Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/4B929D4EF90911EB936B6086C4F9AE02.roa
File: 4B929D4EF90911EB936B6086C4F9AE02.roa (raw, json)
Hash identifier: 9jLyT3I2nez7M2KwO38IS8+H7YG5hwiG0iu5cRtJJwg=
Subject key identifier: 7C:57:11:2C:F5:3A:49:2C:3D:5A:0B:E0:9F:5D:B0:72:B9:99:C8:C5
Certificate issuer: /CN=A916F9F6/serialNumber=14E5163867106FCE4552AEECFB1F202661E6DF5D
Certificate serial: 014D
Authority key identifier: 14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/4B929D4EF90911EB936B6086C4F9AE02.roa
Signing time: Mon 09 Aug 2021 11:59:48 +0000
ROA not before: Mon 09 Aug 2021 11:59:48 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 3786
IP address blocks: 103.151.229.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 333 (0x14d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916F9F6
Validity
Not Before: Aug 9 11:59:48 2021 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=611118b4-c6f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:03:a8:9e:64:b1:97:b1:b0:2f:61:26:1a:74:
0e:9d:ec:46:6e:c9:12:b6:5d:12:57:7f:17:71:d9:
ae:ac:1d:4b:58:e0:8d:94:91:8c:c0:c7:e9:32:5e:
1b:f6:77:bd:b7:1c:9c:4f:19:e4:1b:9c:4c:32:d2:
a0:2d:09:1c:ae:1e:2b:48:e2:3c:38:ac:2b:37:fa:
a7:39:6d:1d:e0:b4:55:ba:6c:a1:61:05:1a:e1:1d:
2b:f3:b7:9e:0a:0a:69:9a:9f:c0:2d:30:78:76:cd:
98:f7:ec:46:af:61:bf:89:81:5e:27:2c:59:de:a4:
f4:c5:d9:06:21:2e:c3:fa:95:a3:8c:c8:d0:6d:0a:
d1:ff:09:63:d6:14:36:89:53:d0:f2:13:e3:32:55:
23:b3:00:4f:97:af:fc:d1:45:87:17:1c:08:7e:57:
24:ec:db:cc:29:d1:25:67:f9:8f:83:ac:df:e1:1e:
b8:f3:1a:40:63:76:c7:62:09:c1:27:5d:ff:6b:1d:
e5:9d:3f:5c:db:cc:5b:6f:19:1f:b3:d2:73:0b:2e:
8d:7b:69:7f:9d:bc:10:23:46:d4:63:a3:fe:76:db:
b9:e5:be:cb:2d:3f:20:06:d5:37:50:d1:31:d9:65:
16:6d:bb:4b:67:db:22:ac:e1:b9:9f:68:1e:9f:ca:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:57:11:2C:F5:3A:49:2C:3D:5A:0B:E0:9F:5D:B0:72:B9:99:C8:C5
X509v3 Authority Key Identifier:
keyid:14:E5:16:38:67:10:6F:CE:45:52:AE:EC:FB:1F:20:26:61:E6:DF:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/FOUWOGcQb85FUq7s-x8gJmHm310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FOUWOGcQb85FUq7s-x8gJmHm310.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F9F6/F655F7F67A6711EBBCF76C6FC4F9AE02/4B929D4EF90911EB936B6086C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.229.0/24
Signature Algorithm: sha256WithRSAEncryption
28:37:b6:72:9a:5e:5e:1d:70:8d:51:1e:1e:46:b3:3a:34:b4:
dd:95:11:18:46:30:d3:9f:81:bb:da:a9:af:de:85:87:b5:79:
00:13:a3:c6:f2:b6:79:71:1e:02:29:b9:3d:ea:28:ca:3f:67:
e5:8b:94:d2:f1:fe:af:ea:bc:dd:d4:b2:d2:b6:44:e2:d6:0b:
02:26:4d:cd:f6:c7:78:23:60:4f:94:30:0e:5f:39:82:e6:2e:
4c:4b:62:b6:d8:94:c4:37:d0:33:cb:e6:26:e2:05:fe:c2:21:
c9:8b:b0:7a:8e:56:b4:b3:64:ce:18:75:f9:0a:f3:42:70:c4:
f9:8c:4a:51:6d:36:91:8c:18:f2:e4:f3:5f:8b:67:d4:0e:a9:
10:ee:0c:fa:5d:cc:7c:44:49:e4:72:70:10:95:37:ed:14:10:
40:09:d7:ec:98:82:a5:ea:16:1d:5f:fd:6c:00:dd:ba:ac:37:
6c:a9:38:e2:f0:fe:2a:4e:cd:86:11:11:f5:e5:c1:72:13:f5:
6c:d0:8d:66:0c:89:e0:ac:b4:ae:bc:59:a4:12:c6:72:22:49:
63:5b:f2:c2:cd:8a:bf:b0:5d:2c:d0:41:90:76:66:56:2d:ba:
77:e0:38:35:3b:31:99:3a:bd:5b:d3:90:89:6f:3a:f0:aa:44:
0e:60:e9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:07 2025 by rpki-client