Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/F215029E0F8911EF9C801515C4F9AE02.roa
File: F215029E0F8911EF9C801515C4F9AE02.roa (raw, json)
Hash identifier: STEnfUTSgv23i2nJ7dLDr3a95EkIL4ziwDyJvZSLYEE=
Subject key identifier: 19:FC:7D:BD:04:A5:EA:02:79:47:73:08:DB:89:12:44:A6:4E:00:83
Certificate issuer: /CN=A914B29B/serialNumber=C4F7F39E62F4C9D78C5E12FDC151AE4E32BC9A42
Certificate serial: 07
Authority key identifier: C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/F215029E0F8911EF9C801515C4F9AE02.roa
Signing time: Sat 11 May 2024 11:31:02 +0000
ROA not before: Sat 11 May 2024 11:31:02 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 61112
IP address blocks: 103.255.208.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7 (0x7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B29B
Validity
Not Before: May 11 11:31:02 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=663f56f6-9f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:66:cc:f3:6a:16:55:ab:a7:74:0d:5f:5f:
e9:29:4e:ba:13:76:3a:eb:e4:dd:00:d5:d0:2b:19:
99:c1:29:cd:0d:76:1c:59:5e:b0:09:fb:c8:13:49:
1c:61:17:06:62:f7:be:08:77:ad:c7:90:4b:03:95:
a6:19:c7:a3:af:1e:98:a8:3e:14:c9:d5:49:8c:dc:
ef:59:77:2e:7f:c1:e2:e7:37:8e:ff:2c:c8:cc:d5:
60:95:14:23:bd:33:96:39:3d:6f:36:7d:43:c2:21:
11:cc:4e:4b:9d:c3:43:88:75:c6:e3:a8:10:db:1f:
f9:32:02:f8:3d:dd:63:9b:db:6f:c5:4d:67:fc:71:
81:5b:d3:b6:ae:f8:04:89:a3:26:d0:0c:78:00:24:
dc:e0:70:39:cb:29:27:e2:da:89:df:86:5f:fc:d4:
7a:c5:ae:13:a8:ce:9f:7e:68:8c:7e:4c:a9:e7:80:
3a:d7:11:41:43:a3:98:d0:98:cb:00:fe:ed:2c:c2:
78:72:5c:a9:1f:c7:06:c6:c1:01:a5:49:51:0c:b7:
bf:36:19:1d:c7:cb:c0:3b:9d:ab:df:1c:22:2a:cc:
bc:e1:a6:16:4e:ff:fb:0c:15:5e:c7:fc:33:81:58:
d9:99:62:76:57:bf:ae:f2:61:1a:b4:18:43:70:a2:
47:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FC:7D:BD:04:A5:EA:02:79:47:73:08:DB:89:12:44:A6:4E:00:83
X509v3 Authority Key Identifier:
keyid:C4:F7:F3:9E:62:F4:C9:D7:8C:5E:12:FD:C1:51:AE:4E:32:BC:9A:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/xPfznmL0ydeMXhL9wVGuTjK8mkI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfznmL0ydeMXhL9wVGuTjK8mkI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B29B/8A3E1D1A0F8211EF8266F05EC4F9AE02/F215029E0F8911EF9C801515C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.255.208.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:91:9c:c6:40:24:83:4f:b2:a1:47:6d:a0:0f:3c:6b:9a:10:
00:72:3c:9f:22:72:f7:be:21:6f:3a:e6:f5:16:e5:8d:58:f6:
6d:76:63:4b:b5:45:d3:f3:ff:4b:5a:bf:63:ec:ed:fb:61:e7:
9c:8e:df:4f:b4:e9:06:b6:c8:92:68:73:99:6a:ce:e9:be:13:
61:28:9b:c0:df:23:64:c6:ab:3d:86:49:95:40:5e:de:8c:eb:
00:09:39:9a:81:9e:c8:88:6f:e6:a5:c2:38:a9:94:b8:e4:3e:
15:db:fb:24:ae:66:e2:64:1e:37:30:aa:76:1e:ee:a2:2d:b5:
d7:e0:cc:f0:e1:fe:e1:9a:7d:d4:4f:7d:6a:50:5d:55:75:57:
0f:e7:e2:84:b4:2f:00:d8:b4:08:c0:3d:cb:9d:a8:41:72:7b:
54:f8:6a:f6:5b:c1:8e:06:ee:7e:8d:dd:92:5a:ee:a6:30:2e:
38:f1:49:d1:2d:8b:a6:3b:f2:68:99:61:bb:02:7c:50:c1:60:
42:25:11:11:9b:33:54:45:36:5a:25:8d:6c:e0:0d:25:2d:c2:
a9:8f:01:0a:b8:a7:d4:75:07:6f:b0:26:8d:85:8f:85:d2:64:
3e:ce:8f:35:10:50:58:01:02:c7:b4:81:c8:78:55:83:92:f1:
ea:50:86:57
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QjI5QjExMC8GA1UEBRMoQzRGN0YzOUU2MkY0QzlENzhDNUUxMkZEQzE1MUFFNEUz
MkJDOUE0MjAeFw0yNDA1MTExMTMxMDJaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY2M2Y1NmY2LTlmMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDLAWbM82oWVaundA1fX+kpTroTdjrr5N0A1dArGZnBKc0NdhxZXrAJ+8gTSRxh
FwZi974Id63HkEsDlaYZx6OvHpioPhTJ1UmM3O9Zdy5/weLnN47/LMjM1WCVFCO9
M5Y5PW82fUPCIRHMTkudw0OIdcbjqBDbH/kyAvg93WOb22/FTWf8cYFb07au+ASJ
oybQDHgAJNzgcDnLKSfi2onfhl/81HrFrhOozp9+aIx+TKnngDrXEUFDo5jQmMsA
/u0swnhyXKkfxwbGwQGlSVEMt782GR3Hy8A7navfHCIqzLzhphZO//sMFV7H/DOB
WNmZYnZXv67yYRq0GENwokdhAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUGfx9vQSl
6gJ5R3MI24kSRKZOAIMwHwYDVR0jBBgwFoAUxPfznmL0ydeMXhL9wVGuTjK8mkIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCMjlCLzhBM0UxRDFBMEY4
MjExRUY4MjY2RjA1RUM0RjlBRTAyL3hQZnpubUwweWRlTVhoTDl3Vkd1VGpLOG1r
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveFBmem5tTDB5ZGVNWGhMOXdWR3VUaks4bWtJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QjI5Qi84QTNFMUQxQTBGODIxMUVGODI2NkYwNUVDNEY5QUUwMi9GMjE1MDI5RTBG
ODkxMUVGOUM4MDE1MTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWf/0DANBgkqhkiG9w0BAQsFAAOCAQEAqpGcxkAkg0+yoUdt
oA88a5oQAHI8nyJy974hbzrm9RbljVj2bXZjS7VF0/P/S1q/Y+zt+2HnnI7fT7Tp
BrbIkmhzmWrO6b4TYSibwN8jZMarPYZJlUBe3ozrAAk5moGeyIhv5qXCOKmUuOQ+
Fdv7JK5m4mQeNzCqdh7uoi211+DM8OH+4Zp91E99alBdVXVXD+fihLQvANi0CMA9
y52oQXJ7VPhq9lvBjgbufo3dklrupjAuOPFJ0S2LpjvyaJlhuwJ8UMFgQiUREZsz
VEU2WiWNbOANJS3CqY8BCrin1HUHb7AmjYWPhdJkPs6PNRBQWAECx7SByHhVg5Lx
6lCGVw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:01 2025 by rpki-client