Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/48F857EE99E211EB8E2C3151C4F9AE02.roa
File: 48F857EE99E211EB8E2C3151C4F9AE02.roa (raw, json)
Hash identifier: qiBd4z1EYdh2CpIZj/V9QmFTy7drTCS9UkKqtnl2aSE=
Subject key identifier: 79:4C:EC:63:7D:66:C6:35:89:46:14:14:B7:22:3C:1B:A7:98:72:07
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 55C9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/48F857EE99E211EB8E2C3151C4F9AE02.roa
Signing time: Mon 23 May 2022 07:31:49 +0000
ROA not before: Mon 23 May 2022 07:31:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141536
IP address blocks: 103.103.134.0/24 maxlen: 24
103.103.135.0/24 maxlen: 24
103.130.66.0/24 maxlen: 24
103.162.78.0/23 maxlen: 24
103.181.10.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21961 (0x55c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 23 07:31:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=628b3865-216c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1c:2a:f8:0f:39:1d:a5:1b:e2:b8:88:e8:85:
a7:e1:1d:50:7e:29:25:e1:e3:e6:a8:30:6f:9b:1a:
fc:65:41:74:08:e7:7e:78:15:de:ba:09:1d:d1:36:
3d:00:0f:e3:b4:c9:7f:3c:0f:72:55:73:27:2c:5c:
93:21:de:75:a8:de:39:ef:0c:c7:ca:a4:28:00:e2:
9a:34:50:a5:75:74:6c:d0:17:75:05:15:ba:33:91:
16:f4:f2:b4:68:a9:04:03:ee:cc:4a:c3:72:e0:09:
61:ba:50:a8:dd:8b:c4:a1:96:3c:97:68:e4:24:e6:
06:aa:cf:41:d3:c0:f0:b1:a1:91:bc:bb:9b:6f:f8:
d5:6e:9e:ab:60:f3:f0:5f:27:96:8c:4a:a2:e0:ff:
15:99:43:41:08:2b:dc:ea:66:ec:79:ea:8a:a7:3d:
79:15:21:e7:d2:55:94:57:12:c3:ca:f3:1d:72:08:
91:4e:d1:bb:65:cf:ce:88:8c:bc:0d:d1:df:c8:33:
8c:eb:a4:93:28:ba:87:65:6d:f6:29:4d:a3:bb:96:
e4:fd:17:8b:5e:71:bb:b2:d1:32:2f:34:5d:d7:44:
77:c5:ef:0c:d3:ba:10:20:b2:58:85:43:57:a6:2b:
c0:97:05:7b:37:3c:e8:09:50:53:fe:94:fa:f0:bf:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4C:EC:63:7D:66:C6:35:89:46:14:14:B7:22:3C:1B:A7:98:72:07
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/48F857EE99E211EB8E2C3151C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.134.0/23
103.130.66.0/24
103.162.78.0/23
103.181.10.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:6b:72:b5:82:97:83:a5:64:34:c7:4d:18:3b:62:b3:f7:7b:
e7:49:40:e3:c7:6e:47:17:f9:54:4c:2e:0e:17:34:86:38:f0:
e6:76:85:41:7e:e1:ae:ce:f8:be:e6:36:ec:21:15:ed:a5:8a:
b3:72:de:3f:05:bd:79:82:16:73:63:c8:fc:82:78:16:52:e1:
ef:52:9f:46:12:b5:4f:a7:75:92:57:8b:79:13:f3:4a:a7:ae:
ad:83:dd:ff:42:ba:5f:8a:c2:bb:99:c7:27:e4:0b:bd:f0:54:
87:b4:a5:c7:fc:18:76:0e:b4:61:f4:5c:6c:e8:df:8c:c8:df:
70:b7:da:53:82:53:bd:77:67:c8:db:bf:6e:a1:82:80:12:dd:
8a:28:bb:b3:a4:bd:87:ae:45:0b:5f:7c:a8:1c:6b:aa:99:07:
4f:52:03:af:e6:99:76:40:4c:fa:d7:87:98:01:20:3d:51:f0:
8d:8d:d2:73:79:ce:0d:82:b2:09:f9:08:7b:9c:31:1c:ba:d0:
8b:17:18:47:75:71:22:5c:a2:92:b8:d3:ce:21:de:e0:87:41:
c0:a1:32:50:a9:92:05:2d:b5:19:7b:94:18:3c:93:69:35:c7:
56:8f:c2:b6:83:3e:75:dd:f2:08:d8:c7:d1:1c:76:fa:6b:7b:
37:e6:b9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:01 2025 by rpki-client