Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10CA0A0CB76811ED8A503224C4F9AE02.roa
File: 10CA0A0CB76811ED8A503224C4F9AE02.roa (raw, json)
Hash identifier: SkwYfdSOBqBlha0vLEX4Q4/9twqr8L5Htteg/vZUXDc=
Subject key identifier: 4D:B8:C2:71:9F:F7:FA:A1:BF:80:B2:45:B9:6F:C4:40:61:49:94:EC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 65DD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10CA0A0CB76811ED8A503224C4F9AE02.roa
Signing time: Tue 28 Feb 2023 13:01:50 +0000
ROA not before: Tue 28 Feb 2023 13:01:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137085
IP address blocks: 27.123.240.0/23 maxlen: 24
43.225.248.0/22 maxlen: 24
103.37.98.0/23 maxlen: 24
103.68.140.0/23 maxlen: 24
103.72.196.0/24 maxlen: 24
103.79.167.0/24 maxlen: 24
103.91.72.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.91.75.0/24 maxlen: 24
103.91.76.0/24 maxlen: 24
103.91.77.0/24 maxlen: 24
103.91.78.0/24 maxlen: 24
103.91.79.0/24 maxlen: 24
103.93.39.0/24 maxlen: 24
103.101.112.0/22 maxlen: 24
103.120.152.0/24 maxlen: 24
103.120.153.0/24 maxlen: 24
103.138.9.0/24 maxlen: 24
103.158.41.0/24 maxlen: 24
103.160.222.0/24 maxlen: 24
103.174.28.0/24 maxlen: 24
103.174.29.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.178.117.0/24 maxlen: 24
103.204.70.0/24 maxlen: 24
103.206.51.0/24 maxlen: 24
103.206.96.0/23 maxlen: 24
103.232.232.0/22 maxlen: 24
202.4.169.0/24 maxlen: 24
2001:df1:d240::/48 maxlen: 48
2400:d660::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26077 (0x65dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 28 13:01:50 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63fdfb3e-86e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:87:fd:af:cf:6d:3a:84:05:e2:ae:a4:1c:7b:
90:33:3a:37:26:11:ba:76:b7:25:2a:7f:0f:e4:4b:
e5:6b:e8:a5:dd:92:61:96:a8:16:71:43:3c:76:54:
ac:da:a3:5c:96:8b:0b:b9:f9:0c:4d:ab:24:bb:b7:
a1:ce:6e:c4:cc:4e:3b:6c:96:a2:11:a6:02:24:ee:
53:ce:e6:17:9b:bb:74:c9:9a:12:d1:5a:92:3b:d4:
b6:a7:96:5f:f0:70:86:43:e0:45:f6:9f:66:0b:23:
4a:42:73:b6:00:3e:6e:46:26:e0:47:48:67:4c:21:
56:83:a3:e1:8e:a8:77:9e:4e:25:bf:86:a9:16:26:
e5:d7:9a:0f:77:f3:3e:b3:34:28:c6:b4:0a:0c:a9:
44:0b:0d:56:1a:57:29:4b:d3:f3:a0:ef:60:c9:8b:
ef:e5:80:23:9f:7d:49:9f:ef:40:e2:c4:8b:dc:da:
b5:52:84:42:5c:f6:bf:a4:12:96:03:17:e5:01:73:
ff:20:62:e9:3d:21:6f:13:9d:27:80:26:ac:3b:d9:
77:4e:41:8c:03:fd:12:57:54:af:0f:9f:79:17:cc:
51:e4:4e:74:dc:c2:fb:04:0d:f1:8b:c8:7c:13:ae:
bf:9c:75:1b:fb:99:47:d6:a0:75:e5:80:b2:fc:d0:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B8:C2:71:9F:F7:FA:A1:BF:80:B2:45:B9:6F:C4:40:61:49:94:EC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/10CA0A0CB76811ED8A503224C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/23
43.225.248.0/22
103.37.98.0/23
103.68.140.0/23
103.72.196.0/24
103.79.167.0/24
103.91.72.0/21
103.93.39.0/24
103.101.112.0/22
103.120.152.0/23
103.138.9.0/24
103.158.41.0/24
103.160.222.0/24
103.174.28.0/23
103.175.77.0/24
103.178.117.0/24
103.204.70.0/24
103.206.51.0/24
103.206.96.0/23
103.232.232.0/22
202.4.169.0/24
IPv6:
2001:df1:d240::/48
2400:d660::/32
Signature Algorithm: sha256WithRSAEncryption
9c:99:8d:bf:37:86:ea:a2:82:11:e1:3f:3a:08:c8:bc:25:91:
8e:ef:fe:3a:71:d0:5c:ec:03:62:a2:b2:91:19:b0:e9:d4:10:
99:35:87:f8:2c:7e:cd:cf:04:b7:94:dd:8c:65:1c:4b:a3:2a:
ff:9a:68:64:88:21:fd:a8:84:95:d8:4f:af:bb:a0:35:74:9f:
70:05:a8:cc:cc:42:26:74:e3:f8:29:42:11:24:6e:0e:62:10:
7d:c7:20:02:99:23:6e:7a:e4:64:b0:9e:25:b8:a8:d5:a6:6c:
b4:be:e4:27:25:ab:8c:d1:49:3b:39:31:eb:c1:80:1a:e6:8e:
d1:ea:a1:41:5d:27:b2:e4:68:13:09:fc:80:00:05:20:ba:9b:
02:7d:82:2c:ab:c5:e6:36:3e:ea:49:df:a8:05:05:d7:40:3a:
c1:de:44:ea:66:51:fa:45:20:1c:1f:bf:72:3f:5c:2f:5e:62:
b5:d3:43:4a:fb:aa:93:5c:8e:db:90:a2:c0:56:ea:43:d8:f2:
49:53:3e:38:5d:36:5a:d1:b8:8a:4a:d9:69:2a:50:7c:ea:19:
47:32:11:10:9c:6f:39:05:19:39:d3:17:f4:d6:82:61:cf:3a:
e2:70:b2:db:44:94:0e:43:bc:26:cc:76:f1:38:3e:90:fb:cd:
c9:68:9b:53
-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgICZd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwMjI4MTMwMTUwWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2ZkZmIzZS04NmU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8Yf9r89tOoQF4q6kHHuQMzo3JhG6drclKn8P5Evla+il3ZJhlqgWcUM8dlSs
2qNclosLufkMTasku7ehzm7EzE47bJaiEaYCJO5TzuYXm7t0yZoS0VqSO9S2p5Zf
8HCGQ+BF9p9mCyNKQnO2AD5uRibgR0hnTCFWg6Phjqh3nk4lv4apFibl15oPd/M+
szQoxrQKDKlECw1WGlcpS9PzoO9gyYvv5YAjn31Jn+9A4sSL3Nq1UoRCXPa/pBKW
AxflAXP/IGLpPSFvE50ngCasO9l3TkGMA/0SV1SvD595F8xR5E503ML7BA3xi8h8
E66/nHUb+5lH1qB15YCy/NAZ+wIDAQABo4IDKTCCAyUwHQYDVR0OBBYEFE24wnGf
9/qhv4CyRblvxEBhSZTsMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTBDQTBBMENC
NzY4MTFFRDhBNTAzMjI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgbIGCCsGAQUFBwEHAQH/
BIGiMIGfMIGEBAIAATB+AwQBG3vwAwQCK+H4AwQBZyViAwQBZ0SMAwQAZ0jEAwQA
Z0+nAwQDZ1tIAwQAZ10nAwQCZ2VwAwQBZ3iYAwQAZ4oJAwQAZ54pAwQAZ6DeAwQB
Z64cAwQAZ69NAwQAZ7J1AwQAZ8xGAwQAZ84zAwQBZ85gAwQCZ+joAwQAygSpMBYE
AgACMBADBwAgAQ3x0kADBQAkANZgMA0GCSqGSIb3DQEBCwUAA4IBAQCcmY2/N4bq
ooIR4T86CMi8JZGO7/46cdBc7ANiorKRGbDp1BCZNYf4LH7NzwS3lN2MZRxLoyr/
mmhkiCH9qISV2E+vu6A1dJ9wBajMzEImdOP4KUIRJG4OYhB9xyACmSNueuRksJ4l
uKjVpmy0vuQnJauM0Uk7OTHrwYAa5o7R6qFBXSey5GgTCfyAAAUgupsCfYIsq8Xm
Nj7qSd+oBQXXQDrB3kTqZlH6RSAcH79yP1wvXmK100NK+6qTXI7bkKLAVupD2PJJ
Uz44XTZa0biKStlpKlB86hlHMhEQnG85BRk50xf01oJhzzricLLbRJQOQ7wmzHbx
OD6Q+83JaJtT
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:44 2025 by rpki-client