Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/989462126DFD11EC9DBED16AC4F9AE02.roa
File: 989462126DFD11EC9DBED16AC4F9AE02.roa (raw, json)
Hash identifier: Y6Qeuhv69IaJJLJTNVeHIVKSRcMfJ0RIu0oV63ZODe0=
Subject key identifier: 18:78:17:E5:F2:03:0F:B7:A8:3B:A1:43:C4:26:AB:1C:87:95:49:79
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 03F0
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/989462126DFD11EC9DBED16AC4F9AE02.roa
Signing time: Thu 15 Dec 2022 02:22:11 +0000
ROA not before: Thu 15 Dec 2022 02:22:11 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 9387
IP address blocks: 103.79.16.0/22 maxlen: 22
122.50.0.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1008 (0x3f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9
Validity
Not Before: Dec 15 02:22:11 2022 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=639a84d2-057f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2c:fe:ab:d6:d9:2c:a5:97:a7:22:de:41:bd:
4f:fc:72:92:e9:23:83:68:09:b5:c5:f3:82:a3:5a:
20:3d:90:70:3f:c4:c5:bb:57:1f:78:be:23:1b:ce:
33:7f:ed:fe:5c:bd:70:d3:e5:4a:7c:dc:16:ed:4d:
ae:7a:7a:4b:ed:ae:83:4c:f4:d7:d2:c0:56:be:b7:
1e:3a:ca:a1:0b:fd:54:f7:fb:76:77:56:f0:72:59:
9d:cf:42:33:2f:cc:2b:6f:0c:90:b5:57:8c:bb:60:
ee:04:b3:74:30:71:88:eb:d4:de:00:2c:43:2c:0e:
54:7f:3d:b5:2c:11:57:ee:9f:f8:d0:61:b9:96:e6:
6e:8d:22:03:1a:19:92:3a:a4:26:ed:b9:6c:de:ac:
fd:ed:90:c7:e4:86:d8:63:7f:ba:d2:b0:77:fe:4b:
d8:cb:e7:69:52:3e:58:a9:99:b8:ec:29:d1:11:65:
3e:59:e7:86:87:d6:44:0a:40:2a:8f:99:90:21:df:
51:ee:c3:d4:99:74:b9:15:3c:a8:23:8b:57:17:ee:
72:1c:86:6e:72:a1:c4:67:e4:48:ca:3a:2f:b5:34:
22:7e:25:12:4f:f3:2b:49:84:e0:4a:13:8e:8c:ab:
89:ad:2f:e3:25:7b:07:c1:28:60:0a:ea:f2:be:ac:
7f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:78:17:E5:F2:03:0F:B7:A8:3B:A1:43:C4:26:AB:1C:87:95:49:79
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/989462126DFD11EC9DBED16AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.79.16.0/22
122.50.0.0/22
Signature Algorithm: sha256WithRSAEncryption
69:4d:75:da:4b:e3:99:d0:b4:1a:aa:5d:11:8e:7e:db:88:d0:
22:2e:13:6f:03:c9:2c:32:f6:9a:e9:e7:a3:15:9c:be:de:80:
8c:58:fc:10:3e:87:d7:c8:0b:a8:f2:4f:5f:5e:f3:68:d6:bf:
f7:4c:c3:c5:11:2a:9c:b0:d7:33:06:cd:ec:cb:bb:40:14:27:
6e:fd:00:4a:ff:e8:bc:70:19:2a:64:80:39:d7:bf:1d:54:af:
2e:a0:09:dd:d0:04:08:b4:f2:94:45:4c:9d:cc:1a:56:83:a5:
1b:e2:13:2c:ce:bf:a9:ef:c7:ec:ae:3a:85:4e:dd:9c:b6:03:
98:58:dd:31:d3:f2:d9:42:8c:a4:a0:d9:41:96:17:54:99:b6:
f1:63:b2:8c:e3:99:23:30:a9:8a:7a:65:9c:07:76:f2:4a:aa:
90:f4:10:3a:23:3d:7f:15:df:56:99:7b:aa:01:1b:0c:ec:42:
c2:34:c9:d1:9e:39:24:b6:c7:66:f8:14:48:ea:b1:ed:1e:a4:
45:dc:f1:48:96:1f:33:9d:06:fb:b8:15:fc:54:5d:ee:84:d2:
d1:c2:42:03:fc:19:b3:c4:5d:87:f7:13:48:24:a4:01:97:8c:
8f:98:10:44:c3:18:8f:c9:3d:a7:ab:08:e3:88:27:52:11:04:
0b:54:10:c8
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC
NTc3MzQ1NkIwHhcNMjIxMjE1MDIyMjExWhcNMjQwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzlhODRkMi0wNTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8Cz+q9bZLKWXpyLeQb1P/HKS6SODaAm1xfOCo1ogPZBwP8TFu1cfeL4jG84z
f+3+XL1w0+VKfNwW7U2uenpL7a6DTPTX0sBWvrceOsqhC/1U9/t2d1bwclmdz0Iz
L8wrbwyQtVeMu2DuBLN0MHGI69TeACxDLA5Ufz21LBFX7p/40GG5luZujSIDGhmS
OqQm7bls3qz97ZDH5IbYY3+60rB3/kvYy+dpUj5YqZm47CnREWU+WeeGh9ZECkAq
j5mQId9R7sPUmXS5FTyoI4tXF+5yHIZucqHEZ+RIyjovtTQifiUST/MrSYTgShOO
jKuJrS/jJXsHwShgCuryvqx/RQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFBh4F+Xy
Aw+3qDuhQ8QmqxyHlUl5MB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4
RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQ4RDkvNTQ4M0JGQjZDOEZCMTFFQkJBNUJBRTUxQzRGOUFFMDIvOTg5NDYyMTI2
REZEMTFFQzlEQkVEMTZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnTxADBAJ6MgAwDQYJKoZIhvcNAQELBQADggEBAGlNddpL
45nQtBqqXRGOftuI0CIuE28DySwy9prp56MVnL7egIxY/BA+h9fIC6jyT19e82jW
v/dMw8URKpyw1zMGzezLu0AUJ279AEr/6LxwGSpkgDnXvx1Ury6gCd3QBAi08pRF
TJ3MGlaDpRviEyzOv6nvx+yuOoVO3Zy2A5hY3THT8tlCjKSg2UGWF1SZtvFjsozj
mSMwqYp6ZZwHdvJKqpD0EDojPX8V31aZe6oBGwzsQsI0ydGeOSS2x2b4FEjqse0e
pEXc8UiWHzOdBvu4FfxUXe6E0tHCQgP8GbPEXYf3E0gkpAGXjI+YEETDGI/JPaer
COOIJ1IRBAtUEMg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:19:10 2025 by rpki-client