Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/E5599F266ACA11ECA4391B3AC4F9AE02.roa
File: E5599F266ACA11ECA4391B3AC4F9AE02.roa (raw, json)
Hash identifier: Ya5PqNuppyMyijfGfLlQxLN7OSYXy30y0aTxe06tsXc=
Subject key identifier: 92:11:76:FC:DC:7B:F2:42:62:49:A3:03:CE:B6:F7:17:E8:01:D8:01
Certificate issuer: /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial: 04FA
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/E5599F266ACA11ECA4391B3AC4F9AE02.roa
Signing time: Sun 05 Feb 2023 01:11:11 +0000
ROA not before: Sun 05 Feb 2023 01:11:11 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 134599
IP address blocks: 103.162.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1274 (0x4fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D5606, serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Validity
Not Before: Feb 5 01:11:11 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63df022f-de09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:64:44:12:29:87:76:8b:9d:10:73:63:df:
92:47:be:cf:51:8c:88:88:4a:5e:fd:1d:44:a9:09:
e0:13:79:89:da:ba:62:49:3c:53:dd:59:47:f5:ef:
c1:67:a2:40:4d:a9:58:4d:3e:2d:9e:3f:37:a1:8a:
ec:f4:c8:39:9e:1b:3d:e2:24:73:9f:31:e6:17:69:
a4:d9:b6:4f:5c:24:65:e0:c8:30:16:7e:91:59:35:
5a:e5:22:82:d5:6e:3a:9b:b9:ab:9a:9f:93:e9:37:
3d:5d:0d:fb:3f:de:cf:9c:ce:a9:9c:6d:a6:6f:a2:
54:8d:66:eb:e2:a6:0b:d1:fb:4d:5a:14:2e:67:4c:
05:be:bd:d2:b3:ef:c0:fa:0c:dd:69:f7:b9:0b:75:
ca:f7:b3:9e:8e:34:96:39:40:d5:00:f6:26:2f:20:
7f:e4:f3:85:48:b5:aa:f0:c0:61:90:32:8b:90:8b:
85:f6:01:fd:33:e5:bb:42:77:66:85:6b:61:4f:bb:
6c:d1:4d:47:27:ba:2a:18:c1:8b:86:47:79:0f:16:
8a:f2:fe:bb:3e:fe:7f:73:d2:58:3d:c2:6e:88:34:
d9:e8:5e:a1:66:98:27:18:77:51:ce:34:64:46:be:
a8:9e:f0:e4:de:5d:43:7a:04:cd:a6:82:15:a4:a8:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:11:76:FC:DC:7B:F2:42:62:49:A3:03:CE:B6:F7:17:E8:01:D8:01
X509v3 Authority Key Identifier:
keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/E5599F266ACA11ECA4391B3AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:db:06:56:24:9d:7e:cc:50:a7:d0:38:3e:89:50:cd:2c:b2:
0a:12:fb:b3:49:a2:6d:74:ab:a5:4f:78:2b:3a:6a:cb:5b:23:
aa:c2:45:3f:47:e3:6e:74:25:3d:e4:6d:64:a7:6f:2a:2b:51:
17:16:3d:70:c4:13:31:84:9c:19:7f:1a:77:aa:64:59:48:d9:
64:90:bb:37:cd:68:2d:ba:02:ed:b6:a4:88:2d:70:63:64:b9:
3c:10:88:d0:80:a8:70:54:e6:86:6c:f8:14:42:9a:d2:f9:82:
ab:13:38:cb:02:92:b1:33:53:94:df:55:eb:bc:13:6d:3f:be:
77:6d:2b:6f:19:b6:a2:23:94:41:fe:ce:33:db:02:54:e6:40:
52:58:39:2b:af:c1:56:ec:8b:e7:0e:51:19:d4:9d:64:be:0d:
52:c0:b7:ac:69:3a:df:9a:ea:4b:b5:47:d7:f7:83:a4:c7:1f:
d8:7f:9c:69:74:14:96:0d:8d:cf:9d:32:64:4b:21:00:3a:fa:
c6:68:b3:ab:5e:8f:0e:da:49:94:e7:bb:60:8d:b9:87:85:a7:
b6:04:34:1a:04:18:07:27:7b:56:d7:0d:79:48:2f:46:9d:e8:
ae:35:32:21:98:5a:9c:44:34:14:73:72:7d:4a:04:15:48:5e:
d2:bd:3d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:40:54 2025 by rpki-client