Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/12397D24831F11EC981F3884C4F9AE02.roa
File: 12397D24831F11EC981F3884C4F9AE02.roa (raw, json)
Hash identifier: 5H3nkgauX1Y6NJZfzo3fPA/bt4v1PSk3+uAdkDilCWg=
Subject key identifier: 32:FA:32:DB:B3:89:F1:4B:EB:7D:BD:F8:D2:7E:2C:7B:34:2D:C9:30
Certificate issuer: /CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
Certificate serial: 1A65
Authority key identifier: 51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/12397D24831F11EC981F3884C4F9AE02.roa
Signing time: Tue 02 May 2023 17:13:50 +0000
ROA not before: Tue 02 May 2023 17:13:50 +0000
ROA not after: Sat 02 Sep 2023 00:00:00 +0000
asID: 135882
IP address blocks: 103.78.252.0/24 maxlen: 24
103.78.253.0/24 maxlen: 24
103.78.254.0/24 maxlen: 24
103.78.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6757 (0x1a65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7672, serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
Validity
Not Before: May 2 17:13:50 2023 GMT
Not After : Sep 2 00:00:00 2023 GMT
Subject: CN=645144ce-8c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:07:3f:1f:32:cb:a5:37:5c:d3:35:84:09:
4e:06:56:11:fb:73:b8:f1:13:be:ff:d8:05:3c:e1:
07:aa:1b:8b:3f:91:27:ab:88:67:4c:76:21:c9:bc:
d7:74:03:eb:8f:03:81:22:35:c9:88:52:be:92:f5:
1c:1f:b5:ae:d6:17:47:33:5d:05:c2:a8:e6:3f:36:
ce:42:f1:16:8f:f0:1d:ac:e9:90:e7:25:b9:54:01:
6a:75:40:7a:97:0f:77:59:04:2b:f9:48:84:25:d5:
02:7e:38:59:6a:55:d3:ee:63:ee:89:f9:67:91:97:
7e:9f:10:b6:8d:c0:b5:6e:8c:92:3d:57:05:63:6e:
61:70:36:13:aa:1a:51:02:48:d4:0e:fd:a7:c3:7b:
e4:0b:c9:2a:a1:98:18:25:53:49:51:64:3f:3d:3a:
0f:33:a7:55:fa:bd:46:3f:c9:d1:25:4f:15:da:79:
e6:92:36:16:a2:71:3a:cf:a3:2f:37:7e:20:34:cc:
c0:18:7c:ac:d9:7f:10:7b:09:2c:76:3a:87:f7:87:
45:ad:71:fa:a6:61:65:e5:4c:bd:ec:ad:0f:9d:b2:
14:d4:a7:ae:d0:93:83:35:20:cf:2d:f6:28:c7:5f:
bc:af:59:ff:20:96:c3:57:7e:af:58:a0:2e:a4:10:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FA:32:DB:B3:89:F1:4B:EB:7D:BD:F8:D2:7E:2C:7B:34:2D:C9:30
X509v3 Authority Key Identifier:
keyid:51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/12397D24831F11EC981F3884C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:dd:6c:65:cf:3d:19:77:57:90:93:4c:94:50:21:a3:97:09:
8a:0a:1a:b7:b4:b2:38:0e:00:e0:a6:dc:55:14:77:78:6a:63:
8c:b1:bb:a5:ad:03:30:2d:79:3a:62:9b:19:f5:8f:30:fe:3e:
7d:37:75:95:15:16:ba:f2:3d:33:ea:f2:b8:42:69:d8:a9:b8:
c9:36:a7:c5:c1:c7:f0:8a:0e:4d:b1:80:d0:e4:38:9b:bf:ec:
ca:85:19:44:a7:ab:c6:38:fb:e4:da:21:35:36:54:f7:c1:96:
52:3d:48:9f:d6:95:92:aa:2d:78:cb:2e:51:29:fe:01:e8:48:
e2:e3:68:d1:6b:bc:fe:dc:0b:fa:a8:32:86:74:b1:f6:99:a1:
7a:89:77:99:35:04:ca:3f:36:86:36:a4:87:08:b3:f9:98:7f:
e0:c1:62:27:f6:9a:f3:92:f5:90:45:9c:63:4c:ba:7a:c3:e1:
26:62:56:7c:36:4f:cb:8e:0c:31:d4:f9:e8:4e:ea:1c:df:02:
11:92:7b:0d:b4:1c:4a:64:e8:c5:9e:00:1b:9e:b9:46:66:e9:
62:9a:29:1e:78:f7:d8:5a:a2:9f:55:9a:e8:7b:47:83:ee:75:
02:96:75:ea:16:8d:77:9f:1c:58:db:a0:ce:f1:2d:a6:57:d5:
8e:01:a7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:16:50 2025 by rpki-client