Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B7225A2E04CE11EC870C414DC4F9AE02.roa
File: B7225A2E04CE11EC870C414DC4F9AE02.roa (raw, json)
Hash identifier: tXyyN9DWByQTiomAdkVxThPQfO2ov/ik/PEPme11La0=
Subject key identifier: C9:22:3E:43:5B:0A:83:25:17:A2:52:33:F0:23:EA:0F:02:89:2C:3B
Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial: 3E6C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B7225A2E04CE11EC870C414DC4F9AE02.roa
Signing time: Tue 12 Sep 2023 02:41:25 +0000
ROA not before: Tue 12 Sep 2023 02:41:25 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 135921
IP address blocks: 103.45.232.0/22 maxlen: 24
103.69.188.0/22 maxlen: 22
103.98.148.0/22 maxlen: 22
2407:f1c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15980 (0x3e6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A560A
Validity
Not Before: Sep 12 02:41:25 2023 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=64ffcfd5-b4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c8:b5:d8:21:f4:06:15:4b:85:c2:70:8a:c6:
47:ef:fe:1c:7a:cd:06:f0:1d:e0:9c:c8:42:e8:fa:
45:71:d6:53:a9:5f:87:db:97:80:52:50:bb:21:6b:
1b:d2:15:00:8e:70:0c:94:a9:22:55:3c:b4:8d:99:
77:e1:72:f1:af:f8:a9:da:27:1d:94:93:30:52:98:
d7:23:2f:e3:85:a5:5c:a9:81:eb:cc:d7:55:b8:c5:
33:4e:b4:6e:09:76:cc:4a:39:f1:33:16:3c:da:5f:
cd:81:a7:ff:23:29:56:8b:7c:24:9f:dc:bb:e3:a6:
5d:d4:a8:48:13:cc:3e:a2:d5:5f:bc:0a:f3:d3:5a:
10:7e:bb:23:a5:82:cd:90:51:65:d7:87:4b:40:31:
8b:23:73:dd:d6:d3:ef:fd:60:28:22:56:fa:f0:49:
dc:73:85:6d:19:47:31:3a:21:a2:85:94:43:9a:cf:
2e:c6:ef:e2:a8:ed:48:3b:e1:2a:bd:41:b6:20:bc:
16:b5:24:c0:f6:18:00:c1:6e:c9:e1:3c:ac:35:4b:
42:08:e2:a3:fa:fa:fe:88:a3:49:47:ca:e0:15:c8:
f0:ce:48:e6:29:7b:f0:ee:71:70:fb:2d:05:8b:1d:
2d:5e:09:13:77:7e:51:17:70:dd:b9:77:35:db:c2:
b8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:22:3E:43:5B:0A:83:25:17:A2:52:33:F0:23:EA:0F:02:89:2C:3B
X509v3 Authority Key Identifier:
keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/B7225A2E04CE11EC870C414DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.45.232.0/22
103.69.188.0/22
103.98.148.0/22
IPv6:
2407:f1c0::/48
Signature Algorithm: sha256WithRSAEncryption
20:58:3e:47:82:18:90:b0:49:07:95:57:e9:1f:1c:c8:ee:dc:
7b:c9:8c:04:80:12:d8:a5:4a:20:3c:de:70:b3:4d:1b:7f:5e:
13:e7:97:f5:7f:db:05:98:9e:a7:db:63:d4:27:f6:d3:5b:18:
29:65:91:08:52:82:7e:89:95:29:ba:f1:d5:5e:5a:59:ca:f4:
d7:74:f4:b5:cb:59:a1:e3:07:8a:68:ae:93:15:e7:47:79:da:
25:c4:1f:30:b1:be:ef:49:9b:d9:b7:f2:bf:aa:ec:3e:43:d2:
e6:4e:ad:55:c9:76:ad:67:64:8d:4e:bd:ba:1e:69:7a:bb:43:
a4:9f:cc:bd:35:66:e4:6b:16:bf:ed:db:8e:7a:cd:49:3a:23:
e4:b2:25:a7:2d:08:cd:46:67:be:87:00:89:36:10:06:f5:5c:
f0:56:c5:d5:60:fb:53:0c:5f:ba:49:82:3f:00:55:44:a6:64:
17:a0:ac:8d:8e:9f:3e:ca:77:0d:df:51:20:7d:82:f6:f3:6a:
06:6e:d5:30:5a:a9:13:e7:56:e7:0e:1f:11:00:01:24:f4:1e:
c1:c3:95:95:3c:57:af:fc:d4:7f:f9:51:21:75:12:70:c3:21:
48:7b:4a:4c:5e:1c:11:fd:8f:75:a0:92:48:cb:2b:f1:14:21:
09:a9:c3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:21:00 2025 by rpki-client