Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/FB330050C1FD11ECBDBE441FC4F9AE02.roa
File: FB330050C1FD11ECBDBE441FC4F9AE02.roa (raw, json)
Hash identifier: AOwdp7+86oldKj+9SF008+HgaxOKBsiv+k0WnipKHcE=
Subject key identifier: A6:57:1C:41:CC:3D:7A:B9:32:96:65:F2:9B:08:FA:59:CA:84:22:3E
Certificate issuer: /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial: 03
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/FB330050C1FD11ECBDBE441FC4F9AE02.roa
Signing time: Fri 22 Apr 2022 05:35:13 +0000
ROA not before: Fri 22 Apr 2022 05:35:13 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 9331
IP address blocks: 103.103.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916557B
Validity
Not Before: Apr 22 05:35:13 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=62623e91-0925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:29:75:04:4f:e6:dd:8d:fd:e1:6a:7a:4e:
5f:62:6d:f0:cc:38:0d:c3:0c:f7:42:82:bc:a4:ce:
ed:a8:fa:81:7f:0a:0f:63:33:6a:e7:52:5d:3d:3d:
6a:a1:33:47:80:e4:48:cb:7e:73:bc:1b:bf:16:fa:
7b:33:b8:24:d0:2e:97:e0:e2:ad:17:ed:21:79:23:
8f:47:cf:84:b1:b7:82:ae:54:96:1f:57:18:57:11:
fd:6f:3a:46:1e:16:47:c4:91:0d:3e:88:f8:c3:08:
8a:21:90:42:c0:d9:ac:69:f7:62:a2:2c:72:b3:21:
d4:4a:c5:00:2c:28:09:18:c6:40:8b:d4:68:f7:e2:
66:71:1c:14:75:9c:7f:b3:00:94:07:0e:60:4d:48:
69:04:e3:27:b9:90:c5:61:61:2e:b6:85:da:f7:d6:
5e:18:a5:4d:35:62:cd:20:4f:cd:e9:b5:d2:a1:69:
bd:27:a1:8c:7f:0c:8c:bb:14:19:5e:ad:42:c6:24:
71:21:79:fc:a5:41:4a:a3:63:ef:d9:2e:66:44:b8:
2c:30:7a:0f:e4:53:c8:60:fd:a4:5a:fd:27:be:2a:
c6:66:aa:69:76:1d:49:f4:bc:9b:44:d9:bc:99:8a:
7e:2d:c4:67:ba:56:68:df:ea:69:3e:11:db:ce:45:
1e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:57:1C:41:CC:3D:7A:B9:32:96:65:F2:9B:08:FA:59:CA:84:22:3E
X509v3 Authority Key Identifier:
keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/FB330050C1FD11ECBDBE441FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.244.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4f:5c:bf:6d:30:29:7a:38:ef:67:19:dd:f1:ff:de:fe:58:
16:4a:df:cd:93:cd:c9:a2:27:3f:25:97:27:fd:d3:57:b3:5b:
cd:62:d5:a8:6b:be:c9:af:96:05:ed:8a:14:46:2c:2c:46:4f:
eb:f0:c5:57:13:df:88:40:9d:e5:b3:c8:c9:65:96:75:21:14:
59:c0:b6:09:00:91:e4:83:be:de:02:16:75:77:49:0b:e3:bb:
ea:35:7a:b3:9d:fc:67:4e:09:fc:4c:5b:d6:ba:dd:8d:f4:fb:
de:68:09:67:c3:99:f6:25:86:af:a1:67:90:cd:40:2b:47:37:
95:9e:8b:2e:cc:3c:b1:7b:8d:ca:55:d0:ee:63:80:b2:97:16:
bb:33:e4:87:eb:fd:90:97:cf:af:49:1e:b1:91:e1:b5:ca:76:
ba:7c:55:c2:05:95:16:a5:26:28:9b:67:fd:ed:24:18:19:2c:
20:84:d6:c1:26:c7:dd:55:16:5e:bb:5a:9c:b6:3e:da:0d:5f:
d3:44:27:c5:0d:51:2d:72:97:f7:ca:5a:42:53:cc:13:c2:74:
77:c3:f4:7f:ad:77:83:1e:aa:14:13:a8:dd:a8:4b:13:91:f0:
c2:65:52:6e:df:2d:de:e5:c2:c3:5a:65:42:ba:fd:e6:5d:d3:
52:50:da:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:36 2025 by rpki-client