Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/DED376FAC0B211EEBAD8C90CC4F9AE02.roa
File: DED376FAC0B211EEBAD8C90CC4F9AE02.roa (raw, json)
Hash identifier: 55JHX4ew0160t2EeeFzUdAANCqPk1wqNfiUZNAUhc9g=
Subject key identifier: F9:D2:AC:F8:78:B1:F5:52:43:FB:56:51:ED:AF:53:FF:07:D3:D6:88
Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
Certificate serial: 02AA
Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/DED376FAC0B211EEBAD8C90CC4F9AE02.roa
Signing time: Thu 29 Feb 2024 03:25:56 +0000
ROA not before: Thu 29 Feb 2024 03:25:56 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 23750
IP address blocks: 103.159.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 682 (0x2aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E8E, serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
Validity
Not Before: Feb 29 03:25:56 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=65dff943-ae7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9e:c1:f9:c4:36:7c:f1:6d:57:98:b8:cc:be:
8c:ba:f0:c6:05:a9:3b:4c:bc:f6:9c:d4:b1:1d:88:
1a:6b:b1:e7:6e:66:d3:f2:c2:cb:c2:56:20:5f:12:
66:d3:f3:cb:04:41:99:de:6f:60:28:58:cd:32:67:
b1:d7:62:b9:50:a1:ff:0f:44:42:fc:1a:4f:a8:ad:
1d:66:78:d5:c5:9a:8a:82:05:39:1c:64:9b:54:9d:
eb:57:94:3e:19:f9:0c:2b:60:e8:8c:de:77:84:f7:
31:d1:31:e3:1f:44:c5:8b:e3:6a:ba:e2:d8:0d:81:
fd:73:e8:6f:4d:92:4a:e3:66:a4:ee:05:a7:30:c3:
e1:87:65:7a:01:83:bf:da:37:80:3e:e9:c6:af:b3:
28:4e:be:83:1d:35:8d:bf:03:9f:2d:82:de:be:f4:
d4:d2:28:68:93:52:7e:5c:12:6d:f9:aa:1f:67:24:
d6:d0:e8:0f:50:85:0f:15:d1:21:82:da:3f:1e:42:
97:a2:19:44:b3:b2:24:4b:7d:63:00:50:4d:1f:03:
9c:6c:81:25:2b:39:12:4d:40:f8:fa:be:e0:11:1b:
d7:8d:9a:e7:5e:a4:4c:fb:b0:8e:82:95:bf:69:70:
35:1d:0f:1b:10:79:71:f6:88:b3:18:cd:19:c3:76:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D2:AC:F8:78:B1:F5:52:43:FB:56:51:ED:AF:53:FF:07:D3:D6:88
X509v3 Authority Key Identifier:
keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/DED376FAC0B211EEBAD8C90CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.79.0/24
Signature Algorithm: sha256WithRSAEncryption
25:e8:0e:54:f5:7c:7a:23:57:c8:00:02:50:01:fd:4c:a1:d6:
da:ef:c5:64:0e:f7:6a:71:54:57:3f:ec:9e:46:81:e8:48:4f:
96:71:f7:4e:ee:a2:4e:5e:f5:01:55:44:4f:31:58:c4:4c:13:
57:d8:cb:52:94:26:6c:10:82:e6:71:2d:df:17:40:be:f8:6e:
eb:f0:4f:46:34:74:32:35:d6:04:ca:6c:bd:8e:ff:0b:22:b9:
7c:8e:3a:15:70:51:59:2d:f3:d6:5d:eb:92:35:de:c0:09:3c:
85:fe:8f:3c:23:35:18:65:7c:8f:f6:4b:0a:9b:05:26:ea:21:
8b:0f:d5:60:f3:c5:b1:2e:e2:e9:df:ad:12:d0:65:aa:90:37:
b9:ca:2f:74:95:71:f0:f3:0c:75:99:0e:e2:ca:e8:dc:ff:dc:
0c:a9:63:53:b6:fc:38:71:e9:43:e0:9d:d7:d5:c2:81:b7:b9:
62:a4:1c:d3:57:de:94:ee:57:54:a7:ec:7c:f7:b4:95:af:cd:
1c:0d:5d:9e:c6:74:fc:ae:d4:14:9f:33:d6:0c:27:d8:46:83:
26:be:55:80:f1:ec:57:bc:2f:7c:fe:35:02:bc:01:49:5e:d9:
1f:56:7b:19:44:ef:b2:fc:3d:77:77:a5:3c:44:4e:9f:76:b8:
dd:3e:6d:5a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NThFOEUxMTAvBgNVBAUTKDVGMkU1RTYyOTMyQkI1MEE4NUZGMkY5QTVGMzFCMkJB
REQ1RjM0QUMwHhcNMjQwMjI5MDMyNTU2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWRmZjk0My1hZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy57B+cQ2fPFtV5i4zL6MuvDGBak7TLz2nNSxHYgaa7HnbmbT8sLLwlYgXxJm
0/PLBEGZ3m9gKFjNMmex12K5UKH/D0RC/BpPqK0dZnjVxZqKggU5HGSbVJ3rV5Q+
GfkMK2DojN53hPcx0THjH0TFi+NquuLYDYH9c+hvTZJK42ak7gWnMMPhh2V6AYO/
2jeAPunGr7MoTr6DHTWNvwOfLYLevvTU0ihok1J+XBJt+aofZyTW0OgPUIUPFdEh
gto/HkKXohlEs7IkS31jAFBNHwOcbIElKzkSTUD4+r7gERvXjZrnXqRM+7COgpW/
aXA1HQ8bEHlx9oizGM0Zw3YK5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPnSrPh4
sfVSQ/tWUe2vU/8H09aIMB8GA1UdIwQYMBaAFF8uXmKTK7UKhf8vml8xsrrdXzSs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEU4RS8wNEZCQjhGMEFF
MEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9YeTVlWXBNcnRRcUZfeS1hWHpHeXV0MWZO
S3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1h5NWVZcE1ydFFxRl95LWFYekd5dXQxZk5Ldy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NThFOEUvMDRGQkI4RjBBRTBGMTFFQ0EwMjA1NjY2QzRGOUFFMDIvREVEMzc2RkFD
MEIyMTFFRUJBRDhDOTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnn08wDQYJKoZIhvcNAQELBQADggEBACXoDlT1fHojV8gA
AlAB/Uyh1trvxWQO92pxVFc/7J5GgehIT5Zx907uok5e9QFVRE8xWMRME1fYy1KU
JmwQguZxLd8XQL74buvwT0Y0dDI11gTKbL2O/wsiuXyOOhVwUVkt89Zd65I13sAJ
PIX+jzwjNRhlfI/2SwqbBSbqIYsP1WDzxbEu4unfrRLQZaqQN7nKL3SVcfDzDHWZ
DuLK6Nz/3AypY1O2/Dhx6UPgndfVwoG3uWKkHNNX3pTuV1Sn7Hz3tJWvzRwNXZ7G
dPyu1BSfM9YMJ9hGgya+VYDx7Fe8L3z+NQK8AUle2R9WexlE77L8PXd3pTxETp92
uN0+bVo=
-----END CERTIFICATE-----
Generated at Thu Apr 17 14:10:33 2025 by rpki-client