Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A108A310682711EEAF0F2B0EC4F9AE02.roa
File: A108A310682711EEAF0F2B0EC4F9AE02.roa (raw, json)
Hash identifier: nUmZOGmDy0/0cMkfbFg1Osy5Q1YwcXcVfrWprMnZ5qA=
Subject key identifier: F2:7F:D2:F7:EF:5F:1E:01:E0:2E:CE:70:03:51:FE:D8:D5:EE:81:A4
Certificate issuer: /CN=A919EC2D/serialNumber=48BFD80819AF17FBC0875E6206F02822A7B04E98
Certificate serial: 03
Authority key identifier: 48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A108A310682711EEAF0F2B0EC4F9AE02.roa
Signing time: Wed 11 Oct 2023 11:16:31 +0000
ROA not before: Wed 11 Oct 2023 11:16:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142300
IP address blocks: 103.188.92.0/24 maxlen: 24
103.188.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919EC2D
Validity
Not Before: Oct 11 11:16:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6526840f-0ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1b:c9:77:2e:5a:d2:8b:75:d3:32:aa:42:82:
94:bf:68:e3:b0:89:1c:2f:8a:54:76:04:f7:b4:77:
60:4f:d7:2b:2b:a0:73:e5:54:91:af:11:aa:1b:59:
2a:f4:ed:21:49:f9:b6:08:4f:23:d0:62:20:7c:ce:
d1:c6:ac:be:15:3e:9d:17:7b:71:99:c0:02:66:c4:
2e:bb:de:9d:e6:0c:ec:cb:b5:66:57:8a:ae:38:17:
a8:73:2e:08:df:dd:1d:ff:06:dc:f2:ef:2c:b2:0c:
7d:33:db:e5:dd:30:0d:2b:7e:14:9d:05:d4:55:fd:
86:df:69:69:21:04:dd:6d:cc:26:50:eb:e7:c0:a4:
d0:5b:c9:6b:ed:0c:4e:22:61:cf:33:65:5d:cb:02:
f9:0c:0a:96:cf:80:d8:50:70:d6:d2:ee:81:ad:d4:
9b:0b:4f:c5:65:96:fe:59:eb:03:f6:f6:72:d7:00:
89:12:8d:ce:4d:88:ea:09:96:1e:80:be:8f:3a:94:
60:ce:79:dc:5c:99:3d:81:da:77:aa:c0:32:ed:d4:
49:7e:44:5e:ca:d5:1a:71:b3:0d:b5:ea:d8:dd:65:
9c:99:df:19:b7:45:40:b1:85:bb:33:76:47:84:c1:
ae:a3:af:98:f8:d3:10:92:5c:8c:31:fb:6f:ec:df:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7F:D2:F7:EF:5F:1E:01:E0:2E:CE:70:03:51:FE:D8:D5:EE:81:A4
X509v3 Authority Key Identifier:
keyid:48:BF:D8:08:19:AF:17:FB:C0:87:5E:62:06:F0:28:22:A7:B0:4E:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/SL_YCBmvF_vAh15iBvAoIqewTpg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SL_YCBmvF_vAh15iBvAoIqewTpg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/A108A310682711EEAF0F2B0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.188.92.0/23
Signature Algorithm: sha256WithRSAEncryption
11:48:e5:13:0b:a4:a2:3c:02:ce:05:96:e1:ed:4b:df:be:b4:
07:73:12:19:78:a9:11:ca:64:a2:8d:da:b9:15:9e:9f:e0:63:
a3:a3:ac:bb:d6:d9:78:51:50:64:6c:ac:6b:2b:1f:fc:e3:ab:
6f:12:ec:89:26:90:92:42:c8:c4:6b:fc:20:bd:60:ef:a9:cb:
b6:65:a5:dd:26:29:de:8e:39:16:74:2c:83:7a:88:c0:f8:35:
d8:74:b9:3c:90:04:43:fe:d2:b4:76:54:72:9b:53:a7:fa:4e:
bc:21:76:92:27:8b:ed:11:df:5e:55:b2:d2:9c:48:bc:f7:a4:
f0:b4:cc:08:16:74:fc:5e:29:06:4a:48:e7:23:8d:37:5e:42:
2a:fd:dc:65:20:63:27:f5:75:9a:c3:86:39:3f:57:15:e1:51:
b2:16:25:1c:a4:0d:92:df:5c:11:55:98:39:52:69:32:76:20:
31:4e:a3:1b:95:f8:92:5a:a4:83:ac:aa:86:99:73:2b:a5:df:
98:c1:7c:a8:39:42:2d:c7:b9:40:f2:50:4d:ab:b0:0e:5d:09:
10:af:e5:53:b1:5b:b0:de:ec:ff:0c:e1:76:6b:09:1a:d0:75:
7c:39:56:f8:89:f9:4b:5b:00:a8:d5:2f:61:16:02:7c:d3:1b:
35:0f:71:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:49:58 2025 by rpki-client