Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/F20E2D224BC411EEA562324EC4F9AE02.roa
File: F20E2D224BC411EEA562324EC4F9AE02.roa (raw, json)
Hash identifier: +IlKiRInneTf8UV3gr0IQQYAR2iZQ/noU81OQkCXS30=
Subject key identifier: 7C:D1:17:3A:CE:32:B2:8A:CE:B0:5C:32:D9:85:6E:A5:84:9E:A8:21
Certificate issuer: /CN=A917DD85/serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5
Certificate serial: 02
Authority key identifier: 94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/F20E2D224BC411EEA562324EC4F9AE02.roa
Signing time: Tue 05 Sep 2023 08:19:34 +0000
ROA not before: Tue 05 Sep 2023 08:19:34 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 150028
IP address blocks: 103.126.142.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917DD85, serialNumber=94437EDDCC8D06989E09500543C91BDF0D3F48E5
Validity
Not Before: Sep 5 08:19:34 2023 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=64f6e496-86f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:19:dc:59:1a:e3:87:ee:96:b2:21:f4:d2:
45:db:29:0c:a9:2c:05:e6:c3:a0:e7:f2:8d:4a:af:
43:ef:7c:c2:80:d4:a1:f2:2f:fd:47:9d:da:60:01:
97:df:80:30:34:bd:00:06:b1:e3:38:24:dc:7a:7d:
56:b5:11:eb:51:9b:b6:cd:2d:cf:7e:e2:21:c9:7e:
f7:09:1f:2c:0f:56:26:7e:b7:2b:58:20:ee:36:21:
e5:2f:be:d1:ea:88:7d:50:9d:79:8a:d8:ba:34:d4:
0c:03:b1:17:41:a1:5c:c2:b9:74:01:a9:22:25:91:
61:5f:95:29:17:58:3c:36:56:5b:30:b9:fc:49:14:
26:97:be:0a:ba:e9:fa:d2:7b:1e:3f:ba:51:24:c9:
26:09:bc:a9:29:08:fe:d8:32:a2:76:81:d5:26:f3:
1d:42:23:02:b3:db:d6:9e:25:76:87:22:e9:5d:57:
43:68:8f:fc:7d:f7:6e:52:19:6d:08:f3:bf:41:0d:
4c:18:3c:65:b1:ba:92:95:cc:46:ca:53:93:bf:37:
43:47:b5:83:88:a4:ca:6b:be:69:6c:a8:9c:38:96:
28:89:3b:b2:52:e8:a1:bd:88:d9:6d:ee:41:e4:70:
d2:74:1a:43:05:22:f9:95:f2:65:40:97:5d:6f:7a:
8e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D1:17:3A:CE:32:B2:8A:CE:B0:5C:32:D9:85:6E:A5:84:9E:A8:21
X509v3 Authority Key Identifier:
keyid:94:43:7E:DD:CC:8D:06:98:9E:09:50:05:43:C9:1B:DF:0D:3F:48:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/lEN-3cyNBpieCVAFQ8kb3w0_SOU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lEN-3cyNBpieCVAFQ8kb3w0_SOU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DD85/846F4A684BC311EE8C657319C4F9AE02/F20E2D224BC411EEA562324EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.126.142.0/23
Signature Algorithm: sha256WithRSAEncryption
54:30:44:92:81:a6:a6:50:a9:ce:eb:64:83:18:c2:b2:28:3b:
43:82:76:f1:58:75:04:5b:84:6b:39:9a:e6:2e:5c:d2:a2:65:
c1:5d:48:41:61:da:76:b4:24:8b:ee:08:43:84:2d:e0:84:f9:
8a:34:c7:d1:e4:c2:39:d2:42:08:09:bf:a7:a4:3f:4b:d1:48:
40:0f:91:0a:cf:62:5c:d8:3d:72:c9:4c:58:a0:6e:02:9d:d6:
e1:2b:05:ea:8f:4f:95:d3:56:7e:1e:73:9c:07:b7:4e:59:12:
f1:24:9e:bc:fa:bd:98:73:74:03:47:08:1e:ac:6e:1f:87:b1:
7e:22:9a:d6:af:04:64:16:63:3a:4b:4b:de:e7:a6:59:ef:b5:
ed:78:22:dd:36:92:ad:46:73:69:5a:3e:49:e0:44:ae:c9:94:
87:34:da:be:73:66:1f:ef:2d:f8:89:e4:e3:e8:fc:bb:7d:22:
6e:b6:aa:2c:5f:79:d3:28:3f:53:3a:07:4f:20:cd:47:9a:a3:
4a:e6:50:e1:0a:4b:9a:1d:70:49:46:ee:4a:e1:4d:7b:b1:55:
f9:85:77:69:e2:d3:74:20:b2:1c:1a:da:e0:7e:5c:25:fc:c6:
3b:9a:3d:09:05:13:52:b2:1d:f4:36:4c:22:e6:e8:63:57:05:
b2:71:1f:d1
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
REQ4NTExMC8GA1UEBRMoOTQ0MzdFRERDQzhEMDY5ODlFMDk1MDA1NDNDOTFCREYw
RDNGNDhFNTAeFw0yMzA5MDUwODE5MzRaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0ZjZlNDk2LTg2ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCmpxncWRrjh+6WsiH00kXbKQypLAXmw6Dn8o1Kr0PvfMKA1KHyL/1HndpgAZff
gDA0vQAGseM4JNx6fVa1EetRm7bNLc9+4iHJfvcJHywPViZ+tytYIO42IeUvvtHq
iH1QnXmK2Lo01AwDsRdBoVzCuXQBqSIlkWFflSkXWDw2VlswufxJFCaXvgq66frS
ex4/ulEkySYJvKkpCP7YMqJ2gdUm8x1CIwKz29aeJXaHIuldV0Noj/x9925SGW0I
879BDUwYPGWxupKVzEbKU5O/N0NHtYOIpMprvmlsqJw4liiJO7JS6KG9iNlt7kHk
cNJ0GkMFIvmV8mVAl11veo5xAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUfNEXOs4y
sorOsFwy2YVupYSeqCEwHwYDVR0jBBgwFoAUlEN+3cyNBpieCVAFQ8kb3w0/SOUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdERDg1Lzg0NkY0QTY4NEJD
MzExRUU4QzY1NzMxOUM0RjlBRTAyL2xFTi0zY3lOQnBpZUNWQUZROGtiM3cwX1NP
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbEVOLTNjeU5CcGllQ1ZBRlE4a2IzdzBfU09VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
REQ4NS84NDZGNEE2ODRCQzMxMUVFOEM2NTczMTlDNEY5QUUwMi9GMjBFMkQyMjRC
QzQxMUVFQTU2MjMyNEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWd+jjANBgkqhkiG9w0BAQsFAAOCAQEAVDBEkoGmplCpzutk
gxjCsig7Q4J28Vh1BFuEazma5i5c0qJlwV1IQWHadrQki+4IQ4Qt4IT5ijTH0eTC
OdJCCAm/p6Q/S9FIQA+RCs9iXNg9cslMWKBuAp3W4SsF6o9PldNWfh5znAe3TlkS
8SSevPq9mHN0A0cIHqxuH4exfiKa1q8EZBZjOktL3uemWe+17Xgi3TaSrUZzaVo+
SeBErsmUhzTavnNmH+8t+Ink4+j8u30ibraqLF950yg/UzoHTyDNR5qjSuZQ4QpL
mh1wSUbuSuFNe7FV+YV3aeLTdCCyHBra4H5cJfzGO5o9CQUTUrId9DZMIuboY1cF
snEf0Q==
-----END CERTIFICATE-----
Generated at Sun Apr 13 02:26:24 2025 by rpki-client