Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A2F72CA17F911EFA4D7B236C4F9AE02.roa
File: 0A2F72CA17F911EFA4D7B236C4F9AE02.roa (raw, json)
Hash identifier: 6wkKfeqswr69lzUXRW0bXXMNnaZiiiHA9aWMqo0xc1Q=
Subject key identifier: 14:73:65:E5:CF:98:F7:B5:92:43:52:3E:99:CE:AE:59:94:1A:95:C9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 87B5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A2F72CA17F911EFA4D7B236C4F9AE02.roa
Signing time: Wed 22 May 2024 05:06:26 +0000
ROA not before: Wed 22 May 2024 05:06:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135722
IP address blocks: 103.127.60.0/23 maxlen: 23
202.71.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34741 (0x87b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 22 05:06:26 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=664d7d51-7d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:61:6a:81:0b:0b:1b:48:de:07:a5:42:b5:fd:
52:ab:b9:98:8a:e8:6b:3a:30:95:c2:c1:31:f2:a4:
e9:87:db:c6:5b:bb:31:6d:0f:c3:45:a2:7a:8c:a6:
04:99:db:fb:3f:19:f8:85:01:d0:c1:5e:70:67:34:
81:18:af:66:de:94:17:ed:73:9c:a2:62:f8:1e:41:
58:bb:d7:a7:fc:a8:75:40:54:32:6c:c7:4f:cd:44:
de:87:d5:00:d7:47:a1:0f:b4:48:02:8a:2f:6d:20:
11:1a:11:c7:42:66:f9:3f:a1:c8:db:2a:d4:a7:d7:
f7:b3:69:a9:1a:d4:a3:ee:ef:98:f8:79:85:49:7e:
b3:fb:2b:f5:20:4f:b2:ca:a3:83:86:ed:84:6d:d1:
76:c7:33:fa:7a:46:0d:2a:c4:59:2a:8f:d3:c9:85:
72:f6:49:d4:cc:5e:96:a2:67:60:d0:a0:98:21:da:
36:b6:9b:1d:72:f5:e1:01:31:73:7e:01:f2:70:3f:
2a:b3:6e:27:c0:84:ba:d5:ca:f4:2f:07:58:22:d5:
7d:b0:4c:da:97:f5:29:0c:2b:4a:ce:e9:3d:38:21:
74:28:d0:cc:79:2e:7b:59:a6:98:5a:20:1a:cc:80:
68:4d:c4:9b:7e:3b:19:9f:9c:48:e7:bb:5a:52:3f:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:73:65:E5:CF:98:F7:B5:92:43:52:3E:99:CE:AE:59:94:1A:95:C9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0A2F72CA17F911EFA4D7B236C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.60.0/23
202.71.156.0/22
Signature Algorithm: sha256WithRSAEncryption
75:40:eb:4b:d6:87:3e:ce:4f:a6:a7:10:e2:5b:ff:76:7b:0f:
3e:80:d2:da:df:ce:d4:42:a8:0b:df:c3:00:12:05:5a:2c:79:
19:29:e2:f4:cd:9f:57:56:9a:cf:32:ed:81:8b:bf:c8:61:db:
f1:66:05:46:35:cd:4d:c6:3c:55:19:86:43:e2:4e:af:77:f4:
3b:f5:dd:1d:7e:7b:6b:a2:d9:25:01:a2:00:0f:5d:5e:fd:26:
28:d1:90:4f:cb:d7:37:85:ab:00:01:e8:af:47:82:99:97:7c:
ed:c0:67:e6:45:39:e5:49:ea:95:60:d8:6e:3b:70:85:49:ae:
e7:f9:f9:43:18:d3:9f:e0:9b:a3:25:f6:85:a0:80:97:ac:af:
ab:87:db:fb:e6:0c:00:db:23:8a:ac:87:7d:2d:5c:85:99:05:
f1:b0:31:22:47:03:b1:19:bc:63:cc:04:9c:39:88:8c:2c:05:
91:ed:fe:58:51:a5:46:87:3b:c0:f4:a1:5d:0f:d5:fc:40:b9:
be:73:86:9d:e4:80:5b:c7:dc:a2:c1:70:d1:2d:ca:aa:1e:08:
7c:84:8e:3b:3a:90:7b:10:26:0d:2a:27:8c:20:4d:dd:bb:d2:
6a:9c:8f:0d:cf:e4:7f:d1:02:01:8f:32:d0:cd:c3:74:29:bf:
81:d7:c5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:00:37 2025 by rpki-client