Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/FD1AA19CE53111EBAB62446EC4F9AE02.roa
File: FD1AA19CE53111EBAB62446EC4F9AE02.roa (raw, json)
Hash identifier: nIuBxn/KiiXRa75nH/evmgKuJYZTLL+/GjRtxqq9Ct4=
Subject key identifier: A8:75:CA:D2:16:D7:12:68:F5:F5:99:7A:17:14:32:D0:91:D8:77:F0
Certificate issuer: /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Certificate serial: 0405
Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/FD1AA19CE53111EBAB62446EC4F9AE02.roa
Signing time: Wed 05 Jul 2023 00:50:23 +0000
ROA not before: Wed 05 Jul 2023 00:50:23 +0000
ROA not after: Mon 30 Sep 2024 00:00:00 +0000
asID: 140880
IP address blocks: 103.152.204.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1029 (0x405)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169BB4, serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Validity
Not Before: Jul 5 00:50:23 2023 GMT
Not After : Sep 30 00:00:00 2024 GMT
Subject: CN=64a4be4e-fb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5d:43:da:9e:7f:a5:84:d2:ed:52:6c:5b:4f:
9d:88:3e:e3:f9:bb:d3:63:66:4d:f9:d8:62:0b:9d:
e1:57:85:51:17:63:1b:07:b5:d0:58:06:1b:34:5d:
d3:c1:f8:da:f6:6f:94:85:81:01:47:d1:cb:d2:45:
ac:79:d6:42:ac:a2:8f:35:fd:9d:3e:c3:78:a4:c9:
87:60:fb:4e:a3:d6:ae:9d:cf:8b:fe:d9:49:35:d4:
65:f8:e8:10:fe:d6:1c:47:fd:2c:ce:6b:fa:87:2b:
39:71:c2:67:11:65:37:0a:67:7b:65:14:14:f4:72:
13:7a:a9:1a:0e:e7:16:41:d6:86:dc:22:59:f2:29:
e3:15:b1:30:c3:3e:81:0c:c5:78:01:9f:3b:f2:2b:
6f:13:a5:a7:49:5b:33:a4:d8:7e:53:29:6c:ec:d7:
7a:81:7f:75:dd:93:a6:43:4c:34:75:90:8e:cf:f2:
a5:9d:c7:62:05:7e:fa:ea:a1:9c:48:fe:86:bd:27:
36:e0:6c:43:ed:ec:c0:28:f6:ed:5f:ce:81:45:9c:
81:6f:31:ab:62:0e:53:5d:d5:26:c3:09:3a:1f:bb:
07:71:7e:16:bb:88:54:1d:7d:ab:03:7e:3b:37:eb:
d1:ca:0b:08:ba:b5:11:e5:22:eb:d0:99:f8:39:c3:
ae:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:75:CA:D2:16:D7:12:68:F5:F5:99:7A:17:14:32:D0:91:D8:77:F0
X509v3 Authority Key Identifier:
keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/FD1AA19CE53111EBAB62446EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.204.0/23
Signature Algorithm: sha256WithRSAEncryption
25:90:8b:24:2f:06:2f:49:c0:84:e7:e6:7e:ba:9e:00:39:bd:
1b:7d:3e:cf:93:95:c0:7c:7b:1a:c2:09:d1:39:1a:dd:f1:2d:
33:c0:8e:31:04:69:34:87:67:6b:a5:b0:bb:f6:4c:23:c2:2a:
00:88:04:ab:e7:aa:45:cb:fd:b8:08:66:f0:37:ff:e6:f1:f2:
f6:7e:fa:a6:b0:c0:b6:a7:9a:56:14:83:4e:d3:25:f6:3f:11:
02:9c:4d:b2:15:6b:be:ec:29:52:89:9f:8e:80:b4:ca:4c:e3:
3a:b6:f7:51:fe:d7:e1:c4:c0:7d:e1:11:14:5d:f3:72:04:db:
01:d2:a7:a8:30:7b:cb:c3:a2:41:dc:e9:e0:57:de:05:5e:ba:
d8:c8:4f:f4:a6:38:de:3b:53:b5:53:99:51:78:19:bb:eb:55:
b3:28:18:e3:77:5a:27:2e:a8:3e:ce:9f:f9:95:a1:61:e8:9f:
1c:58:81:92:70:c2:ce:3a:74:9c:27:ed:b8:ec:e9:66:7d:59:
26:33:b9:d5:2c:6d:e8:cc:f1:83:d1:71:06:94:18:5a:82:dc:
b8:05:3c:c6:98:b8:5b:0d:60:39:ab:a6:5b:b9:3d:7a:e5:1a:
0e:40:b5:ba:e3:19:e3:82:14:03:f7:67:ed:e9:9b:6e:8b:bc:
d1:15:ba:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:14:42 2025 by rpki-client