Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0F7D1E2ABCCF11EDB641531FC4F9AE02.roa
File: 0F7D1E2ABCCF11EDB641531FC4F9AE02.roa (raw, json)
Hash identifier: yhpGOGwByvGcMpEgTRnMNb1Acu7iJZAK988qdbKjwGE=
Subject key identifier: 47:2E:32:6E:AE:2B:90:07:D0:24:5D:B6:F4:F2:57:45:61:BA:8C:44
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6873
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0F7D1E2ABCCF11EDB641531FC4F9AE02.roa
Signing time: Mon 17 Apr 2023 05:51:46 +0000
ROA not before: Mon 17 Apr 2023 05:51:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 135735
IP address blocks: 103.67.188.0/22 maxlen: 24
103.76.10.0/24 maxlen: 24
103.76.11.0/24 maxlen: 24
103.120.239.0/24 maxlen: 24
103.127.35.0/24 maxlen: 24
103.132.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26739 (0x6873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Apr 17 05:51:46 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=643cde72-b47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:8f:e8:bd:f4:42:8b:8f:e6:3d:b4:6b:72:
2e:8c:9b:18:50:f2:5b:0e:0c:c5:79:3d:b8:8c:af:
2d:db:8f:b1:80:c0:36:b1:97:51:be:4b:50:31:95:
39:ec:47:b1:7f:b0:56:0b:b4:25:6b:0e:7f:a8:52:
3d:99:20:bb:62:af:3a:0e:54:f6:e0:14:8c:d6:d7:
0b:8f:b5:7e:7e:ad:1e:90:e7:37:ad:4d:e4:be:34:
0e:e6:46:c0:36:28:e7:d8:14:99:04:71:35:82:b3:
33:4e:c8:38:96:bc:e9:d5:88:e9:b3:ac:d7:03:ee:
75:f4:2b:ff:db:1b:c8:ac:38:03:b5:93:9f:9d:61:
36:74:ba:32:f2:28:a6:f7:68:c1:c3:ed:e3:5d:20:
a9:69:ef:97:d9:b1:ea:44:a8:89:a0:a8:6f:bc:99:
34:be:13:ff:e7:ce:e7:79:7f:7d:ba:13:58:16:25:
30:5e:02:95:0d:58:ac:bc:4b:97:93:b8:32:a0:25:
0c:72:d3:08:04:54:50:cf:93:63:8c:1b:af:5e:03:
15:b8:ba:69:a5:5a:76:dd:13:27:ac:11:5f:e9:87:
79:19:bd:fd:68:f7:e1:39:62:60:e4:e9:85:17:ab:
e0:a0:ed:e2:cf:74:e1:ff:a0:b9:6f:b1:e9:e7:1c:
91:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2E:32:6E:AE:2B:90:07:D0:24:5D:B6:F4:F2:57:45:61:BA:8C:44
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0F7D1E2ABCCF11EDB641531FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.67.188.0/22
103.76.10.0/23
103.120.239.0/24
103.127.35.0/24
103.132.171.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ac:24:f6:ce:2d:76:84:57:5a:bf:d6:89:81:5f:71:c1:06:
e4:80:8e:ab:b1:4f:78:72:cc:50:f5:1f:3a:00:04:da:d3:20:
eb:1b:b2:cc:14:fc:f3:0b:6f:8d:94:21:d4:20:9f:5f:e6:30:
1b:46:68:d2:dd:97:b8:c3:fe:54:e4:10:34:46:94:08:66:7e:
e9:f7:fb:92:21:79:bc:78:2e:18:dc:38:53:fc:9e:27:b3:c7:
af:d2:62:7a:a3:1d:bc:58:39:fd:ba:75:01:d6:2e:a6:a1:b2:
bb:df:74:44:5c:c1:bb:18:aa:ef:03:f9:c4:6e:02:61:8f:6a:
59:5f:db:11:da:d9:7b:2b:78:bc:e9:5c:9e:9c:9f:60:ee:42:
88:72:97:98:d7:94:74:d4:23:57:49:1d:c4:9e:cd:55:b6:52:
66:83:14:14:40:8f:fb:18:41:d6:43:b1:63:99:4e:a6:68:13:
e4:84:f5:43:8d:b8:03:17:3c:62:9f:99:13:36:cb:7f:f0:0f:
90:e8:81:9f:db:29:e2:76:00:2f:f8:8f:40:49:14:79:34:0e:
a9:40:a5:77:ce:7e:5e:bb:e5:a8:69:79:f6:84:a5:d3:ce:1f:
bf:3b:41:ee:31:08:90:46:5d:70:c0:c0:b7:90:f8:da:70:64:
99:c7:3a:80
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgICaHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNDE3MDU1MTQ2WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDNjZGU3Mi1iNDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApAyP6L30QouP5j20a3IujJsYUPJbDgzFeT24jK8t24+xgMA2sZdRvktQMZU5
7Eexf7BWC7Qlaw5/qFI9mSC7Yq86DlT24BSM1tcLj7V+fq0ekOc3rU3kvjQO5kbA
Nijn2BSZBHE1grMzTsg4lrzp1Yjps6zXA+519Cv/2xvIrDgDtZOfnWE2dLoy8iim
92jBw+3jXSCpae+X2bHqRKiJoKhvvJk0vhP/587neX99uhNYFiUwXgKVDVisvEuX
k7gyoCUMctMIBFRQz5NjjBuvXgMVuLpppVp23RMnrBFf6Yd5Gb39aPfhOWJg5OmF
F6vgoO3iz3Th/6C5b7Hp5xyRLQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEcuMm6u
K5AH0CRdtvTyV0VhuoxEMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMEY3RDFFMkFC
Q0NGMTFFREI2NDE1MzFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E
KDAmMCQEAgABMB4DBAJnQ7wDBAFnTAoDBABneO8DBABnfyMDBABnhKswDQYJKoZI
hvcNAQELBQADggEBAGisJPbOLXaEV1q/1omBX3HBBuSAjquxT3hyzFD1HzoABNrT
IOsbsswU/PMLb42UIdQgn1/mMBtGaNLdl7jD/lTkEDRGlAhmfun3+5Ihebx4Lhjc
OFP8niezx6/SYnqjHbxYOf26dQHWLqahsrvfdERcwbsYqu8D+cRuAmGPallf2xHa
2XsreLzpXJ6cn2DuQohyl5jXlHTUI1dJHcSezVW2UmaDFBRAj/sYQdZDsWOZTqZo
E+SE9UONuAMXPGKfmRM2y3/wD5DogZ/bKeJ2AC/4j0BJFHk0DqlApXfOfl675ahp
efaEpdPOH787Qe4xCJBGXXDAwLeQ+NpwZJnHOoA=
-----END CERTIFICATE-----
Generated at Thu Apr 10 19:53:54 2025 by rpki-client