Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/962D5298E8F011EE82E66486C4F9AE02.roa
File: 962D5298E8F011EE82E66486C4F9AE02.roa (raw, json)
Hash identifier: NIJw/8ENIdZYhglZZ4s+wQI9cUnf38iElPgpfIV1jaM=
Subject key identifier: ED:91:DA:F2:AE:BB:A4:C5:D6:ED:DA:96:99:AA:88:3A:95:52:EC:29
Certificate issuer: /CN=A919DFFA/serialNumber=83F1FFE9D334E87FF4CD7558DDEF352FE6DF2069
Certificate serial: 0769
Authority key identifier: 83:F1:FF:E9:D3:34:E8:7F:F4:CD:75:58:DD:EF:35:2F:E6:DF:20:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_H_6dM06H_0zXVY3e81L-bfIGk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/962D5298E8F011EE82E66486C4F9AE02.roa
Signing time: Sat 23 Mar 2024 08:37:30 +0000
ROA not before: Sat 23 Mar 2024 08:37:30 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 139642
IP address blocks: 103.149.130.0/24 maxlen: 24
103.149.131.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1897 (0x769)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919DFFA, serialNumber=83F1FFE9D334E87FF4CD7558DDEF352FE6DF2069
Validity
Not Before: Mar 23 08:37:30 2024 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=65fe94ca-fb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:11:5b:ba:46:91:50:6f:23:0a:f7:dd:d5:
1b:b2:68:2c:17:1f:b0:84:8d:fe:2b:24:cf:86:61:
b0:ca:a0:87:62:2e:2b:a7:ea:74:55:54:1f:29:07:
0d:fc:9c:7a:06:bc:17:9a:4b:02:1a:55:bb:4b:50:
d1:d1:7b:2e:2f:9e:ec:f5:b4:57:5b:6f:47:55:25:
56:42:d8:42:37:60:45:61:b4:9c:17:0b:99:24:39:
0a:d7:ee:1f:1a:b3:8f:fb:72:53:b6:aa:28:50:4a:
2b:49:a1:11:97:65:63:20:d4:2a:a1:0a:18:a9:a1:
27:c8:23:17:bd:ac:e4:65:ef:4b:8a:1e:43:b6:a9:
88:28:66:49:94:7a:a0:a8:b8:d9:d7:19:46:b8:83:
c1:4e:1a:01:e9:ee:dd:16:07:31:e3:78:21:5a:e6:
20:49:7a:01:75:b9:f1:de:d1:04:e5:31:af:86:9b:
13:23:5d:25:55:c6:e5:58:b0:ce:9e:e3:7f:84:73:
26:84:a7:23:53:d6:ee:30:22:b5:10:6e:21:21:42:
ce:ca:79:56:fb:2c:35:66:5b:6c:66:d7:64:b3:be:
90:7e:23:94:cf:b6:0d:52:76:ab:9d:d7:42:14:3d:
07:ff:9a:ff:9e:5d:3f:9d:e6:af:22:c5:72:fe:e8:
45:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:91:DA:F2:AE:BB:A4:C5:D6:ED:DA:96:99:AA:88:3A:95:52:EC:29
X509v3 Authority Key Identifier:
keyid:83:F1:FF:E9:D3:34:E8:7F:F4:CD:75:58:DD:EF:35:2F:E6:DF:20:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/g_H_6dM06H_0zXVY3e81L-bfIGk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g_H_6dM06H_0zXVY3e81L-bfIGk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DFFA/058AB360D0F411EA89F8110FC4F9AE02/962D5298E8F011EE82E66486C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.149.130.0/23
Signature Algorithm: sha256WithRSAEncryption
45:e8:cc:b2:1b:08:bc:18:78:99:52:89:a8:22:61:0c:3e:bb:
3d:72:5f:04:b9:54:81:92:6c:75:fc:08:6d:cb:50:aa:9d:a1:
4f:2c:eb:3d:f6:1c:e9:8e:ba:bb:6b:cc:55:1a:9c:92:a6:9d:
dc:ac:b2:94:d2:27:5b:5c:1e:ed:be:95:78:3b:17:fb:5f:05:
70:0b:04:68:e2:a4:ea:8d:e0:44:af:d9:1d:df:a8:48:aa:b3:
6e:a1:c5:04:3c:c8:8c:24:20:fb:fc:b5:2f:46:4d:5c:59:ae:
92:6e:41:6a:36:d7:94:d1:5b:fa:09:fe:2e:ef:d6:75:11:dc:
3d:a5:26:a7:5a:ee:65:d7:0c:88:e9:a5:18:87:6d:09:41:76:
21:0b:89:20:12:f7:58:51:9e:94:23:54:b7:9e:15:bb:f6:1a:
10:75:a8:41:ab:a0:16:75:59:0d:c3:45:35:31:c7:f4:d9:3e:
7a:83:fb:01:60:c9:81:71:5c:eb:56:97:86:83:ca:c6:59:3f:
ed:fb:b9:67:14:b6:5d:a5:ce:77:39:9c:98:16:7a:82:1a:4a:
8f:13:ac:2d:b2:e1:e4:32:f0:cb:75:43:e1:3f:f4:93:45:94:
8d:cf:f3:cd:ee:62:08:58:df:4c:f6:e1:c7:4f:3d:58:4a:36:
0f:a5:6a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 05:02:44 2025 by rpki-client