Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0755ACB8463011EEAAF7EC5AC4F9AE02.roa
File: 0755ACB8463011EEAAF7EC5AC4F9AE02.roa (raw, json)
Hash identifier: +VhYgOWDN8F3G2Ka8ZAEI0UPplqufe7Q/2MvCyio2a0=
Subject key identifier: 76:85:09:50:52:02:37:EF:75:02:11:FE:E9:21:5A:AC:52:95:20:6E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 78DA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0755ACB8463011EEAAF7EC5AC4F9AE02.roa
Signing time: Tue 29 Aug 2023 05:50:59 +0000
ROA not before: Tue 29 Aug 2023 05:50:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132978
IP address blocks: 103.170.156.0/23 maxlen: 24
103.182.58.0/24 maxlen: 24
2001:df1:5b40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30938 (0x78da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 29 05:50:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64ed8743-f23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:65:5d:44:8c:e9:3c:27:52:b2:f8:22:0b:
f8:df:e8:fc:c3:37:eb:cf:ce:f6:a3:38:b2:a2:9b:
70:f6:8b:02:b2:5d:85:4a:ff:e0:63:fc:32:ef:57:
ae:61:64:30:ca:09:b5:f0:0a:cf:26:95:de:c8:4d:
a7:b5:14:bc:6a:e2:0a:8f:06:5e:97:2d:29:e0:dc:
15:20:e7:54:12:82:3d:44:5c:1e:bc:81:c9:bf:e8:
64:be:55:dd:92:52:ef:0b:db:ef:11:b7:9e:09:3d:
8c:75:c4:bd:08:96:9d:bd:8e:bf:34:2a:be:86:69:
64:9b:97:b0:47:70:08:1b:ee:c9:4c:25:97:87:28:
23:dd:1d:de:fb:27:ba:47:49:a3:9b:bf:2c:19:a2:
d8:81:e0:2e:12:a4:ca:ff:ac:89:2e:9a:32:c0:b3:
16:74:dd:6f:f7:6d:c4:3b:a8:6e:42:74:7c:47:44:
7e:28:77:24:82:25:1d:a1:3a:4c:f2:fd:95:2d:f3:
28:34:4c:e9:aa:d0:41:7d:69:ff:d1:d1:1c:24:c9:
bb:7c:f2:c4:3a:b6:e4:e7:be:d1:ef:87:ac:8a:13:
e1:bc:51:62:d4:9e:17:dd:40:70:62:f1:b1:96:59:
f8:26:3b:cf:5a:e7:de:2c:4c:83:4d:c9:6c:8a:bf:
46:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:85:09:50:52:02:37:EF:75:02:11:FE:E9:21:5A:AC:52:95:20:6E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0755ACB8463011EEAAF7EC5AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.170.156.0/23
103.182.58.0/24
IPv6:
2001:df1:5b40::/48
Signature Algorithm: sha256WithRSAEncryption
17:83:ff:e1:49:07:26:53:f3:05:78:5e:74:eb:da:1d:c2:9e:
a8:ed:4b:d7:93:76:98:8a:27:6e:b0:15:fa:39:0f:da:60:ec:
0c:c0:2f:c4:9d:db:dc:bb:8b:61:bb:95:4c:39:4d:59:20:0e:
f9:05:93:38:b0:e9:2d:7b:ca:53:13:73:65:be:9d:53:b5:5b:
f7:4d:6c:a6:23:b5:6a:86:6e:87:60:fe:c0:44:09:58:c8:eb:
8d:a1:60:42:3f:42:d9:7b:39:96:f4:1d:6f:34:b5:77:10:29:
a1:9b:1c:b9:0c:0e:6d:6e:cd:e0:cc:a6:6d:5b:1f:3e:ee:57:
0e:62:98:9b:fa:82:ea:b0:b8:53:f7:ad:43:90:c6:36:8d:d5:
3a:23:06:bb:be:e6:26:8c:85:2b:f0:fb:3b:d0:a8:c0:51:e7:
9f:56:3a:23:56:fd:bc:83:60:0c:93:c5:28:15:d9:08:1c:81:
ce:7f:02:de:8b:b5:08:54:4a:ff:ee:c0:9e:5f:56:ce:62:60:
8e:83:20:41:7a:4c:e9:2b:92:8a:3e:e7:5c:53:02:b4:d4:cc:
eb:33:a8:41:8d:5b:4a:69:5b:6a:08:66:12:85:27:fb:9f:02:
e3:eb:93:47:76:70:3b:56:d1:33:b4:f6:c8:89:ef:27:56:07:
e1:09:d5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:52 2025 by rpki-client