Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/978A092C035211ED9C394C61C4F9AE02.roa
File: 978A092C035211ED9C394C61C4F9AE02.roa (raw, json)
Hash identifier: Vuus6rcg431ALgEvkCsCfgT1Y0eVG4ZqiyTY7KhG6gU=
Subject key identifier: 51:AC:13:C3:2C:8D:BB:77:23:76:77:C8:59:1B:8D:C3:C7:64:6A:BE
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: A8
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/978A092C035211ED9C394C61C4F9AE02.roa
Signing time: Thu 14 Jul 2022 08:54:39 +0000
ROA not before: Thu 14 Jul 2022 08:54:39 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 9833
IP address blocks: 103.103.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168 (0xa8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B
Validity
Not Before: Jul 14 08:54:39 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=62cfd9ce-83a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:7e:f4:30:00:e0:96:61:6a:e7:43:f8:ee:
de:c6:5f:de:47:b6:df:33:1f:3f:ad:e1:86:f5:cf:
f1:ab:f5:d8:19:2f:70:24:2d:56:63:79:03:66:02:
5e:45:cc:84:44:3e:fb:79:a6:5e:4d:1d:0c:48:57:
68:3d:3f:ce:a9:41:18:44:0e:4c:15:99:1c:05:fb:
02:ef:ec:5c:7c:3f:8f:da:a0:8b:31:ee:7b:0e:29:
46:0b:0d:75:8f:6e:8e:0c:06:45:7c:47:78:ac:6c:
ba:1f:c2:7b:49:f1:7b:44:a4:52:8a:1e:3e:f7:e2:
3f:f7:0e:c7:51:c1:a2:a0:4f:58:fb:7a:30:b7:c2:
9f:fc:ee:81:bb:b8:eb:d3:8e:8b:d0:ef:cf:9f:9b:
e3:e3:d1:aa:ac:ea:8c:2d:89:e6:b3:c6:b7:65:dd:
41:24:1f:cf:94:be:fd:93:a6:58:3c:21:e7:83:ab:
d3:7b:52:17:2f:de:98:71:05:8b:14:86:ef:95:86:
2a:0e:d6:aa:97:90:4f:15:03:ee:55:0d:f0:24:93:
2e:2d:2a:da:1d:5b:fa:b1:cf:4c:3b:ed:e8:a5:32:
9b:67:11:29:b5:16:07:c0:5b:f7:24:0b:a1:0b:47:
1c:bf:ba:9c:08:23:09:f0:92:57:7e:4e:0e:67:fe:
b9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AC:13:C3:2C:8D:BB:77:23:76:77:C8:59:1B:8D:C3:C7:64:6A:BE
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/978A092C035211ED9C394C61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.244.0/24
Signature Algorithm: sha256WithRSAEncryption
94:12:90:52:df:39:f0:71:0e:80:76:99:76:09:9d:16:e6:8e:
fc:e9:05:3a:15:ab:05:cc:82:b2:90:e6:40:3e:74:44:4f:25:
8e:42:89:fc:01:02:fc:c7:02:d1:df:3a:a6:0f:f7:60:9b:f1:
d9:1a:03:7b:4c:c6:c8:4d:33:83:b0:23:3c:67:f8:82:1b:cc:
d1:f1:33:4e:c2:3d:f8:39:5a:91:85:d6:25:90:4c:54:11:1b:
4c:12:1d:4c:a9:47:9c:07:47:80:c1:43:52:2c:d0:84:29:5e:
76:6b:f4:a0:85:a6:a7:e4:76:37:78:1f:d3:ae:2e:98:c1:22:
e1:b0:65:42:87:56:0b:b1:23:f1:32:7b:7d:b1:91:a2:79:27:
79:ed:b0:24:b6:e1:74:2d:cd:fd:cd:d3:c4:a8:00:a7:ac:5e:
3d:8b:80:06:9d:af:6b:cc:f3:53:6e:49:16:b4:50:a2:27:49:
e8:aa:c1:29:10:1b:e2:ff:a2:7b:5d:76:65:48:21:5a:b6:8d:
83:25:9a:2f:89:ed:64:8b:72:85:fc:4b:57:9d:9f:bf:8c:1b:
81:90:4e:15:6b:50:85:ae:85:8f:5b:ce:2f:b2:e2:29:c3:76:
e2:96:8d:5d:ec:1e:fe:ea:93:b0:c4:60:22:86:99:8b:80:ee:
88:84:2a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:08 2025 by rpki-client