Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/BE23528623A111EDB57D9C75C4F9AE02.roa
File: BE23528623A111EDB57D9C75C4F9AE02.roa (raw, json)
Hash identifier: z4jeRGr6XeDxWNWKE7hGDinlvG6zWtjDYOMptNIwgVw=
Subject key identifier: 66:4C:C0:4D:BA:79:8B:D5:25:A3:81:EC:40:AF:48:5B:47:4E:BD:24
Certificate issuer: /CN=A91A7761/serialNumber=51D5CC2D5E428FC955149F576211904F05BAF211
Certificate serial: 0398
Authority key identifier: 51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/BE23528623A111EDB57D9C75C4F9AE02.roa
Signing time: Wed 24 Aug 2022 11:41:51 +0000
ROA not before: Wed 24 Aug 2022 11:41:51 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 203945
IP address blocks: 103.97.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 920 (0x398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A7761
Validity
Not Before: Aug 24 11:41:51 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=63060e7e-1c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:fd:00:c0:86:59:59:d7:80:b2:69:77:47:
df:7e:6a:53:05:1b:d7:61:62:9f:c4:79:40:dd:35:
70:88:35:e2:20:62:ce:da:1d:6d:9b:2f:73:0a:21:
3b:57:7b:85:72:72:53:76:23:91:84:17:67:4a:7e:
99:9f:0d:e7:4d:c0:51:bb:7e:4c:d4:e7:b1:da:b1:
96:7a:33:2e:20:c4:3b:b9:ec:57:f3:3f:31:ae:13:
95:46:7e:5c:61:e4:4d:a3:66:d5:19:0f:c6:7b:a3:
8c:c9:f2:55:c1:21:d2:de:02:b3:1b:c5:3a:b2:4a:
2c:18:d1:5e:7a:b3:33:7e:bb:32:66:47:14:eb:f6:
83:ae:41:92:5c:86:52:dc:3c:e6:99:63:94:a8:56:
f7:d5:ca:0c:7a:91:db:e6:79:32:66:5a:9b:b0:b9:
88:36:69:64:b8:8e:5b:50:10:c2:f7:aa:df:0d:b4:
cd:49:46:b8:d6:d4:54:ce:f2:47:64:ff:36:9a:83:
e2:cc:19:8a:31:a9:c0:c3:5a:e4:82:b3:97:3d:b5:
af:24:73:54:47:5a:54:76:72:93:d5:1f:61:f0:f5:
af:87:a5:ae:90:b5:54:3b:61:b5:5b:ed:9b:01:f8:
e3:44:ab:72:4f:27:87:b5:88:3b:ef:fc:37:d3:cf:
e5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4C:C0:4D:BA:79:8B:D5:25:A3:81:EC:40:AF:48:5B:47:4E:BD:24
X509v3 Authority Key Identifier:
keyid:51:D5:CC:2D:5E:42:8F:C9:55:14:9F:57:62:11:90:4F:05:BA:F2:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdXMLV5Cj8lVFJ9XYhGQTwW68hE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7761/0E4B9168BD3411EB90E55428C4F9AE02/BE23528623A111EDB57D9C75C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.97.175.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9c:00:e2:b3:81:0e:c2:bf:01:6c:0f:6b:eb:b2:9c:2d:0d:
96:2a:66:a8:9f:58:0e:97:15:28:15:e5:1a:3f:20:9f:2d:a9:
27:63:5f:67:53:9b:40:c3:2d:fb:b4:08:dc:5e:e2:66:3f:a1:
ac:ff:30:85:90:87:94:73:f1:c8:e4:3a:a4:e2:84:56:14:84:
a9:84:c0:3f:df:11:7d:51:7b:12:be:3f:3a:fe:62:ad:ba:3b:
cb:0d:0f:d7:b3:70:90:c9:3b:0e:4d:b9:57:30:fd:24:5c:e3:
de:a4:6d:f4:bc:39:14:db:7e:9a:ee:75:67:55:26:61:cd:80:
d6:72:6c:00:e9:08:50:52:9b:7e:fe:99:00:07:71:87:c3:c4:
f1:a9:fd:0d:d6:49:02:e4:28:fc:a1:65:47:29:b0:80:d7:86:
66:22:e1:9d:fe:4d:cb:91:ba:19:5f:41:8f:e9:c3:dc:7e:29:
60:f6:e2:cc:79:31:b5:c6:de:38:bf:8b:79:37:f3:71:da:ff:
0a:95:b7:fd:f9:44:28:24:13:49:1c:61:c1:d6:ce:e2:a5:fb:
b4:ad:5c:95:79:c3:0d:fa:cc:28:08:0d:ff:6f:24:0a:e8:e5:
07:86:25:50:6e:2d:9a:13:af:c3:da:2e:ee:02:ec:25:27:b1:
d9:e3:ff:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:49:54 2025 by rpki-client