Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/1DBE0F704A7311EFA9D30136C4F9AE02.roa
File: 1DBE0F704A7311EFA9D30136C4F9AE02.roa (raw, json)
Hash identifier: Xk2r/aIBLQRF4T93v7yoorY+mx/p3r6j/IAR2pxdCpk=
Subject key identifier: 77:61:F0:46:64:03:9D:FC:3A:F2:9F:A7:CD:17:27:77:ED:4D:63:4E
Certificate issuer: /CN=A9149FAB/serialNumber=6028E7065206A9E45FFD4B24A57EE8C3340C5736
Certificate serial: 041A
Authority key identifier: 60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/1DBE0F704A7311EFA9D30136C4F9AE02.roa
Signing time: Thu 25 Jul 2024 10:46:15 +0000
ROA not before: Thu 25 Jul 2024 10:46:15 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 400384
IP address blocks: 103.175.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1050 (0x41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149FAB
Validity
Not Before: Jul 25 10:46:15 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=66a22cf7-ffe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:d0:b9:9d:21:d9:b7:c2:90:82:a7:31:86:
b1:ba:e9:89:2d:28:45:aa:09:e8:fa:24:5f:20:3e:
f1:0c:4e:17:d4:bc:65:4c:13:10:cf:95:cc:e1:4d:
cb:aa:77:0e:99:c7:f6:f8:1d:76:e4:42:0e:e0:5a:
c6:f9:36:bb:da:0f:b7:4d:21:df:ad:cc:fb:d9:df:
f5:73:41:bf:e6:72:ef:ac:8d:bc:70:30:95:24:73:
b3:f0:57:6d:6a:26:68:1f:77:00:e4:06:ed:bd:d9:
20:d0:d3:00:f9:2c:6c:37:7f:90:84:aa:13:3e:42:
e4:7f:5e:9a:f5:06:69:3c:a3:9b:ff:55:dc:ad:d3:
1c:ff:1b:12:67:65:06:01:b5:1e:2f:e4:ce:61:5d:
16:1b:75:86:5d:e3:a3:22:7d:88:59:c5:39:ca:1f:
aa:ba:85:cc:8e:0f:35:3b:54:28:6f:e1:ee:b0:be:
a8:57:2e:04:fa:ea:84:c6:1d:c4:a4:6c:f0:91:33:
6f:bf:8d:98:1e:c1:f7:33:05:f6:80:53:72:e4:b6:
e4:d7:18:20:b3:06:4d:8d:59:23:c1:e7:83:24:c6:
52:c3:bd:d6:0d:a3:0d:b5:e2:dc:e1:cb:c6:26:bd:
9e:f2:c8:32:0e:8d:f0:01:ed:9d:fc:91:f7:ed:ca:
5a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:61:F0:46:64:03:9D:FC:3A:F2:9F:A7:CD:17:27:77:ED:4D:63:4E
X509v3 Authority Key Identifier:
keyid:60:28:E7:06:52:06:A9:E4:5F:FD:4B:24:A5:7E:E8:C3:34:0C:57:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/YCjnBlIGqeRf_UskpX7owzQMVzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCjnBlIGqeRf_UskpX7owzQMVzY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149FAB/9CD184B2373011EC93B59B1BC4F9AE02/1DBE0F704A7311EFA9D30136C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.79.0/24
Signature Algorithm: sha256WithRSAEncryption
11:98:ce:2c:b9:fb:ca:6d:7c:c1:71:17:4d:05:9d:b9:fe:22:
cd:1e:58:c7:20:9d:6a:bb:96:00:b6:ed:64:64:75:e5:ff:1e:
6f:82:bb:b0:ba:0b:fe:6b:ac:18:1e:a8:0b:e7:9f:fe:9b:23:
c0:ed:e1:fb:53:71:92:c5:9c:e9:01:0d:49:25:31:78:81:03:
53:98:07:e2:33:08:07:26:2f:a2:21:6c:32:de:c1:56:ca:b4:
e0:13:65:b5:04:fb:a9:47:ad:86:c6:23:bc:d5:7e:98:60:b6:
04:72:17:aa:f3:f1:92:d7:97:f3:73:6f:fb:64:9e:51:b9:31:
8a:27:42:fc:99:5b:c9:dd:1d:7d:7d:d3:b8:62:eb:34:78:09:
b6:62:89:31:eb:c5:d2:fb:24:96:63:c2:59:9f:70:c5:29:6a:
46:6a:ad:03:9c:08:ee:ba:4a:57:ad:21:4a:1a:da:e2:5a:b6:
f4:45:f7:32:6e:50:7c:23:ff:29:56:a2:92:ac:df:20:57:72:
98:40:19:93:74:41:11:80:cc:88:58:8a:e8:2f:66:7c:7e:52:
73:ac:ba:40:da:8c:ee:a7:45:4c:3d:90:1f:e0:dd:4b:a0:7b:
42:4a:15:6d:70:3f:44:7a:f6:cf:df:1a:ba:44:b7:97:5c:b4:
19:28:5f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:21 2025 by rpki-client