Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/47E540F8CB6711EC9BEB1118C4F9AE02.roa
File: 47E540F8CB6711EC9BEB1118C4F9AE02.roa (raw, json)
Hash identifier: C0uVMuF0zwyHBJ3keeDiTt9Di/6E/p3F3LjFNJrGEn8=
Subject key identifier: F8:7F:11:94:C5:E6:FB:9D:1D:23:56:E1:C7:48:FA:76:88:F4:36:7E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8F27
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/47E540F8CB6711EC9BEB1118C4F9AE02.roa
Signing time: Thu 30 May 2024 16:22:38 +0000
ROA not before: Thu 30 May 2024 16:22:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149557
IP address blocks: 103.185.100.0/24 maxlen: 24
2001:df0:96c0::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36647 (0x8f27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 16:22:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a7cd-fb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:dd:1b:37:05:29:6b:07:7e:a9:b5:7b:2c:
e2:82:f0:17:bc:55:8e:1d:8c:e2:5a:de:91:a1:4a:
85:69:1d:fb:34:81:a4:3b:2b:86:43:89:72:e9:d1:
9e:bf:df:f7:27:22:2c:c9:94:71:a2:31:0d:bf:cc:
70:d0:6f:a9:5d:6e:09:74:e1:4b:7d:7f:fd:0f:63:
04:5f:39:17:18:e3:12:69:33:70:24:70:87:8f:9c:
ec:80:9c:28:f1:f2:16:54:ee:a2:c3:43:32:96:6c:
08:9c:46:4d:bd:9f:85:ab:76:04:3d:f8:46:89:95:
f2:e2:40:63:e3:b7:7d:61:64:a9:96:7b:2e:ce:43:
90:d2:11:36:6f:2e:f3:ea:91:89:7e:71:d2:d3:e6:
7b:85:8c:ed:fa:7f:49:ab:89:e9:bf:73:c1:ed:71:
fe:40:f7:97:44:57:0f:e3:97:24:10:1f:d9:f5:dc:
76:17:b0:71:bb:3b:c1:02:b6:26:a9:86:89:81:6d:
ea:28:3c:4f:c5:88:eb:34:b9:73:25:a1:c7:ee:e8:
14:f9:a9:3d:9a:5f:44:29:37:8e:16:d4:a7:fd:f0:
d6:42:1a:6b:a9:75:13:f0:66:d9:61:e2:f1:79:10:
23:40:6f:cf:4f:97:25:0c:1b:81:7d:5a:b9:de:f5:
0b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7F:11:94:C5:E6:FB:9D:1D:23:56:E1:C7:48:FA:76:88:F4:36:7E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/47E540F8CB6711EC9BEB1118C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.100.0/24
IPv6:
2001:df0:96c0::/48
Signature Algorithm: sha256WithRSAEncryption
41:20:d8:1a:d5:32:42:7b:ec:3b:09:06:c6:15:34:dc:a5:0b:
42:5e:ea:02:5c:c0:3f:4e:a6:4b:47:15:a5:0d:70:db:5f:1a:
89:f2:aa:98:36:37:4b:e3:16:00:4d:f4:da:79:7c:0b:d1:d3:
be:90:36:e2:20:3c:4b:1c:fc:35:d0:d4:41:6d:9e:80:05:e4:
85:a9:04:ae:43:bc:0f:99:9d:15:60:7a:99:92:8b:28:4b:4f:
41:1c:0b:06:58:83:06:81:a9:10:2f:8c:38:06:49:5c:13:72:
04:a5:3b:e9:ce:fd:34:5d:ce:94:48:9f:64:42:9b:1e:74:18:
ae:68:1c:57:61:7b:69:8b:84:ad:42:75:49:09:b4:80:13:b7:
eb:12:6d:53:75:5d:a7:dc:92:04:96:13:67:99:a7:d6:20:4b:
62:31:64:65:83:66:cd:f5:a9:92:7f:71:44:73:e1:75:33:a1:
a9:0f:c0:78:00:63:65:67:73:1f:98:d8:e2:9c:e8:86:46:d7:
ea:32:82:10:d9:3d:f3:c4:36:89:e8:eb:27:1f:b9:9d:ed:09:
3e:b0:92:a0:8b:91:93:21:b0:14:aa:6b:b0:a1:46:7f:45:75:
6b:bc:6c:d5:b7:95:34:85:d0:5e:2f:1b:02:d8:5e:a9:e6:5e:
9e:f0:ed:b2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIDAI8nMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MjIzOFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE3Y2QtZmI4MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANbd3Rs3BSlrB36ptXss4oLwF7xVjh2M4lrekaFKhWkd+zSBpDsrhkOJcunR
nr/f9yciLMmUcaIxDb/McNBvqV1uCXThS31//Q9jBF85FxjjEmkzcCRwh4+c7ICc
KPHyFlTuosNDMpZsCJxGTb2fhat2BD34RomV8uJAY+O3fWFkqZZ7Ls5DkNIRNm8u
8+qRiX5x0tPme4WM7fp/SauJ6b9zwe1x/kD3l0RXD+OXJBAf2fXcdhewcbs7wQK2
JqmGiYFt6ig8T8WI6zS5cyWhx+7oFPmpPZpfRCk3jhbUp/3w1kIaa6l1E/Bm2WHi
8XkQI0Bvz0+XJQwbgX1aud71CwMCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBT4fxGU
xeb7nR0jVuHHSPp2iPQ2fjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ3RTU0MEY4
Q0I2NzExRUM5QkVCMTExOEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/
BCEwHzAMBAIAATAGAwQAZ7lkMA8EAgACMAkDBwAgAQ3wlsAwDQYJKoZIhvcNAQEL
BQADggEBAEEg2BrVMkJ77DsJBsYVNNylC0Je6gJcwD9OpktHFaUNcNtfGonyqpg2
N0vjFgBN9Np5fAvR076QNuIgPEsc/DXQ1EFtnoAF5IWpBK5DvA+ZnRVgepmSiyhL
T0EcCwZYgwaBqRAvjDgGSVwTcgSlO+nO/TRdzpRIn2RCmx50GK5oHFdhe2mLhK1C
dUkJtIATt+sSbVN1XafckgSWE2eZp9YgS2IxZGWDZs31qZJ/cURz4XUzoakPwHgA
Y2Vncx+Y2OKc6IZG1+oyghDZPfPENono6ycfuZ3tCT6wkqCLkZMhsBSqa7ChRn9F
dWu8bNW3lTSF0F4vGwLYXqnmXp7w7bI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:47 2025 by rpki-client