Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/7D7F3266494211ECA6E0E21BC4F9AE02.roa
File: 7D7F3266494211ECA6E0E21BC4F9AE02.roa (raw, json)
Hash identifier: wwu75lqGlLx0j+I2D8XNZORjKybluyJetW+pMN89AZQ=
Subject key identifier: 20:A1:6F:15:25:EB:92:66:07:94:E1:D9:75:E9:6E:4E:EC:48:AF:51
Certificate issuer: /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Certificate serial: 0585
Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/7D7F3266494211ECA6E0E21BC4F9AE02.roa
Signing time: Wed 01 Mar 2023 00:51:04 +0000
ROA not before: Wed 01 Mar 2023 00:51:04 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 2914
IP address blocks: 103.160.100.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1413 (0x585)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Validity
Not Before: Mar 1 00:51:04 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63fea178-b5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f4:28:5e:35:b7:ce:e9:e2:71:89:b4:4b:db:
29:58:87:f5:c2:a5:94:c8:17:7b:76:07:e7:76:35:
83:a6:2d:3e:1a:f3:7c:10:29:2f:b7:36:39:90:f1:
8c:52:b9:d1:82:66:6c:f1:bd:df:53:22:a7:1f:f3:
38:f0:f0:39:5f:4e:d1:88:07:15:5b:07:26:db:85:
22:b3:10:ce:f5:2a:26:5a:5c:88:88:4f:b3:72:a2:
b8:d2:16:e8:3f:fb:ad:3c:4d:65:48:d4:39:30:00:
69:ae:97:a7:c9:df:9b:70:4a:0b:81:bf:8a:b8:f3:
11:3f:c2:08:79:27:0f:ca:80:4b:28:fb:90:5c:fd:
db:63:02:d8:78:32:00:a2:28:82:56:c0:dd:18:ae:
ed:90:63:ae:58:c9:99:ea:7d:11:23:05:bb:3c:3d:
81:a5:54:fb:44:86:4e:cb:f5:12:fb:5c:68:31:0f:
90:52:52:d5:ed:de:4a:26:6d:69:16:d6:5d:f6:82:
ac:4c:75:92:71:5f:b4:ab:f1:6f:6d:be:d8:b5:36:
17:87:8f:c8:95:ae:99:62:4b:a1:93:d1:f3:b6:f7:
7d:e9:1d:ec:e2:ec:9f:c1:98:70:ae:f4:31:65:fa:
0c:ce:3f:f1:cc:5e:0d:43:09:ba:6a:d6:c2:ca:a4:
ec:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A1:6F:15:25:EB:92:66:07:94:E1:D9:75:E9:6E:4E:EC:48:AF:51
X509v3 Authority Key Identifier:
keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/7D7F3266494211ECA6E0E21BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.160.100.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:e1:9f:ee:6e:cb:b5:a6:4e:5d:87:18:5f:42:0a:3e:07:86:
82:42:d0:db:1a:fa:b0:4a:88:b2:63:00:10:eb:1d:2e:96:25:
d7:60:bf:c1:83:d7:3d:f3:6f:1c:34:69:63:e3:62:fc:ed:95:
86:cd:94:2f:05:46:f9:e5:4a:34:50:3f:cb:48:ed:a5:aa:72:
ca:35:90:70:04:7c:8c:e8:0d:55:3e:15:f7:5f:3f:0e:24:ef:
e7:b4:d9:02:be:5a:a0:f8:7f:c3:59:d8:11:05:19:c8:b2:eb:
68:17:07:a2:70:d1:cb:fe:29:5f:c5:9d:ac:8a:99:49:40:ab:
b1:65:9a:0b:3b:6a:78:98:74:ba:eb:d4:70:e2:1a:fb:d7:69:
95:5b:17:de:4d:d4:8d:3a:e3:1b:f5:33:db:de:bc:f8:c8:aa:
b7:a1:a6:b0:e5:52:69:8b:38:11:93:56:91:d6:bb:d4:72:93:
e3:82:f3:2e:d9:b5:0e:59:cf:f7:07:1c:0c:f3:84:52:a5:a7:
ff:c2:88:9f:44:90:7b:d6:f4:45:82:9d:e7:5b:85:15:47:36:
86:b2:dc:78:c4:ff:ac:95:bc:98:bd:7a:04:9d:b5:4f:2a:78:
a5:b9:a6:e4:57:93:c7:94:5a:c2:63:5a:2c:5d:af:3f:0a:bb:
96:d6:e9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:14:41 2025 by rpki-client