Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/266A625CF25611ED95804341C4F9AE02.roa
File: 266A625CF25611ED95804341C4F9AE02.roa (raw, json)
Hash identifier: tapgQdUV2Yd542wXP2Lz7pxKBXtOXYVylkyP5cUGAuI=
Subject key identifier: 05:4A:B3:FB:65:68:1D:12:CA:41:8B:C7:D6:46:C8:7D:B4:F4:AD:C8
Certificate issuer: /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial: 032D
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/266A625CF25611ED95804341C4F9AE02.roa
Signing time: Sat 03 Feb 2024 02:35:03 +0000
ROA not before: Sat 03 Feb 2024 02:35:03 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 58689
IP address blocks: 103.179.14.0/24 maxlen: 24
103.179.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 813 (0x32d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182047
Validity
Not Before: Feb 3 02:35:03 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=65bda656-22b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:8f:63:a9:59:2c:b1:3d:03:d5:93:c9:3c:
de:3d:69:0c:72:2e:5c:0d:ff:e5:bc:9b:5d:0b:85:
52:f9:ea:01:d0:54:51:f0:51:4f:e3:ab:73:d5:ae:
0c:2d:9d:a8:cc:be:de:1a:93:ef:95:fa:34:7e:18:
70:72:e2:32:d0:cb:39:da:a3:6c:9e:d7:e6:f7:d5:
1b:4f:46:d4:ef:15:1a:9e:7f:a3:be:f7:00:8b:68:
d8:8c:0f:b7:72:0e:6b:49:4b:ec:68:a6:95:4a:6d:
9a:eb:bd:1e:6b:69:98:6f:36:75:6b:47:33:8f:61:
28:9f:ed:81:bb:30:4a:4c:59:0f:87:6b:88:b7:fd:
e2:db:7e:d8:e3:d5:f1:db:9c:30:23:bc:dd:be:88:
5e:01:f0:23:15:c7:13:cd:04:1f:a1:86:33:df:86:
29:ae:e7:58:72:4c:18:6c:06:f4:4a:9b:9b:1c:52:
28:10:61:e2:a2:2b:3f:2e:12:b7:cc:7e:49:39:fa:
f9:0d:38:73:a3:f1:b0:95:37:3c:9a:a9:ff:b7:54:
c3:ce:e3:3e:23:1e:a5:e5:cf:19:62:82:aa:6d:62:
f5:3a:aa:b7:28:8b:18:3c:2f:fd:0f:e3:11:07:1b:
2b:fd:aa:07:43:3e:73:9a:4a:70:08:0d:2f:83:56:
95:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4A:B3:FB:65:68:1D:12:CA:41:8B:C7:D6:46:C8:7D:B4:F4:AD:C8
X509v3 Authority Key Identifier:
keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/266A625CF25611ED95804341C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.14.0/23
Signature Algorithm: sha256WithRSAEncryption
32:97:f8:e0:e5:14:da:f7:30:85:39:a2:40:cb:81:07:e8:04:
2d:30:7f:43:b4:4c:32:8a:22:03:d1:66:5e:f4:f9:27:00:03:
9e:fe:fa:da:55:7b:67:56:76:5d:49:67:96:88:c3:0b:90:eb:
88:b5:39:95:74:9a:13:24:1c:fa:74:29:dd:f1:72:db:16:3c:
a1:5b:c3:c6:0a:51:52:92:df:08:d5:1b:f3:64:6c:ab:c9:f4:
67:7d:c4:0e:d3:f5:a8:56:04:48:c6:33:a6:7a:85:66:64:22:
96:56:fe:af:02:b0:9f:e4:63:da:7c:6e:32:7f:3f:70:24:16:
8f:ed:d6:9b:8b:88:31:a7:e5:2c:b4:29:e0:51:99:9b:de:b4:
6a:4e:f5:99:12:2b:e6:4a:10:cf:69:f5:84:47:3a:f6:83:44:
17:25:38:0f:09:48:68:01:28:e8:d1:ea:78:20:3d:bd:94:28:
24:97:ea:71:09:89:91:5d:11:25:de:b6:c8:04:2a:f1:1f:49:
01:5a:8c:e1:09:0c:c0:9b:ee:9b:21:5b:9d:b7:b7:ff:a2:87:
eb:43:a4:1c:95:c7:25:ef:38:0a:a3:4e:eb:9c:32:13:10:e8:
db:7b:79:4f:34:28:c5:f0:f3:59:3f:af:6f:85:02:41:65:d5:
6c:57:60:26
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODIwNDcxMTAvBgNVBAUTKDY1MDEyQUYwNTcxMDg2QjlFQUIzMDM0NkY2MjRCNjMx
MkE1NTFDMzgwHhcNMjQwMjAzMDIzNTAzWhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NWJkYTY1Ni0yMmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0OCPY6lZLLE9A9WTyTzePWkMci5cDf/lvJtdC4VS+eoB0FRR8FFP46tz1a4M
LZ2ozL7eGpPvlfo0fhhwcuIy0Ms52qNsntfm99UbT0bU7xUann+jvvcAi2jYjA+3
cg5rSUvsaKaVSm2a670ea2mYbzZ1a0czj2Eon+2BuzBKTFkPh2uIt/3i237Y49Xx
25wwI7zdvoheAfAjFccTzQQfoYYz34YprudYckwYbAb0SpubHFIoEGHiois/LhK3
zH5JOfr5DThzo/GwlTc8mqn/t1TDzuM+Ix6l5c8ZYoKqbWL1Oqq3KIsYPC/9D+MR
Bxsr/aoHQz5zmkpwCA0vg1aVbwIDAQABo4IClTCCApEwHQYDVR0OBBYEFAVKs/tl
aB0SykGLx9ZGyH209K3IMB8GA1UdIwQYMBaAFGUBKvBXEIa56rMDRvYktjEqVRw4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjA0Ny8zM0FEQjNFNjZF
MDAxMUVDOUE2M0JENkFDNEY5QUUwMi9aUUVxOEZjUWhybnFzd05HOWlTMk1TcFZI
RGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pRRXE4RmNRaHJucXN3Tkc5aVMyTVNwVkhEZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODIwNDcvMzNBREIzRTY2RTAwMTFFQzlBNjNCRDZBQzRGOUFFMDIvMjY2QTYyNUNG
MjU2MTFFRDk1ODA0MzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnsw4wDQYJKoZIhvcNAQELBQADggEBADKX+ODlFNr3MIU5
okDLgQfoBC0wf0O0TDKKIgPRZl70+ScAA57++tpVe2dWdl1JZ5aIwwuQ64i1OZV0
mhMkHPp0Kd3xctsWPKFbw8YKUVKS3wjVG/NkbKvJ9Gd9xA7T9ahWBEjGM6Z6hWZk
IpZW/q8CsJ/kY9p8bjJ/P3AkFo/t1puLiDGn5Sy0KeBRmZvetGpO9ZkSK+ZKEM9p
9YRHOvaDRBclOA8JSGgBKOjR6nggPb2UKCSX6nEJiZFdESXetsgEKvEfSQFajOEJ
DMCb7pshW523t/+ih+tDpByVxyXvOAqjTuucMhMQ6Nt7eU80KMXw81k/r2+FAkFl
1WxXYCY=
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:57:14 2025 by rpki-client