Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/E38C9F70D64511EE9867E856C4F9AE02.roa
File: E38C9F70D64511EE9867E856C4F9AE02.roa (raw, json)
Hash identifier: U6ezkwAleSVhkR9nRSQIqgTTgoba1oswJmE1MLOVRDM=
Subject key identifier: B9:0F:4E:1B:F4:13:BE:18:01:99:A8:32:84:27:09:41:54:5E:0C:66
Certificate issuer: /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial: 09D5
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/E38C9F70D64511EE9867E856C4F9AE02.roa
Signing time: Wed 28 Feb 2024 14:31:36 +0000
ROA not before: Wed 28 Feb 2024 14:31:35 +0000
ROA not after: Thu 31 Oct 2024 00:00:00 +0000
asID: 135341
IP address blocks: 103.120.44.0/24 maxlen: 24
103.120.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2517 (0x9d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Validity
Not Before: Feb 28 14:31:35 2024 GMT
Not After : Oct 31 00:00:00 2024 GMT
Subject: CN=65df43c7-0e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:cd:1b:4f:09:18:22:1d:6a:71:37:57:86:
99:b7:23:3b:97:28:e3:45:23:90:57:61:e8:76:ee:
1b:7a:4c:c6:d0:f3:d1:3d:2f:23:cb:a8:f6:55:a9:
60:c1:46:a5:50:38:57:a0:46:da:06:55:4d:1a:68:
6f:9c:de:3a:df:a6:ca:e7:95:27:79:5d:8e:77:a7:
81:40:98:46:6f:ee:2c:b2:85:74:8a:dd:ad:4a:f4:
68:99:c8:09:a5:7c:d6:92:d1:80:99:92:0c:60:e8:
65:ff:a8:49:51:0b:58:e1:a0:99:01:dc:6c:8a:7a:
19:b7:d6:cf:39:0c:43:a5:91:68:18:81:b6:1b:b7:
d9:0b:3a:88:ca:8b:6e:99:eb:46:95:49:11:9e:d7:
36:e7:87:de:7f:36:a4:9a:20:f1:41:ef:50:bb:d1:
52:f1:59:be:3b:64:e4:76:04:30:45:dc:a2:d6:ad:
80:ce:d2:ec:0b:95:e9:51:86:e9:e5:5d:f2:26:df:
82:3b:58:d0:f6:84:19:4e:b3:1e:e2:d7:f6:71:f4:
d6:7c:c2:8b:a0:69:7e:20:d6:92:70:cb:92:25:77:
b5:59:8a:56:6d:f9:30:e2:45:17:b0:05:35:e8:28:
0d:c7:d4:c2:97:74:81:ff:8e:9c:56:ae:fd:f5:54:
04:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0F:4E:1B:F4:13:BE:18:01:99:A8:32:84:27:09:41:54:5E:0C:66
X509v3 Authority Key Identifier:
keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/E38C9F70D64511EE9867E856C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.120.44.0/23
Signature Algorithm: sha256WithRSAEncryption
78:92:9b:83:4e:3c:89:d7:0c:2c:dc:ae:13:b5:a4:5c:ed:12:
b3:35:b3:95:c0:f4:19:6e:52:72:81:50:9d:a2:29:99:51:32:
e3:69:4b:c7:1f:08:7d:c6:0b:0f:5a:48:a4:2e:e4:69:c3:1d:
1a:32:4b:2d:d3:51:65:9e:16:1c:2e:e9:85:56:d7:22:37:c6:
ba:40:d9:fa:21:98:0d:32:af:46:63:ee:15:d0:14:90:bf:71:
e1:a4:c1:ee:98:45:ea:ed:fb:66:ad:60:dd:3e:d0:5b:0c:33:
a9:51:29:44:e0:2a:e4:37:6c:fb:96:53:92:00:f2:f1:28:0a:
cd:49:c4:0a:ae:66:b5:a7:c8:91:a1:8e:7a:b5:fe:16:05:51:
a8:cc:52:12:c0:61:f7:b4:68:8e:c1:85:3f:01:d5:ec:29:1d:
e6:bf:31:e4:c6:f6:ab:e1:1f:22:5c:18:f7:35:93:b6:e2:2c:
4f:1a:15:0e:12:7a:50:17:bf:42:6f:0b:aa:00:12:b9:e0:a4:
0f:16:ec:8a:02:0f:6d:2b:97:10:a0:e6:6e:ed:31:e4:07:32:
c0:3d:c3:3d:09:92:f7:ba:df:e0:cd:81:1d:d7:77:ff:c2:6f:
2c:cf:eb:39:bb:91:cb:b0:4b:16:e3:be:ef:27:02:ba:99:f4:
36:19:a0:05
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCdUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc4RDUxMTAvBgNVBAUTKEUwMTBBRjJFMTE0QTRBOUZENTA4NUJFNDQ2NjA1MjEz
OTBGQjEzMzEwHhcNMjQwMjI4MTQzMTM1WhcNMjQxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWRmNDNjNy0wZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz/jNG08JGCIdanE3V4aZtyM7lyjjRSOQV2Hodu4bekzG0PPRPS8jy6j2Valg
wUalUDhXoEbaBlVNGmhvnN4636bK55UneV2Od6eBQJhGb+4ssoV0it2tSvRomcgJ
pXzWktGAmZIMYOhl/6hJUQtY4aCZAdxsinoZt9bPOQxDpZFoGIG2G7fZCzqIyotu
metGlUkRntc254fefzakmiDxQe9Qu9FS8Vm+O2TkdgQwRdyi1q2AztLsC5XpUYbp
5V3yJt+CO1jQ9oQZTrMe4tf2cfTWfMKLoGl+INaScMuSJXe1WYpWbfkw4kUXsAU1
6CgNx9TCl3SB/46cVq799VQEKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLkPThv0
E74YAZmoMoQnCUFUXgxmMB8GA1UdIwQYMBaAFOAQry4RSkqf1Qhb5EZgUhOQ+xMx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhENS82MDEzMjE2MDU2
QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1NwX1ZDRnZrUm1CU0U1RDdF
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRCQ3ZMaEZLU3BfVkNGdmtSbUJTRTVEN0V6RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc4RDUvNjAxMzIxNjA1NkM4MTFFQUI2NjU3QTQwQzRGOUFFMDIvRTM4QzlGNzBE
NjQ1MTFFRTk4NjdFODU2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFneCwwDQYJKoZIhvcNAQELBQADggEBAHiSm4NOPInXDCzc
rhO1pFztErM1s5XA9BluUnKBUJ2iKZlRMuNpS8cfCH3GCw9aSKQu5GnDHRoySy3T
UWWeFhwu6YVW1yI3xrpA2fohmA0yr0Zj7hXQFJC/ceGkwe6YRert+2atYN0+0FsM
M6lRKUTgKuQ3bPuWU5IA8vEoCs1JxAquZrWnyJGhjnq1/hYFUajMUhLAYfe0aI7B
hT8B1ewpHea/MeTG9qvhHyJcGPc1k7biLE8aFQ4SelAXv0JvC6oAErngpA8W7IoC
D20rlxCg5m7tMeQHMsA9wz0Jkve63+DNgR3Xd//CbyzP6zm7kcuwSxbjvu8nArqZ
9DYZoAU=
-----END CERTIFICATE-----
Generated at Wed May 14 16:15:52 2025 by rpki-client