Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/9BE584AE112911ECA8903C23C4F9AE02.roa
File: 9BE584AE112911ECA8903C23C4F9AE02.roa (raw, json)
Hash identifier: mhdBhh7g+ksxl2VFVKZhWk+m3DlTBbpHHNY8IJuF6JY=
Subject key identifier: D2:60:BF:54:1E:A9:B3:B3:47:48:F7:C9:B9:E9:D8:B2:54:E9:83:D2
Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial: 02B5
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/9BE584AE112911ECA8903C23C4F9AE02.roa
Signing time: Tue 03 May 2022 14:53:29 +0000
ROA not before: Tue 03 May 2022 14:53:29 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 133551
IP address blocks: 103.97.200.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 693 (0x2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7761
Validity
Not Before: May 3 14:53:29 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=627141e9-10ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:06:76:c4:12:a4:cc:66:4f:84:4d:85:88:cb:
f6:25:cd:bc:f2:12:17:6f:77:ee:4b:79:e5:56:cf:
4f:7a:f1:0c:1f:30:24:f6:4f:cf:18:11:7c:36:b8:
1c:78:4e:3a:02:a0:96:d0:16:04:f7:6c:c6:d7:c4:
db:08:e1:17:ce:f0:8a:33:7d:61:eb:36:b0:e9:56:
50:5c:57:92:14:3a:c9:56:ac:af:21:1c:72:b0:3c:
7e:1a:d3:e4:6f:fd:b6:4d:c5:cc:69:01:ec:5d:e7:
35:2e:79:96:9b:d8:a6:ed:df:4a:37:fb:ee:1f:47:
a2:2d:02:7c:6f:09:02:41:91:9f:b3:7a:ef:45:3e:
da:27:85:4c:93:be:eb:ac:f9:fc:27:cc:91:5a:5e:
09:be:4c:7c:41:ab:2f:69:e2:da:f7:a2:ad:9c:74:
06:cd:ef:ae:bd:b0:32:70:a7:f9:a8:85:82:cb:79:
c5:49:ef:b4:97:02:e4:ea:41:1f:62:96:da:9e:ac:
d6:3b:d0:09:57:2b:e2:60:52:9f:75:46:39:ca:54:
2b:1e:1c:07:15:08:f0:bc:8e:2b:b2:3c:e5:0a:0e:
6a:76:36:2d:54:05:04:2c:2e:45:93:5e:82:69:7c:
fc:e9:99:25:4d:41:98:34:f4:69:99:b6:31:2e:4f:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:60:BF:54:1E:A9:B3:B3:47:48:F7:C9:B9:E9:D8:B2:54:E9:83:D2
X509v3 Authority Key Identifier:
keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/9BE584AE112911ECA8903C23C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.200.0/23
Signature Algorithm: sha256WithRSAEncryption
61:1c:64:7d:5e:04:e8:25:16:08:1a:ae:9e:4f:4c:fa:d4:20:
2a:d3:17:84:e9:1a:8c:0a:64:cb:d3:5f:74:2c:79:30:4a:5a:
27:21:f8:39:e7:99:ed:cc:29:1a:7d:8f:87:3d:53:6c:d0:02:
d0:8c:1b:08:b9:cc:0b:09:dd:5c:70:40:e5:1d:74:52:43:fd:
6a:11:fc:2d:b4:8e:64:f0:c2:ba:1e:5d:a9:2d:92:ca:2a:e0:
cc:9b:a6:38:37:89:bd:64:d0:5f:47:d3:3f:2e:9f:5a:d7:75:
1e:46:9f:e7:d9:df:a3:e0:0e:70:9a:58:e7:f4:aa:d2:8d:09:
73:7c:4a:fd:53:3d:76:d6:76:0e:48:ff:fe:01:e8:6f:65:44:
d8:c2:32:92:c2:eb:67:fb:4d:e1:c9:f5:f4:65:c5:4f:e1:91:
93:2f:26:ad:65:48:2d:b2:fe:18:81:0c:6e:ee:0b:c6:f2:c3:
cb:ee:df:aa:b5:1e:e2:8e:30:8b:5c:86:be:d5:19:1e:b1:47:
3d:12:5e:c5:28:41:1b:68:0d:46:44:73:f7:41:13:a8:f7:41:
96:4e:79:86:ce:10:99:0f:19:a1:7b:82:b6:f3:9b:37:50:b9:
e0:ca:17:f4:6f:2c:dc:b2:87:79:83:8c:5c:48:47:c5:60:fb:
bf:a1:82:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:49:11 2025 by rpki-client