Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/50639562152C11EE85ED4B1DC4F9AE02.roa
File: 50639562152C11EE85ED4B1DC4F9AE02.roa (raw, json)
Hash identifier: gpCHhyRTAy7IULH2FOsoF8ZurknrCx1jpjF3TgBafyA=
Subject key identifier: EE:87:A0:F1:A3:08:6B:7C:F4:3C:6E:E2:B1:3D:A7:D9:10:9F:B8:21
Certificate issuer: /CN=A91EFAFF/serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Certificate serial: 33
Authority key identifier: 51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/50639562152C11EE85ED4B1DC4F9AE02.roa
Signing time: Tue 27 Jun 2023 20:50:57 +0000
ROA not before: Tue 27 Jun 2023 20:50:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151048
IP address blocks: 103.121.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EFAFF, serialNumber=51D531AEF7A087C18E301E0E6A2C6371B264C3E8
Validity
Not Before: Jun 27 20:50:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=649b4bb0-b6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:12:f1:a0:d3:c4:2c:05:4c:fb:5a:14:e3:
ea:cf:d6:b7:df:31:83:ef:52:f8:40:e7:54:3c:f2:
39:5e:7a:c4:34:32:e4:0a:21:c3:97:4a:eb:dd:7c:
a7:1a:c1:1b:f2:53:68:3c:af:c3:34:4a:5b:94:61:
78:0d:37:e1:7d:7d:d9:5e:70:5c:4a:99:b8:87:05:
1b:88:fb:21:4a:3b:53:fc:7c:db:00:a9:48:76:b0:
a6:8b:8b:06:ed:5b:10:d0:e5:4a:97:bc:06:70:81:
ec:9a:ed:4e:da:83:a3:ca:db:8a:e2:4f:29:70:4c:
87:ac:5e:14:3e:5e:1a:fa:db:41:4e:1d:7d:57:61:
2b:69:2a:8e:7a:b9:1a:a2:6c:f1:da:b5:f6:32:10:
6e:41:08:e4:e1:2a:c5:98:58:05:57:dd:7f:36:d9:
7b:41:e6:c8:c2:f2:77:85:a4:7b:4d:c2:5f:38:ab:
e9:58:7c:2f:67:e0:8c:90:3e:b4:55:32:38:56:b8:
3c:c7:a0:b0:6d:a5:a4:61:fa:7e:bb:41:50:d2:d4:
f8:d7:db:d0:e7:21:c9:0e:79:16:34:4d:51:b5:7e:
8a:99:19:fd:f8:e7:6d:e8:2c:9a:d9:f6:04:f1:14:
c7:ec:d9:21:bd:df:0d:ff:94:4d:d9:6d:45:96:dd:
94:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:87:A0:F1:A3:08:6B:7C:F4:3C:6E:E2:B1:3D:A7:D9:10:9F:B8:21
X509v3 Authority Key Identifier:
keyid:51:D5:31:AE:F7:A0:87:C1:8E:30:1E:0E:6A:2C:63:71:B2:64:C3:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/UdUxrvegh8GOMB4OaixjcbJkw-g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UdUxrvegh8GOMB4OaixjcbJkw-g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFAFF/D0611F04CC4411ED9A71E10CC4F9AE02/50639562152C11EE85ED4B1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.121.7.0/24
Signature Algorithm: sha256WithRSAEncryption
39:21:03:8e:d5:7e:fd:61:05:c1:87:18:12:2f:c5:c9:86:2d:
95:a1:21:7b:01:9c:42:5b:f6:cd:ec:52:3f:6a:90:37:47:09:
0a:47:1b:ac:f6:36:11:89:14:7a:22:4d:93:33:aa:d5:e2:24:
e6:b8:e7:f9:cb:4a:36:37:70:78:61:28:4b:8d:eb:65:d0:7f:
21:bc:8a:e4:04:73:d6:29:f5:48:5f:6c:93:0a:8d:43:e0:d4:
b4:d4:06:6d:c1:46:d8:60:da:76:fc:1b:64:73:12:86:d2:22:
c6:75:57:2d:87:1b:0a:ab:e5:15:f5:7d:28:d7:a7:c4:f9:7d:
c8:7c:eb:e5:2c:96:3a:0d:db:ab:aa:b5:5b:a1:cf:10:b8:21:
70:01:b9:36:71:ac:08:cc:fe:9a:45:35:74:2e:3e:47:bd:23:
c3:46:61:e5:8d:32:1f:74:ab:b2:90:05:e5:8c:63:42:ec:5c:
04:cd:af:dc:0e:29:fb:eb:e8:ac:8e:6c:a3:fe:c2:b9:17:2d:
4e:4d:31:e4:7c:8a:0e:65:9e:91:47:5a:c3:42:86:54:ac:eb:
25:ef:35:9a:6d:d3:f7:f5:b3:8e:b3:0b:2d:85:1a:5c:31:cb:
ec:fb:0d:08:39:0c:d8:ad:fc:8e:6e:c1:ac:4b:25:3c:a5:c2:
c0:e9:4d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 10:16:04 2025 by rpki-client