Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B9A42F96FEA211EDB9013076C4F9AE02.roa
File: B9A42F96FEA211EDB9013076C4F9AE02.roa (raw, json)
Hash identifier: Vz2c1dAL2tzLijBpz5XdkyV8FKeYtLOeinzLmhM0fXs=
Subject key identifier: F5:88:5A:6B:93:24:50:92:4E:44:B5:2A:61:2B:58:AC:B9:51:89:90
Certificate issuer: /CN=A911D3F3/serialNumber=317C307FFC6ECB6CF656F26B8282FFB9E62F9365
Certificate serial: 057A
Authority key identifier: 31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B9A42F96FEA211EDB9013076C4F9AE02.roa
Signing time: Sat 02 Nov 2024 23:02:22 +0000
ROA not before: Sat 02 Nov 2024 23:02:22 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 9667
IP address blocks: 103.20.208.0/24 maxlen: 24
103.20.209.0/24 maxlen: 24
103.20.210.0/24 maxlen: 24
103.20.211.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1402 (0x57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D3F3
Validity
Not Before: Nov 2 23:02:22 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=6726af7e-980c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:5e:03:ad:ed:51:e8:ce:62:91:fb:a1:62:
c7:ed:da:fa:87:3f:2c:73:aa:77:32:06:ef:08:01:
30:fe:07:bb:2e:a2:bf:06:75:6f:40:7f:6a:a9:a7:
b6:03:07:e4:95:a7:d9:f0:1f:74:a1:08:3a:37:5b:
80:88:b1:29:14:eb:ff:50:04:94:d7:07:2d:3a:1b:
bc:96:7b:39:cc:de:46:90:6a:52:80:f7:e4:92:a2:
1c:f9:0e:e3:f9:b6:e9:cd:6c:25:ed:3f:38:00:d7:
42:11:f7:92:49:2f:b0:a1:0a:12:c7:2e:12:51:8e:
f2:f7:f4:b3:b8:38:ee:b5:03:90:e9:af:dd:0a:49:
69:9e:e3:ec:55:c3:87:0a:cf:88:e6:6a:38:94:dc:
8f:6d:1d:0c:a7:d0:ae:f9:41:10:6f:db:fd:af:3b:
76:3f:17:62:4d:8a:5b:9e:37:14:da:06:26:5b:a4:
d6:19:29:e7:c6:26:53:a7:40:ab:a9:fd:8c:7e:c4:
d8:e4:41:32:e7:1f:28:01:64:85:ba:79:e4:5f:2e:
de:7d:d5:2a:0f:32:03:63:c2:44:68:d6:1d:7e:5a:
cf:c2:72:36:9e:03:73:4b:e4:83:05:06:f9:7e:39:
73:30:4d:5b:d7:f6:55:50:44:6c:70:6b:a2:98:65:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:88:5A:6B:93:24:50:92:4E:44:B5:2A:61:2B:58:AC:B9:51:89:90
X509v3 Authority Key Identifier:
keyid:31:7C:30:7F:FC:6E:CB:6C:F6:56:F2:6B:82:82:FF:B9:E6:2F:93:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/MXwwf_xuy2z2VvJrgoL_ueYvk2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXwwf_xuy2z2VvJrgoL_ueYvk2U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D3F3/B254481ACA3411EB8C90D941C4F9AE02/B9A42F96FEA211EDB9013076C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.20.208.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:94:ad:b1:71:22:71:00:0c:85:5e:ee:3a:7f:94:8b:98:a5:
7e:39:be:fd:7a:aa:a6:4e:b1:3c:6e:11:26:cd:60:80:b6:07:
82:e7:28:40:8d:f4:b9:93:d0:69:96:4d:59:2b:4e:56:bb:bb:
8a:73:e7:2e:3c:d9:01:5a:b9:82:73:de:35:bf:4a:9e:1f:5e:
3d:b3:c3:5a:e7:3f:b7:db:77:39:aa:51:ee:ab:59:1f:91:8c:
da:88:93:ff:df:b5:0e:72:0b:db:d3:40:56:c2:04:d9:e3:48:
dc:fd:5e:26:99:55:04:42:ba:f3:31:8a:52:a3:57:c0:88:d1:
f1:04:40:38:53:7f:6d:8c:d5:84:8d:2b:70:0b:98:99:d0:3d:
54:75:f2:27:50:87:fb:a1:91:13:1e:87:69:66:5e:79:7b:24:
28:52:63:36:fd:d2:79:55:a3:26:16:58:06:5c:05:ad:23:fa:
1c:c3:d6:1d:e1:4f:95:5e:5e:17:8c:44:51:76:7f:e7:ff:2a:
91:60:61:b4:66:f3:1a:a7:0e:d9:6d:7c:90:98:0a:94:08:b1:
c8:2a:36:c3:57:3c:3a:80:ff:c9:85:5a:62:8f:7d:92:e2:db:
12:78:de:07:a6:1d:3e:03:03:2a:6d:7f:e7:c6:bc:4c:6e:8a:
dc:8e:ea:57
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUQzRjMxMTAvBgNVBAUTKDMxN0MzMDdGRkM2RUNCNkNGNjU2RjI2QjgyODJGRkI5
RTYyRjkzNjUwHhcNMjQxMTAyMjMwMjIyWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzI2YWY3ZS05ODBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxFVeA63tUejOYpH7oWLH7dr6hz8sc6p3MgbvCAEw/ge7LqK/BnVvQH9qqae2
AwfklafZ8B90oQg6N1uAiLEpFOv/UASU1wctOhu8lns5zN5GkGpSgPfkkqIc+Q7j
+bbpzWwl7T84ANdCEfeSSS+woQoSxy4SUY7y9/SzuDjutQOQ6a/dCklpnuPsVcOH
Cs+I5mo4lNyPbR0Mp9Cu+UEQb9v9rzt2PxdiTYpbnjcU2gYmW6TWGSnnxiZTp0Cr
qf2MfsTY5EEy5x8oAWSFunnkXy7efdUqDzIDY8JEaNYdflrPwnI2ngNzS+SDBQb5
fjlzME1b1/ZVUERscGuimGV2OQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPWIWmuT
JFCSTkS1KmErWKy5UYmQMB8GA1UdIwQYMBaAFDF8MH/8bsts9lbya4KC/7nmL5Nl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRDNGMy9CMjU0NDgxQUNB
MzQxMUVCOEM5MEQ5NDFDNEY5QUUwMi9NWHd3Zl94dXkyejJWdkpyZ29MX3VlWXZr
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01Yd3dmX3h1eTJ6MlZ2SnJnb0xfdWVZdmsyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUQzRjMvQjI1NDQ4MUFDQTM0MTFFQjhDOTBEOTQxQzRGOUFFMDIvQjlBNDJGOTZG
RUEyMTFFREI5MDEzMDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnFNAwDQYJKoZIhvcNAQELBQADggEBAF2UrbFxInEADIVe
7jp/lIuYpX45vv16qqZOsTxuESbNYIC2B4LnKECN9LmT0GmWTVkrTla7u4pz5y48
2QFauYJz3jW/Sp4fXj2zw1rnP7fbdzmqUe6rWR+RjNqIk//ftQ5yC9vTQFbCBNnj
SNz9XiaZVQRCuvMxilKjV8CI0fEEQDhTf22M1YSNK3ALmJnQPVR18idQh/uhkRMe
h2lmXnl7JChSYzb90nlVoyYWWAZcBa0j+hzD1h3hT5VeXheMRFF2f+f/KpFgYbRm
8xqnDtltfJCYCpQIscgqNsNXPDqA/8mFWmKPfZLi2xJ43gemHT4DAyptf+fGvExu
ityO6lc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:25:23 2025 by rpki-client