Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/3E6BCA6A912511EBB0270738C4F9AE02.roa
File: 3E6BCA6A912511EBB0270738C4F9AE02.roa (raw, json)
Hash identifier: A9rThl3FoOc3UI4pEM8sFZ4EouFKASPqDt9/k6x5psA=
Subject key identifier: 42:6D:54:37:73:F7:07:D9:12:9F:38:28:F1:73:40:90:62:76:86:40
Certificate issuer: /CN=A915CF83/serialNumber=F55AAC468AF164A5939D72EAFDD3A4733A799609
Certificate serial: 02
Authority key identifier: F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/3E6BCA6A912511EBB0270738C4F9AE02.roa
Signing time: Tue 30 Mar 2021 06:57:52 +0000
ROA not before: Tue 30 Mar 2021 06:57:52 +0000
ROA not after: Wed 01 Mar 2028 00:00:00 +0000
asID: 134819
IP address blocks: 103.230.164.0/24 maxlen: 24
2001:df7:8400::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915CF83
Validity
Not Before: Mar 30 06:57:52 2021 GMT
Not After : Mar 1 00:00:00 2028 GMT
Subject: CN=6062cbef-1801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:90:86:ce:f3:05:f8:b3:4e:94:60:bd:43:92:
eb:43:d5:69:25:97:4c:c4:6e:8c:4c:ce:fd:63:89:
f9:09:90:6f:62:a3:e2:14:a3:5f:46:93:28:75:77:
98:1a:ad:6b:da:b3:19:c7:4d:7c:12:53:2e:87:50:
35:df:88:0e:9e:02:01:51:ed:4d:c2:d3:49:89:68:
43:c0:b8:14:f5:ab:3e:e5:f5:e6:2c:07:d4:d4:76:
d2:f6:14:e5:61:9e:be:81:5c:81:76:77:d0:8b:86:
ae:f4:00:ab:b6:83:cc:62:52:f3:be:41:b7:f8:50:
fd:bf:75:ee:2f:d7:15:36:95:69:e0:f1:c6:b0:9f:
d8:40:a2:31:08:d4:5c:60:89:6c:e6:dc:e1:a2:a2:
a3:63:0e:b2:5c:b9:41:42:5a:1b:98:52:c5:56:ad:
a6:85:29:8c:cf:4a:c7:38:4c:7a:df:3d:1b:2d:3b:
e9:1d:25:bf:79:c5:ba:aa:33:83:ab:9b:55:c0:a9:
70:2e:a1:95:52:03:fe:cf:9a:7b:19:3d:5f:cb:98:
36:78:96:15:86:d7:c0:91:cc:7d:07:d2:5e:4f:29:
85:ef:ef:8f:b7:26:36:58:90:ad:05:ca:0a:59:a1:
54:35:c8:5a:5b:a9:76:f5:0b:63:56:46:d4:db:07:
ea:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6D:54:37:73:F7:07:D9:12:9F:38:28:F1:73:40:90:62:76:86:40
X509v3 Authority Key Identifier:
keyid:F5:5A:AC:46:8A:F1:64:A5:93:9D:72:EA:FD:D3:A4:73:3A:79:96:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/9VqsRorxZKWTnXLq_dOkczp5lgk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9VqsRorxZKWTnXLq_dOkczp5lgk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CF83/A3996106912311EB90D15C36C4F9AE02/3E6BCA6A912511EBB0270738C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.164.0/24
IPv6:
2001:df7:8400::/48
Signature Algorithm: sha256WithRSAEncryption
2a:b3:e0:db:71:78:5c:d0:43:2b:fd:aa:39:8c:0c:72:3f:89:
c6:ae:06:20:04:36:56:3e:88:be:0f:2b:b0:d1:6d:22:99:b3:
a8:bb:28:e7:95:bf:66:02:49:d0:d1:40:48:12:2a:6a:72:ca:
be:7c:e4:00:ba:76:b4:88:0e:82:65:d5:99:de:e2:32:13:b8:
43:89:4e:a7:d0:93:23:e8:55:ab:82:ec:62:3b:12:5d:36:4c:
b4:73:34:99:32:85:aa:80:be:cb:c7:2b:b1:93:64:e0:f8:17:
04:f6:02:f8:82:d1:a9:10:ab:7b:4d:df:16:d5:2b:08:6e:c8:
b5:64:6e:6b:5a:cd:59:73:95:11:e1:a5:83:97:12:37:e2:88:
30:7d:d2:53:87:d0:6e:d6:c0:e4:aa:9d:39:59:94:5f:ba:b8:
f4:c9:5d:1b:ba:d0:13:10:b2:ff:0c:1e:de:4c:ce:c8:98:6d:
48:79:aa:72:94:09:df:31:8d:00:d8:78:ec:49:33:94:fc:0e:
f0:78:ae:78:1e:06:d8:4d:2c:9d:af:e0:8d:ea:80:0d:40:73:
ad:73:c2:2b:94:83:06:70:af:b2:d6:a3:fc:3e:a4:72:ce:f0:
a0:74:c6:ff:fd:31:23:1f:bf:d0:bc:59:b1:8e:ad:64:cd:ab:
b2:35:64:6b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
Q0Y4MzExMC8GA1UEBRMoRjU1QUFDNDY4QUYxNjRBNTkzOUQ3MkVBRkREM0E0NzMz
QTc5OTYwOTAeFw0yMTAzMzAwNjU3NTJaFw0yODAzMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYwNjJjYmVmLTE4MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDckIbO8wX4s06UYL1DkutD1Wkll0zEboxMzv1jifkJkG9io+IUo19Gkyh1d5ga
rWvasxnHTXwSUy6HUDXfiA6eAgFR7U3C00mJaEPAuBT1qz7l9eYsB9TUdtL2FOVh
nr6BXIF2d9CLhq70AKu2g8xiUvO+Qbf4UP2/de4v1xU2lWng8cawn9hAojEI1Fxg
iWzm3OGioqNjDrJcuUFCWhuYUsVWraaFKYzPSsc4THrfPRstO+kdJb95xbqqM4Or
m1XAqXAuoZVSA/7PmnsZPV/LmDZ4lhWG18CRzH0H0l5PKYXv74+3JjZYkK0FygpZ
oVQ1yFpbqXb1C2NWRtTbB+qBAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUQm1UN3P3
B9kSnzgo8XNAkGJ2hkAwHwYDVR0jBBgwFoAU9VqsRorxZKWTnXLq/dOkczp5lgkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDRjgzL0EzOTk2MTA2OTEy
MzExRUI5MEQxNUMzNkM0RjlBRTAyLzlWcXNSb3J4WktXVG5YTHFfZE9rY3pwNWxn
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOVZxc1JvcnhaS1dUblhMcV9kT2tjenA1bGdrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Q0Y4My9BMzk5NjEwNjkxMjMxMUVCOTBEMTVDMzZDNEY5QUUwMi8zRTZCQ0E2QTkx
MjUxMUVCQjAyNzA3MzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAGfmpDAPBAIAAjAJAwcAIAEN94QAMA0GCSqGSIb3DQEBCwUA
A4IBAQAqs+DbcXhc0EMr/ao5jAxyP4nGrgYgBDZWPoi+Dyuw0W0imbOouyjnlb9m
AknQ0UBIEipqcsq+fOQAuna0iA6CZdWZ3uIyE7hDiU6n0JMj6FWrguxiOxJdNky0
czSZMoWqgL7Lxyuxk2Tg+BcE9gL4gtGpEKt7Td8W1SsIbsi1ZG5rWs1Zc5UR4aWD
lxI34ogwfdJTh9Bu1sDkqp05WZRfurj0yV0butATELL/DB7eTM7ImG1IeapylAnf
MY0A2HjsSTOU/A7weK54HgbYTSydr+CN6oANQHOtc8IrlIMGcK+y1qP8PqRyzvCg
dMb//TEjH7/QvFmxjq1kzauyNWRr
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:31:05 2025 by rpki-client