Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/D5D78566A88A11EB87649879C4F9AE02.roa
File: D5D78566A88A11EB87649879C4F9AE02.roa (raw, json)
Hash identifier: g2MSlFA8cmsfGsNPizdooJ/cTGQLV76/PF+cfnAdGb8=
Subject key identifier: 78:9C:34:B5:D2:1A:31:A4:FA:E3:22:47:E3:C0:9D:33:3E:AC:9C:7B
Certificate issuer: /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Certificate serial: 12F5
Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/D5D78566A88A11EB87649879C4F9AE02.roa
Signing time: Fri 19 Aug 2022 05:54:09 +0000
ROA not before: Fri 19 Aug 2022 05:54:09 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 132160
IP address blocks: 103.98.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4853 (0x12f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FB434
Validity
Not Before: Aug 19 05:54:09 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62ff2581-d077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:37:03:23:c5:22:f3:e3:91:25:a7:38:bf:
9b:61:cd:46:f3:02:13:a6:f9:21:ed:60:72:fd:77:
ea:f1:50:2a:74:ff:e6:bd:03:17:5e:32:e5:e9:61:
80:3e:ab:53:54:20:17:f0:7a:49:7e:1d:f5:b2:06:
9e:f3:d4:f3:f6:6f:ad:f6:3a:20:17:0a:c6:c4:de:
ba:36:6f:b8:1e:5c:ab:af:3b:fc:0f:87:b7:87:16:
31:eb:37:99:3c:3f:ec:17:c7:0b:a3:54:f8:f3:c4:
99:09:ae:1a:e4:5d:54:d7:6b:88:3e:f2:ec:4e:51:
93:54:c8:6c:58:65:dd:b8:93:2e:d5:eb:c7:80:ea:
2f:d3:aa:63:a5:e4:7a:37:2e:e2:ca:e9:9b:34:3c:
e9:2f:ce:0b:44:17:48:7c:1b:d2:d4:4d:fc:f7:0b:
df:8d:9d:a3:11:d7:80:e3:a2:ea:96:5a:1a:64:ea:
54:d8:50:7f:86:37:c6:a8:72:bc:69:b2:a3:ef:5e:
49:b5:6e:28:dc:bc:fd:06:97:fb:aa:aa:bf:c8:f8:
20:6d:d2:a3:b5:89:49:c1:79:9b:b6:52:77:a7:b1:
87:b0:c2:a5:3d:0b:f1:59:d4:0d:2b:06:8c:38:55:
cf:4c:16:6c:2a:60:5a:b2:9f:a8:a6:b9:52:50:e7:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9C:34:B5:D2:1A:31:A4:FA:E3:22:47:E3:C0:9D:33:3E:AC:9C:7B
X509v3 Authority Key Identifier:
keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/D5D78566A88A11EB87649879C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.98.52.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e3:18:33:11:e4:1a:2c:58:e8:d0:c4:cc:a5:9c:b7:40:0f:
0b:51:cf:f1:10:ac:b9:16:cc:98:1b:e1:e5:f7:a7:09:9c:c0:
a0:f1:67:06:d1:11:f8:a7:56:d7:23:d2:f7:ef:c4:32:68:e8:
aa:b3:4c:e4:e6:fb:53:99:04:8c:9e:2e:ff:56:c8:32:3c:58:
e2:80:d0:ee:01:a8:f3:8b:d9:a1:81:dc:3d:7b:17:58:27:c6:
53:22:8d:6f:cb:6e:ee:03:96:22:cc:cf:32:e0:b0:e9:ec:3b:
d9:2b:dd:49:03:2f:7e:6e:c4:29:34:f4:40:20:e1:5e:7c:51:
86:27:5d:17:1c:e1:34:54:41:87:80:06:a2:0a:e4:55:ac:5f:
9b:59:69:cd:26:c6:68:88:b6:64:bb:d3:97:60:18:d2:4e:da:
8c:c3:ff:ea:39:08:0c:52:c1:ed:ec:ec:eb:6f:4d:a7:88:26:
5d:7a:bb:f6:67:7d:c5:76:4f:aa:50:1b:75:dc:34:7e:8e:6a:
3e:f6:e9:3a:16:8d:3b:ea:f8:89:04:7a:f4:c6:37:0b:d6:0d:
d9:a3:e1:c3:3b:dd:c4:08:a4:f6:f4:23:5a:1f:91:af:ae:7d:
f2:2e:1d:36:32:ab:f0:22:1c:17:e9:71:04:d3:c7:e6:e9:2c:
77:04:dc:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:24 2025 by rpki-client