Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/82E0D450BC5011E6B01A8D4CC4F9AE02.roa
File: 82E0D450BC5011E6B01A8D4CC4F9AE02.roa (raw, json)
Hash identifier: 0pFtdAh/nKnP5eoxsGxODsFcMEqhXHUTJ4P3f5IMFhU=
Subject key identifier: 50:2D:0F:68:C1:63:9D:E6:B8:B1:CF:08:C9:A4:69:3E:2B:B8:82:A0
Certificate issuer: /CN=A91847A0/serialNumber=5328616E7794547EB9CE92B4A8F045E4B2CCC0FC
Certificate serial: 1CAD
Authority key identifier: 53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/82E0D450BC5011E6B01A8D4CC4F9AE02.roa
Signing time: Wed 20 Nov 2024 16:33:47 +0000
ROA not before: Wed 20 Nov 2024 16:33:47 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 134976
IP address blocks: 103.204.100.0/22 maxlen: 22
103.204.100.0/24 maxlen: 24
103.204.101.0/24 maxlen: 24
103.204.102.0/24 maxlen: 24
103.204.103.0/24 maxlen: 24
202.53.156.0/22 maxlen: 22
202.53.156.0/24 maxlen: 24
202.53.157.0/24 maxlen: 24
202.53.158.0/24 maxlen: 24
202.53.159.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7341 (0x1cad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91847A0
Validity
Not Before: Nov 20 16:33:47 2024 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=673e0f6a-f470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5b:97:b2:39:63:7a:98:25:ff:b5:0b:10:48:
d3:ae:dc:ff:7f:d1:f8:3c:67:fc:32:5e:47:d4:e1:
32:58:43:12:d6:27:1d:e6:c1:b0:d6:64:66:09:5d:
e4:b2:05:c5:b5:07:e0:99:54:c7:05:62:a1:aa:5f:
72:41:ce:41:be:99:a8:9f:ac:9a:69:9f:44:bb:1f:
57:15:b4:de:b3:7b:54:13:1f:ab:e0:bf:b6:1a:44:
09:cf:51:8a:58:e0:0f:78:c4:b2:75:1b:3f:5e:e4:
c1:6c:07:bf:ca:cc:c6:39:d8:82:40:d4:e1:26:2e:
67:90:78:74:ef:0b:84:cf:98:c2:f6:34:37:58:7a:
b2:ff:70:1b:58:e8:81:ec:87:99:ff:e8:39:54:50:
60:df:33:5d:a6:90:c6:81:27:97:a8:96:69:00:c3:
90:2b:5f:f5:27:1d:6b:b8:7a:df:87:83:41:67:ec:
cf:01:cd:5f:2c:a6:a2:8c:54:52:2f:3b:7b:5f:e5:
25:2f:24:52:a7:f2:ad:98:7c:7c:cb:e3:79:3f:57:
11:b3:69:ca:ca:a0:16:69:01:8f:62:83:65:b4:cb:
30:ff:db:18:6a:62:2c:b8:58:dc:9d:62:28:48:f3:
a1:28:10:4e:50:42:0f:aa:88:1b:68:95:1b:4f:02:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2D:0F:68:C1:63:9D:E6:B8:B1:CF:08:C9:A4:69:3E:2B:B8:82:A0
X509v3 Authority Key Identifier:
keyid:53:28:61:6E:77:94:54:7E:B9:CE:92:B4:A8:F0:45:E4:B2:CC:C0:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/UyhhbneUVH65zpK0qPBF5LLMwPw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UyhhbneUVH65zpK0qPBF5LLMwPw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A0/0E4AD128BC4F11E6BAF1C24AC4F9AE02/82E0D450BC5011E6B01A8D4CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.204.100.0/22
202.53.156.0/22
Signature Algorithm: sha256WithRSAEncryption
73:44:55:39:70:e7:7f:a5:d3:34:e9:2e:2f:ae:ad:1e:fc:fa:
5d:28:8a:ec:7d:e1:3f:c4:0f:d6:33:9e:30:89:0d:a4:3e:70:
0e:2f:91:1f:55:3e:9a:7a:c4:1e:0b:90:a5:19:10:b0:19:6c:
40:9e:7f:76:10:35:16:3d:d4:0c:bc:0e:0a:5b:fd:42:5b:25:
50:af:22:e0:67:ae:e9:d0:04:18:59:57:f5:81:00:2a:5d:39:
6b:03:f9:f2:b2:0e:c6:89:75:a4:d1:18:c9:ab:ae:0d:35:11:
a8:be:b0:ce:1d:7f:b4:d2:76:d3:ed:66:3f:ce:83:1f:43:36:
0b:8a:ea:93:88:79:40:3e:b0:6d:fe:19:e5:8d:d5:1a:fd:22:
14:f9:2f:19:68:ec:18:7b:0b:dd:fe:84:7e:e2:ba:95:8b:c0:
c1:82:3f:a4:11:c4:b5:9c:db:de:c0:c3:a8:12:64:be:6d:08:
bb:a4:ee:2e:12:19:41:a7:90:29:af:5f:65:a7:b5:20:28:7f:
6e:71:44:77:fe:67:0b:aa:06:fa:d5:bd:b5:57:6a:e8:49:a4:
80:d8:5d:cb:18:af:53:b6:36:53:30:70:c2:2c:e7:c5:31:cf:
81:be:01:14:4e:46:3c:10:8c:26:6a:87:0b:cf:cb:fc:79:71:
fb:5a:88:9d
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICHK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ3QTAxMTAvBgNVBAUTKDUzMjg2MTZFNzc5NDU0N0VCOUNFOTJCNEE4RjA0NUU0
QjJDQ0MwRkMwHhcNMjQxMTIwMTYzMzQ3WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzNlMGY2YS1mNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvVuXsjljepgl/7ULEEjTrtz/f9H4PGf8Ml5H1OEyWEMS1icd5sGw1mRmCV3k
sgXFtQfgmVTHBWKhql9yQc5Bvpmon6yaaZ9Eux9XFbTes3tUEx+r4L+2GkQJz1GK
WOAPeMSydRs/XuTBbAe/yszGOdiCQNThJi5nkHh07wuEz5jC9jQ3WHqy/3AbWOiB
7IeZ/+g5VFBg3zNdppDGgSeXqJZpAMOQK1/1Jx1ruHrfh4NBZ+zPAc1fLKaijFRS
Lzt7X+UlLyRSp/KtmHx8y+N5P1cRs2nKyqAWaQGPYoNltMsw/9sYamIsuFjcnWIo
SPOhKBBOUEIPqogbaJUbTwIyIwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFAtD2jB
Y53muLHPCMmkaT4ruIKgMB8GA1UdIwQYMBaAFFMoYW53lFR+uc6StKjwReSyzMD8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBMC8wRTRBRDEyOEJD
NEYxMUU2QkFGMUMyNEFDNEY5QUUwMi9VeWhoYm5lVVZINjV6cEswcVBCRjVMTE13
UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V5aGhibmVVVkg2NXpwSzBxUEJGNUxMTXdQdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQ3QTAvMEU0QUQxMjhCQzRGMTFFNkJBRjFDMjRBQzRGOUFFMDIvODJFMEQ0NTBC
QzUwMTFFNkIwMUE4RDRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnzGQDBALKNZwwDQYJKoZIhvcNAQELBQADggEBAHNEVTlw
53+l0zTpLi+urR78+l0oiux94T/ED9YznjCJDaQ+cA4vkR9VPpp6xB4LkKUZELAZ
bECef3YQNRY91Ay8Dgpb/UJbJVCvIuBnrunQBBhZV/WBACpdOWsD+fKyDsaJdaTR
GMmrrg01Eai+sM4df7TSdtPtZj/Ogx9DNguK6pOIeUA+sG3+GeWN1Rr9IhT5Lxlo
7Bh7C93+hH7iupWLwMGCP6QRxLWc297Aw6gSZL5tCLuk7i4SGUGnkCmvX2WntSAo
f25xRHf+ZwuqBvrVvbVXauhJpIDYXcsYr1O2NlMwcMIs58Uxz4G+ARRORjwQjCZq
hwvPy/x5cftaiJ0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 02:00:27 2025 by rpki-client