Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/D48D0E2068D511EE9E584265C4F9AE02.roa
File: D48D0E2068D511EE9E584265C4F9AE02.roa (raw, json)
Hash identifier: MM/WWLBHS3SvGz0WKT/q9cCN/cBi9l4gcWUHxBDMOaw=
Subject key identifier: AE:C9:21:9E:EF:58:BE:CE:31:9C:1C:3A:CA:74:92:AE:E9:8A:68:F8
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 04E5
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/D48D0E2068D511EE9E584265C4F9AE02.roa
Signing time: Fri 29 Dec 2023 00:42:46 +0000
ROA not before: Fri 29 Dec 2023 00:42:46 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 207713
IP address blocks: 122.50.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1253 (0x4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9
Validity
Not Before: Dec 29 00:42:46 2023 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=658e1605-8f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:50:ee:a5:ec:6e:28:02:fb:1e:cf:e1:34:
53:14:04:9d:cf:64:a2:5c:54:8c:e3:7c:fc:dc:22:
28:ff:7f:a9:9c:d3:e8:bf:14:d8:70:a3:43:01:56:
f3:31:7d:71:7e:05:6e:7b:69:56:dd:0b:ea:c2:46:
47:c1:b1:5d:96:e6:93:eb:b3:29:c5:cc:db:5d:67:
d7:4b:f6:e7:29:5a:cd:40:f4:f6:b6:c9:67:30:bc:
f8:8d:6b:69:41:7b:8a:ff:90:58:c0:84:84:76:52:
bc:75:2c:31:ac:d9:aa:ed:21:8b:87:93:dd:06:a5:
7f:84:68:aa:15:54:cd:e6:03:de:fc:ae:44:ed:7d:
14:97:29:26:7e:76:f5:8d:b4:c1:40:13:29:6d:9d:
5c:57:e0:da:bc:55:45:41:fd:82:4e:68:b3:11:95:
30:ff:c1:b5:39:70:65:64:ec:c0:c0:d2:96:f9:7c:
26:e2:a2:96:65:f2:bf:21:84:f3:6f:0c:52:53:74:
cf:89:b7:47:cb:95:14:8a:2f:77:ed:7a:b4:3f:63:
2e:f4:99:ca:81:b5:9c:45:65:29:f0:0d:0d:b4:ef:
ab:51:20:22:45:0f:89:df:b8:54:b8:49:a1:a2:4c:
60:95:9b:bd:a0:90:6b:25:8b:16:a3:8d:94:d2:89:
60:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C9:21:9E:EF:58:BE:CE:31:9C:1C:3A:CA:74:92:AE:E9:8A:68:F8
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/D48D0E2068D511EE9E584265C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.50.1.0/24
Signature Algorithm: sha256WithRSAEncryption
91:00:9d:49:9e:97:8e:33:87:22:5c:d6:e8:8c:98:67:94:c1:
67:47:1d:c3:82:6d:e5:f6:6a:a6:a2:2c:94:6b:39:f5:81:c9:
6d:ce:41:41:e0:b6:57:c9:f3:24:cb:81:cc:dd:7c:52:8e:7c:
43:71:ba:0d:44:7c:1f:bd:df:89:d7:38:ad:17:3f:ba:aa:b0:
3d:97:4a:07:ac:7b:35:f3:68:0a:84:01:36:5a:e3:36:c7:c9:
fa:e8:ad:9e:5b:2b:a5:d7:28:16:ba:52:13:80:36:d3:15:8a:
ff:79:af:2d:03:dd:d5:19:d5:60:4b:c3:3c:86:30:0e:5f:e0:
98:73:9c:b2:0b:5f:3a:7e:d2:b2:85:dd:f3:87:0d:0a:d7:25:
87:01:93:06:3d:d7:3f:39:6a:24:3e:77:8b:cb:09:54:f9:d4:
c7:15:c9:97:73:84:10:80:29:f4:3f:64:a4:6f:5b:66:9e:60:
5d:9b:d6:0b:85:fb:e0:d3:2a:8e:9d:18:3c:64:58:42:d5:51:
42:b4:38:0f:8e:f7:5a:27:2b:34:09:5f:61:34:d9:6f:b0:08:
8e:14:0d:53:62:90:cd:26:cb:d9:4f:52:18:09:db:92:30:8d:
73:d7:46:ce:fd:19:33:62:37:da:87:bc:f5:d8:e4:ca:0a:d5:
1d:6b:ce:86
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC
NTc3MzQ1NkIwHhcNMjMxMjI5MDA0MjQ2WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NThlMTYwNS04ZjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvqBQ7qXsbigC+x7P4TRTFASdz2SiXFSM43z83CIo/3+pnNPovxTYcKNDAVbz
MX1xfgVue2lW3QvqwkZHwbFdluaT67MpxczbXWfXS/bnKVrNQPT2tslnMLz4jWtp
QXuK/5BYwISEdlK8dSwxrNmq7SGLh5PdBqV/hGiqFVTN5gPe/K5E7X0Ulykmfnb1
jbTBQBMpbZ1cV+DavFVFQf2CTmizEZUw/8G1OXBlZOzAwNKW+Xwm4qKWZfK/IYTz
bwxSU3TPibdHy5UUii937Xq0P2Mu9JnKgbWcRWUp8A0NtO+rUSAiRQ+J37hUuEmh
okxglZu9oJBrJYsWo42U0olgMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK7JIZ7v
WL7OMZwcOsp0kq7pimj4MB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4
RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQ4RDkvNTQ4M0JGQjZDOEZCMTFFQkJBNUJBRTUxQzRGOUFFMDIvRDQ4RDBFMjA2
OEQ1MTFFRTlFNTg0MjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB6MgEwDQYJKoZIhvcNAQELBQADggEBAJEAnUmel44zhyJc
1uiMmGeUwWdHHcOCbeX2aqaiLJRrOfWByW3OQUHgtlfJ8yTLgczdfFKOfENxug1E
fB+934nXOK0XP7qqsD2XSgesezXzaAqEATZa4zbHyfrorZ5bK6XXKBa6UhOANtMV
iv95ry0D3dUZ1WBLwzyGMA5f4JhznLILXzp+0rKF3fOHDQrXJYcBkwY91z85aiQ+
d4vLCVT51McVyZdzhBCAKfQ/ZKRvW2aeYF2b1guF++DTKo6dGDxkWELVUUK0OA+O
91onKzQJX2E02W+wCI4UDVNikM0my9lPUhgJ25IwjXPXRs79GTNiN9qHvPXY5MoK
1R1rzoY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:22:29 2025 by rpki-client