Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/4B9EE6C6E85A11EC8BF9DF82C4F9AE02.roa
File: 4B9EE6C6E85A11EC8BF9DF82C4F9AE02.roa (raw, json)
Hash identifier: 5v3erqD0adzY231ZcrpeH5ElcwoBJDBq942kxsGbE6c=
Subject key identifier: 43:3C:74:7D:7E:3A:62:05:EA:4D:02:49:1E:4D:50:DA:36:5E:EB:24
Certificate issuer: /CN=A91975CC/serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
Certificate serial: 01C3
Authority key identifier: 0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/4B9EE6C6E85A11EC8BF9DF82C4F9AE02.roa
Signing time: Wed 01 Feb 2023 05:14:35 +0000
ROA not before: Wed 01 Feb 2023 05:14:35 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 134697
IP address blocks: 45.248.48.0/22 maxlen: 24
103.205.28.0/23 maxlen: 24
103.214.222.0/24 maxlen: 24
103.216.190.0/23 maxlen: 24
203.12.0.0/23 maxlen: 24
203.12.2.0/23 maxlen: 24
203.12.4.0/23 maxlen: 24
203.12.6.0/23 maxlen: 23
203.12.6.0/24 maxlen: 24
203.12.7.0/24 maxlen: 24
203.12.8.0/24 maxlen: 24
203.12.10.0/23 maxlen: 24
203.12.12.0/23 maxlen: 24
203.12.14.0/23 maxlen: 24
2404:e80::/32 maxlen: 32
2404:e80::/36 maxlen: 36
2404:e80:4000::/35 maxlen: 35
2404:e80:4000::/36 maxlen: 36
2404:e80:6000::/36 maxlen: 36
2404:e80:8000::/36 maxlen: 36
2404:e80:9000::/36 maxlen: 36
2404:e80:a000::/36 maxlen: 36
2404:e80:b000::/36 maxlen: 36
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 451 (0x1c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91975CC, serialNumber=0BAC42986E9ABDB7CEE2CDFB2A9FE8D6D02AAB5C
Validity
Not Before: Feb 1 05:14:35 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63d9f53b-4d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:84:8f:7d:d8:9e:f6:05:10:19:72:6c:c3:29:
f8:d8:f8:8d:c8:9c:9a:b6:59:8e:73:8b:a8:4b:2a:
87:e4:6d:f8:ea:bf:70:52:1a:fd:ff:d1:cf:2f:55:
dd:73:93:b8:d9:7c:60:eb:c3:58:10:06:f5:04:4a:
44:a6:bb:83:23:21:1a:51:9b:2e:f7:f5:1c:88:c8:
6a:48:51:c3:1b:25:91:15:b1:42:f9:5d:0d:85:01:
56:1b:42:25:1b:44:a8:19:22:db:bb:a6:69:40:a2:
1b:5a:eb:c8:08:c2:2b:1e:70:05:24:52:5e:cd:ed:
6b:d0:6e:97:f5:21:5e:fe:ba:4a:40:3d:d8:85:9f:
c7:3f:28:a7:f1:99:b2:c3:ac:8d:47:05:cd:05:02:
4e:8d:12:ad:98:e9:13:92:ce:a0:9c:d9:8a:c7:66:
f8:ee:a5:78:1e:f9:4f:b8:e8:a2:4b:91:06:af:1d:
a3:20:14:98:27:74:7b:24:37:61:6d:1b:ad:b3:c2:
26:63:41:90:f0:ed:57:ab:b7:a7:a3:3b:e2:2d:5b:
a8:5a:04:ce:90:fa:3a:20:e8:01:5a:0c:a4:c9:cc:
00:f9:a7:9f:44:4d:60:2f:71:04:c8:52:1d:73:60:
f1:89:4f:ed:31:c9:91:65:74:a5:2d:37:55:6c:93:
0c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3C:74:7D:7E:3A:62:05:EA:4D:02:49:1E:4D:50:DA:36:5E:EB:24
X509v3 Authority Key Identifier:
keyid:0B:AC:42:98:6E:9A:BD:B7:CE:E2:CD:FB:2A:9F:E8:D6:D0:2A:AB:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/C6xCmG6avbfO4s37Kp_o1tAqq1w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6xCmG6avbfO4s37Kp_o1tAqq1w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91975CC/1EA343E2AFE311ECA2CB066DC4F9AE02/4B9EE6C6E85A11EC8BF9DF82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.248.48.0/22
103.205.28.0/23
103.214.222.0/24
103.216.190.0/23
203.12.0.0-203.12.8.255
203.12.10.0-203.12.15.255
IPv6:
2404:e80::/32
Signature Algorithm: sha256WithRSAEncryption
2f:45:af:97:5b:c9:a4:a7:bd:48:b0:68:03:1d:6d:fa:c1:19:
b8:7c:5e:88:8b:b7:79:c1:d7:59:e4:c3:4d:a8:4f:64:41:0b:
aa:ac:82:e9:16:3d:3f:07:6c:b8:fd:f0:9d:59:23:4c:8f:18:
77:a2:7a:83:27:f2:84:b8:0d:95:1a:d0:a8:33:7b:9d:24:3e:
3d:2e:7d:d2:76:d2:f2:fd:26:d5:c8:8e:bd:2c:88:dd:75:b9:
b5:57:92:d6:d4:6b:ec:d8:76:13:12:48:dc:04:a5:6e:7d:92:
88:b9:dc:c4:7e:57:56:d2:2f:e1:5f:22:48:24:f9:b3:45:79:
ea:c2:fa:89:3f:f8:3c:93:f4:8b:ef:d1:e5:cf:54:38:30:13:
ac:a6:f2:78:55:7c:b2:87:a4:fa:30:e6:87:e7:00:b8:ff:70:
64:86:0c:d3:32:72:bd:cb:cc:b3:30:4a:7f:54:9a:28:d9:9b:
70:24:de:32:4e:ae:f3:f4:c1:69:4f:50:2a:95:9a:c2:5a:e6:
b7:b7:03:d8:06:be:86:dd:29:ea:4a:12:97:23:05:bb:09:5d:
56:28:2f:7e:29:71:cb:a2:44:58:11:54:09:01:0a:6d:3c:2d:
e5:b2:be:a9:30:c1:ca:a7:54:43:78:7e:98:4d:c3:42:b9:93:
04:34:44:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:05:39 2025 by rpki-client