Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D4A0D20182911EB93449831C4F9AE02.roa
File: 2D4A0D20182911EB93449831C4F9AE02.roa (raw, json)
Hash identifier: esJb6f5uvo0wUM/Mt7PxLUBh2pesvwGgiooLzTk+9ls=
Subject key identifier: 05:56:B2:F1:03:AF:14:E8:D7:A2:6E:73:62:8B:96:2B:F0:27:CD:C5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 52ED
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D4A0D20182911EB93449831C4F9AE02.roa
Signing time: Mon 16 May 2022 04:22:52 +0000
ROA not before: Mon 16 May 2022 04:22:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141327
IP address blocks: 103.157.166.0/23 maxlen: 24
2406:a340::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21229 (0x52ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 16 04:22:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6281d19b-ffbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:52:59:5d:e3:9a:00:0a:e2:a1:41:71:e4:
ed:8c:b6:32:f8:80:f9:0f:24:2c:03:8d:b6:fe:cf:
bf:25:4b:4e:d5:ed:d6:c2:0c:4d:41:2d:fb:08:a1:
de:d4:8e:37:69:2f:9f:c2:18:92:eb:2d:c4:ce:b2:
1e:08:48:50:25:72:79:53:a6:8c:71:2f:13:d8:3e:
13:1b:15:ca:5e:49:0c:bf:d9:50:f8:5f:f8:cc:f9:
2d:0b:43:54:41:06:0a:6d:a5:58:46:f5:a4:b4:f9:
99:55:32:00:f4:df:ee:96:9e:97:3b:c7:8d:93:44:
b1:cc:c1:ae:c9:8b:c6:06:4e:df:e2:91:02:68:b2:
cf:e9:22:92:4d:49:64:b4:69:90:83:d3:d3:a6:9d:
24:bc:4a:d4:ee:bf:8e:9d:66:37:d4:47:1a:d6:a2:
95:db:d8:92:e0:92:f2:57:cc:f3:48:96:0e:6c:13:
3b:a3:92:06:a7:52:40:4d:77:73:c1:d4:92:e3:ab:
31:63:80:b7:8b:47:8c:ed:5c:de:07:ee:f4:3d:19:
74:63:f2:c1:76:8c:71:17:3f:b6:cb:39:19:15:49:
37:59:01:23:bc:d0:84:46:ae:c1:0e:6a:09:80:55:
e7:d1:57:b3:da:cc:f6:fe:e7:76:ae:03:6f:5b:59:
98:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:56:B2:F1:03:AF:14:E8:D7:A2:6E:73:62:8B:96:2B:F0:27:CD:C5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2D4A0D20182911EB93449831C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.166.0/23
IPv6:
2406:a340::/32
Signature Algorithm: sha256WithRSAEncryption
af:aa:3c:73:4d:8f:36:c8:7e:ef:5b:30:cc:bb:bd:ba:e5:0d:
8f:85:f7:ba:84:0e:42:bd:dd:f3:bd:f0:1c:b8:f2:6a:00:c2:
be:9c:13:25:f8:df:be:4a:37:81:ac:dd:9f:df:a2:a2:7d:af:
48:8c:7a:f0:ed:38:a3:28:3f:dd:d3:7b:d8:8b:92:e0:71:35:
f2:39:0c:b8:10:f2:a2:3b:92:c6:25:c2:dd:62:00:b7:46:c1:
a8:f1:ba:58:89:b9:c8:8f:d4:85:73:5b:cc:49:af:92:ac:db:
1b:c5:09:cd:f3:58:9c:c0:7b:80:e0:9a:a7:96:81:fd:55:85:
24:43:08:87:c3:08:34:2a:a9:bb:71:53:e8:92:aa:a2:e5:7c:
99:18:bb:18:9d:c1:03:3a:2a:8f:fa:a2:b3:9f:5f:70:e1:1a:
fb:51:66:ab:76:b6:05:43:8c:7a:2c:21:32:1b:b0:fe:bf:b1:
ed:b9:97:21:cd:93:c7:6e:87:3c:1f:d3:18:4c:e6:85:1e:8a:
44:22:1a:20:2c:48:13:a9:98:cb:36:82:c1:d9:76:5e:c8:c7:
68:b0:89:03:a8:2b:0c:f9:4d:1d:79:72:4f:64:8b:1d:ba:7b:
32:f1:d1:8e:2c:88:16:98:e9:56:88:9a:04:f3:51:ee:42:e9:
f0:cc:dc:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:21:42 2025 by rpki-client