c:73:99:67:8d:a7:
fd:ee:42:ae:2d:13:01:73:df:58:57:2e:cf:9f:32:b9:78:88:
b2:17:3f:57:fc:c2:0c:d9:94:05:26:e5:df:51:f7:49:f2:2a:
a0:8d:f9:23:1f:72:53:6f:4d:21:66:18:21:73:8b:05:27:d0:
d0:3d:cd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:50:09 2025 by rpki-client