Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/5DA6319C3B4011EDB614AF09C4F9AE02.roa
File: 5DA6319C3B4011EDB614AF09C4F9AE02.roa (raw, json)
Hash identifier: 2saRrOlG1LlWhmDBFuLU3MkOf5/E3rq4Nk2GeAg9Uv0=
Subject key identifier: 3F:BB:C0:3F:7B:74:04:A1:65:DA:EB:1E:65:5E:B0:CF:76:E6:C6:AF
Certificate issuer: /CN=A91BAD56/serialNumber=1EECA03A77652B9070B5E133809A223830C89CF9
Certificate serial: 91
Authority key identifier: 1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/5DA6319C3B4011EDB614AF09C4F9AE02.roa
Signing time: Sun 11 Dec 2022 06:14:42 +0000
ROA not before: Sun 11 Dec 2022 06:14:41 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 135097
IP address blocks: 103.176.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 145 (0x91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAD56
Validity
Not Before: Dec 11 06:14:41 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63957551-b8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2d:9c:c4:64:65:32:0d:c3:1f:38:f8:89:60:
9e:5e:32:ab:0d:78:85:7d:16:e0:c1:11:5f:8a:12:
c9:8d:49:cd:08:96:13:af:cf:99:ba:79:73:63:87:
d7:3d:cb:eb:f2:7c:de:d7:56:71:67:10:8d:93:b4:
cf:31:ee:38:6d:ad:05:6c:ee:12:7c:b3:a7:34:cd:
31:c3:59:00:64:b8:a8:b7:d6:92:6b:64:c5:15:c3:
5d:04:2e:81:b5:49:77:3b:8e:86:fb:c6:bc:de:12:
cd:d5:47:8c:15:61:f9:66:f1:bd:5d:7f:ed:a7:f7:
bd:c0:c0:6b:0c:1a:b7:40:27:c8:f6:d0:62:ea:fe:
cd:a1:f0:fe:59:41:66:3a:f7:b3:56:4d:f5:8b:6a:
be:ba:ff:b7:22:04:8b:88:7d:fb:bc:cd:71:a1:59:
ba:a9:51:63:97:45:db:cf:eb:ab:c5:82:0b:2f:10:
8c:1c:0b:e0:48:f5:a7:42:c9:30:26:f5:0b:99:a2:
0e:4e:be:66:f2:80:ea:1a:d0:9d:9b:5f:a3:c6:af:
5e:7e:b7:78:df:58:d3:bc:35:96:2d:24:c0:9e:fa:
19:1e:e7:f7:87:53:45:eb:0a:83:2f:db:c3:8d:0b:
6b:ea:5c:ff:61:55:e3:d0:52:52:12:10:2b:9f:25:
5a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BB:C0:3F:7B:74:04:A1:65:DA:EB:1E:65:5E:B0:CF:76:E6:C6:AF
X509v3 Authority Key Identifier:
keyid:1E:EC:A0:3A:77:65:2B:90:70:B5:E1:33:80:9A:22:38:30:C8:9C:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/HuygOndlK5BwteEzgJoiODDInPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HuygOndlK5BwteEzgJoiODDInPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAD56/818B4D021AAE11ED9B74AE51C4F9AE02/5DA6319C3B4011EDB614AF09C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.176.91.0/24
Signature Algorithm: sha256WithRSAEncryption
00:fd:54:83:5b:54:52:c3:73:4f:ff:6a:73:32:56:9a:50:a9:
80:60:4b:d9:48:d7:36:b9:3a:73:63:56:99:4f:02:91:35:5d:
37:91:e2:18:49:c6:08:4a:fc:7d:e5:19:27:00:2d:5c:10:82:
e8:82:ae:fc:66:56:ab:15:2e:0b:a9:4f:2b:c0:89:24:a5:8b:
4e:85:99:f2:0e:a3:dc:e0:42:73:9f:53:b8:7b:f5:16:91:8d:
6f:bf:f7:57:eb:89:4c:dd:2f:fe:fe:2b:8f:63:15:62:77:1d:
47:f1:e6:00:2d:1c:a2:ab:fc:80:85:72:3d:60:22:e1:56:db:
f2:3c:e3:9c:57:04:9d:38:b1:c9:1a:43:23:a6:f3:ca:28:b5:
c6:33:9c:54:62:d5:ce:4e:73:1a:7c:89:bb:18:ea:fc:88:79:
92:4b:6f:a3:6c:8f:f6:55:6d:e5:8b:db:b2:cb:41:1b:f4:3a:
06:d5:62:78:f5:62:6e:33:41:d7:e1:9f:e8:20:2f:89:7b:7e:
e9:d6:98:31:89:8c:dd:06:86:06:f8:81:b0:8b:2b:8a:0d:c6:
44:b8:fc:40:8e:ab:c3:65:28:b7:91:46:14:45:da:a6:41:a1:
23:ff:b8:83:51:54:b0:5e:5a:e4:20:e1:2d:fd:6e:b4:fe:ae:
84:a4:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:49:55 2025 by rpki-client