Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/06239EBADFEA11ED835B4D0EC4F9AE02.roa
File: 06239EBADFEA11ED835B4D0EC4F9AE02.roa (raw, json)
Hash identifier: yndVn7hcuDMCdpxEcUDVR9meRxJpnYlQ5KdYems+Xe0=
Subject key identifier: 1C:D0:69:D6:DF:9B:38:BD:0C:FC:76:EE:13:1A:05:D0:E8:6F:B2:7D
Certificate issuer: /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial: 2413
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/06239EBADFEA11ED835B4D0EC4F9AE02.roa
Signing time: Tue 20 Aug 2024 16:03:20 +0000
ROA not before: Tue 20 Aug 2024 16:03:20 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 63673
IP address blocks: 203.208.157.0/24 maxlen: 24
203.208.170.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9235 (0x2413)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C62B
Validity
Not Before: Aug 20 16:03:20 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66c4be47-0816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c1:89:a5:5c:3a:dc:30:d9:5d:8c:70:1c:64:
ed:4d:5b:c6:8c:20:f2:2d:25:30:27:15:0c:9c:b9:
3c:81:1e:11:31:01:61:94:d4:f8:0c:ea:b4:67:33:
13:d2:1c:0f:20:80:66:09:c7:d9:d4:3e:61:a3:c2:
47:39:ea:50:3b:c0:56:05:2b:bb:0f:eb:66:f8:73:
a8:8d:19:ad:81:37:b0:7f:8a:dc:c0:92:c6:98:dd:
7d:b4:2e:ae:42:dc:dc:2c:0d:7f:da:d1:fd:d5:bd:
2b:9a:f0:cb:c7:fc:6f:bd:ed:5c:26:8f:ba:b1:d0:
36:10:99:66:5b:24:4e:d9:d3:39:84:6e:c9:80:ee:
b7:eb:85:04:d1:76:73:da:40:a4:d7:84:f3:75:e2:
8f:ab:34:32:fc:a2:6b:e8:ff:ea:f3:09:27:eb:4e:
0a:a4:ac:fc:98:8c:82:80:e7:30:c0:5f:44:69:1b:
f4:14:a6:ca:9d:97:fc:36:53:e4:c9:38:4b:7a:f7:
f1:b7:de:d6:e1:25:17:0a:f6:19:97:99:a3:c6:82:
42:69:ce:7a:64:de:85:c9:0c:5f:1a:65:bd:a6:d2:
8a:23:56:88:6c:dd:da:27:c6:cd:18:a5:e8:9c:cc:
09:c6:6f:9f:18:9d:93:1b:bb:20:04:97:9b:09:14:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D0:69:D6:DF:9B:38:BD:0C:FC:76:EE:13:1A:05:D0:E8:6F:B2:7D
X509v3 Authority Key Identifier:
keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/06239EBADFEA11ED835B4D0EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.208.157.0/24
203.208.170.0/24
Signature Algorithm: sha256WithRSAEncryption
55:72:90:4c:75:2f:05:21:4b:64:5a:a1:4e:f0:99:80:05:77:
a9:6c:97:09:85:20:8e:5d:7f:06:92:c6:46:68:26:a2:0a:7d:
87:f2:b8:1b:9e:31:e1:2c:9b:c8:89:f1:c6:19:0b:24:85:83:
d6:e3:ae:ce:a3:5f:80:f4:31:25:fb:7c:cf:21:2e:b6:32:4c:
0f:cb:a9:b5:da:ff:a9:01:83:d2:9c:93:85:d1:bb:b0:ed:e3:
3c:c2:b3:77:c6:5e:eb:88:50:6d:fe:2b:3f:de:4c:3a:a5:e5:
ff:c4:b5:62:ef:e8:06:bb:2c:ed:ba:61:dd:9d:68:29:5f:46:
7d:3d:4b:21:61:34:82:91:6c:fd:7d:13:86:4d:28:4c:23:b5:
99:84:98:2f:e4:ae:11:ea:6e:1d:ae:44:64:ea:1c:4e:04:e9:
42:f7:85:06:b4:c8:38:55:9b:3b:36:f8:2b:c7:9b:e5:17:59:
1b:6c:8f:73:2d:83:2f:82:63:a0:4e:8d:7e:a6:f1:55:c3:1d:
70:d9:22:85:ee:f5:9f:72:4d:10:53:8d:37:12:87:17:57:83:
12:66:c1:aa:31:ef:54:e8:bd:e1:20:7f:9b:02:b7:2b:1e:fc:
1c:b1:36:da:1e:88:15:9b:6d:b9:84:f3:8c:d6:cb:a4:2d:61:
0c:77:69:57
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICJBMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM2MkIxMTAvBgNVBAUTKDUwRjIwRUE5RTk3NUFFNEM0Qzg2NjdDQjU3RjdCQ0Y1
NzAyMTVDOTYwHhcNMjQwODIwMTYwMzIwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NmM0YmU0Ny0wODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyMGJpVw63DDZXYxwHGTtTVvGjCDyLSUwJxUMnLk8gR4RMQFhlNT4DOq0ZzMT
0hwPIIBmCcfZ1D5ho8JHOepQO8BWBSu7D+tm+HOojRmtgTewf4rcwJLGmN19tC6u
QtzcLA1/2tH91b0rmvDLx/xvve1cJo+6sdA2EJlmWyRO2dM5hG7JgO6364UE0XZz
2kCk14TzdeKPqzQy/KJr6P/q8wkn604KpKz8mIyCgOcwwF9EaRv0FKbKnZf8NlPk
yThLevfxt97W4SUXCvYZl5mjxoJCac56ZN6FyQxfGmW9ptKKI1aIbN3aJ8bNGKXo
nMwJxm+fGJ2TG7sgBJebCRQ/MQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBzQadbf
mzi9DPx27hMaBdDob7J9MB8GA1UdIwQYMBaAFFDyDqnpda5MTIZny1f3vPVwIVyW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzYyQi82NEEwNTE0NjYw
MTIxMUU1QkU5MjUwNzBDNEY5QUUwMi9VUElPcWVsMXJreE1obWZMVl9lODlYQWhY
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VQSU9xZWwxcmt4TWhtZkxWX2U4OVhBaFhKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUM2MkIvNjRBMDUxNDY2MDEyMTFFNUJFOTI1MDcwQzRGOUFFMDIvMDYyMzlFQkFE
RkVBMTFFRDgzNUI0RDBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADL0J0DBADL0KowDQYJKoZIhvcNAQELBQADggEBAFVykEx1
LwUhS2RaoU7wmYAFd6lslwmFII5dfwaSxkZoJqIKfYfyuBueMeEsm8iJ8cYZCySF
g9bjrs6jX4D0MSX7fM8hLrYyTA/LqbXa/6kBg9Kck4XRu7Dt4zzCs3fGXuuIUG3+
Kz/eTDql5f/EtWLv6Aa7LO26Yd2daClfRn09SyFhNIKRbP19E4ZNKEwjtZmEmC/k
rhHqbh2uRGTqHE4E6UL3hQa0yDhVmzs2+CvHm+UXWRtsj3Mtgy+CY6BOjX6m8VXD
HXDZIoXu9Z9yTRBTjTcShxdXgxJmwaox71ToveEgf5sCtyse/ByxNtoeiBWbbbmE
84zWy6QtYQx3aVc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:03:42 2025 by rpki-client