Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/0A5C6A123FC411EF93C26D7FC4F9AE02.roa
File: 0A5C6A123FC411EF93C26D7FC4F9AE02.roa (raw, json)
Hash identifier: ZoMtfijRbFKl+LEeUw3fj4a+dSV9bTL7DjN6unuhDJw=
Subject key identifier: E0:23:6B:BF:72:E5:59:6B:85:76:46:6D:13:C9:AA:9C:F4:47:55:33
Certificate issuer: /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial: D1
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/0A5C6A123FC411EF93C26D7FC4F9AE02.roa
Signing time: Sat 31 Aug 2024 06:47:46 +0000
ROA not before: Sat 31 Aug 2024 06:47:46 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 6079
IP address blocks: 103.135.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 209 (0xd1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914E8BF
Validity
Not Before: Aug 31 06:47:46 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=66d2bc92-4745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:27:06:99:19:9b:0f:19:ba:fb:4f:5c:99:
a1:e2:9f:44:b6:31:7a:2f:6b:0b:8a:d9:6a:27:14:
9d:e5:5d:48:05:e7:3a:4e:c1:75:35:77:86:45:67:
25:57:65:0c:6f:74:90:e0:ae:62:6f:90:bb:5c:ef:
7b:81:da:26:c2:53:17:a9:b9:6d:3a:20:bc:a8:41:
cf:77:f4:72:f2:da:2c:8d:59:db:ce:20:50:38:b5:
33:2d:07:79:04:cf:99:62:f0:d3:e6:a9:82:3e:b9:
4d:f0:d9:3d:2c:d8:b6:4f:67:61:37:46:b4:e8:20:
c1:11:c4:3b:6f:9e:a9:4d:45:cd:c5:8e:bc:f7:9c:
eb:8d:1b:98:34:ae:72:fb:32:a6:e0:44:45:94:7d:
aa:6a:27:c1:da:78:5b:79:bb:19:48:e8:a8:e3:95:
93:9f:e3:f1:09:78:8d:7d:16:e5:56:f7:56:9b:65:
4d:d0:ae:95:34:62:bc:56:53:96:24:f6:ff:b1:a0:
5b:4e:5a:ba:87:11:ff:ec:e5:91:d8:d0:c0:d8:16:
94:14:35:f4:ad:f0:f2:9b:c2:76:2d:c0:8e:d0:40:
f4:20:1f:e5:33:df:d6:e9:c1:93:69:86:2a:d0:36:
a5:49:0f:29:16:f5:81:5f:bf:4a:d3:20:81:7a:be:
51:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:6B:BF:72:E5:59:6B:85:76:46:6D:13:C9:AA:9C:F4:47:55:33
X509v3 Authority Key Identifier:
keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/0A5C6A123FC411EF93C26D7FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.44.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ac:2f:ae:80:ef:f8:d0:1d:c3:0f:b0:bf:95:80:f6:b9:27:
a1:da:d6:6a:32:6b:03:c4:34:94:3d:ca:12:50:f1:d7:c5:cc:
7f:77:69:f0:59:f3:03:55:54:5f:fc:16:50:24:d6:f7:2b:10:
37:c2:66:76:ef:02:82:ac:a2:f2:47:ad:49:74:c0:f2:0e:8c:
0b:3b:5d:f4:c9:2a:7b:78:9f:64:c5:27:3c:bc:b9:2c:cf:0c:
80:d2:c2:92:56:23:cc:2e:55:6e:52:f3:4b:79:7b:3e:b9:b2:
4e:41:20:3d:c0:72:4d:b6:19:9d:80:3d:ec:7d:d2:ca:82:55:
4e:df:7f:3d:00:03:be:5e:2e:a4:f0:5a:ed:61:4d:a5:37:44:
fc:50:bf:d4:38:97:c1:31:aa:40:ff:fd:8e:79:23:84:d4:0c:
f9:cb:f7:b1:98:c7:bd:1b:42:7c:40:32:c2:73:16:45:be:7d:
c2:59:38:c9:2a:84:19:99:07:a1:cc:f4:17:63:23:be:24:2a:
4d:e8:28:8e:c6:8b:94:70:7b:af:36:2b:20:c0:3a:d3:a5:1d:
50:38:0f:71:3a:f4:c4:a4:a8:d6:1e:bc:fe:d1:65:75:00:06:
27:76:48:12:f6:67:a4:58:a6:ed:67:25:62:2b:7a:2d:ed:72:
9a:eb:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:46 2025 by rpki-client