Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/0277B4B8494B11ECACE05D32C4F9AE02.roa
File: 0277B4B8494B11ECACE05D32C4F9AE02.roa (raw, json)
Hash identifier: s7LstqI/QnFNwPhbTul5p/jM/qOHIuMYKzUTXeYP3sA=
Subject key identifier: DA:A4:BC:C8:7B:92:DA:56:68:F5:3F:BB:B4:79:85:48:12:5C:15:B2
Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial: 02C5
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/0277B4B8494B11ECACE05D32C4F9AE02.roa
Signing time: Thu 03 Nov 2022 03:32:28 +0000
ROA not before: Thu 03 Nov 2022 03:32:28 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 62579
IP address blocks: 103.175.78.0/24 maxlen: 24
103.175.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709 (0x2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149FAB
Validity
Not Before: Nov 3 03:32:28 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=6363364c-ab34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:4c:a0:28:40:10:15:c7:4f:80:1b:69:a3:
b5:19:16:58:83:67:58:64:e1:93:40:e7:33:da:21:
98:31:ab:33:8b:e1:21:bb:aa:dd:10:f5:bc:2f:f6:
58:03:b7:67:33:81:ee:4c:13:74:b2:b7:cd:3e:01:
a5:5c:ec:df:c8:b5:a3:78:b3:66:54:4b:58:da:98:
04:52:e6:84:0d:cd:88:9b:21:e2:d3:b0:b9:25:53:
da:86:45:72:e7:1e:d5:c6:89:0a:a1:6e:53:f4:3c:
b4:0b:4a:55:0a:c4:e0:30:02:9a:49:a8:06:66:5b:
37:ca:dd:2d:22:af:0a:f9:15:8b:80:63:4d:18:47:
9e:fe:4c:3a:c5:1c:74:58:ec:66:6f:c5:56:4b:f7:
1c:72:54:dc:17:2f:c8:89:52:7b:53:f4:4c:37:72:
06:7f:00:dc:0b:f8:3a:a9:21:2c:2f:b4:47:b5:59:
7f:50:7e:52:33:2c:25:48:00:b4:25:55:6e:61:2f:
65:68:8f:8b:27:de:55:47:fc:7a:fc:22:c1:68:ab:
2f:92:b1:b8:73:7e:82:3e:44:3a:b5:1e:6e:85:ff:
31:77:e7:60:dc:61:5e:f1:b2:7b:da:e8:65:bf:b0:
5a:2a:fc:76:2d:98:79:2c:ca:c9:5d:8c:72:1a:19:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A4:BC:C8:7B:92:DA:56:68:F5:3F:BB:B4:79:85:48:12:5C:15:B2
X509v3 Authority Key Identifier:
keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/0277B4B8494B11ECACE05D32C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.78.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:18:b5:4a:28:d5:9c:73:fe:4b:3b:d4:32:43:5c:10:33:ee:
f5:0c:a9:b8:dd:28:d3:c0:35:f4:e7:34:32:32:7c:79:38:c1:
d0:70:cc:26:67:4a:11:30:3a:80:40:64:c2:b1:1f:de:39:25:
a8:51:dc:a4:bb:08:b3:9a:7a:09:86:17:48:70:a4:cf:7f:8d:
ac:5d:22:65:85:af:e8:66:35:88:c9:fc:f7:77:30:12:2d:64:
a5:2a:6c:ec:f4:df:9d:c1:7f:c7:28:52:a6:67:bd:25:66:62:
f2:e7:a5:42:bd:c6:22:8b:81:dc:59:c7:46:fb:ce:af:f5:36:
44:c7:3f:ed:dc:18:b8:53:e4:33:c1:c6:d3:f2:8c:eb:3c:05:
f3:e2:28:13:63:2a:2d:d7:2b:f2:f9:cc:d3:91:7c:07:0c:e9:
97:66:f5:a8:68:ed:1c:41:2a:e3:6c:de:91:4b:00:a5:2f:08:
7c:1d:ca:f3:24:1f:79:1f:67:23:b0:80:3c:a9:a5:64:1e:f2:
52:88:b2:b5:7f:e8:39:c5:fa:22:d2:f5:fb:07:d8:19:14:d3:
00:16:1b:41:17:c4:58:aa:f7:5e:07:85:11:4c:eb:52:95:83:
d0:a0:fe:da:a7:18:c4:48:7a:e6:ab:fd:74:15:52:42:85:b7:
e4:43:e6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:32 2025 by rpki-client