Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/512EAC823CED11EE930B555AC4F9AE02.roa
File: 512EAC823CED11EE930B555AC4F9AE02.roa (raw, json)
Hash identifier: cNmpdwwjWTBk81dyLHkBMxZlCrWpfhRyZh5Wk7mRmfU=
Subject key identifier: 36:3A:51:61:12:B0:BD:E6:81:47:9F:2F:CC:03:B9:2C:E9:A4:6C:82
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 77E1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/512EAC823CED11EE930B555AC4F9AE02.roa
Signing time: Thu 17 Aug 2023 11:00:46 +0000
ROA not before: Thu 17 Aug 2023 11:00:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132752
IP address blocks: 103.168.60.0/24 maxlen: 24
103.179.121.0/24 maxlen: 24
103.180.177.0/24 maxlen: 24
103.214.162.0/24 maxlen: 24
103.214.163.0/24 maxlen: 24
103.229.209.0/24 maxlen: 24
2001:df2:8d40::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30689 (0x77e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Aug 17 11:00:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64ddfdde-de5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:02:12:5a:aa:2b:9d:da:68:80:c8:aa:9e:
4b:24:c0:51:a7:c6:96:b2:b5:53:ce:4e:05:24:19:
39:91:d8:dd:1f:47:6d:a9:e3:77:08:7c:f0:ed:d5:
e3:27:80:92:77:11:5e:ef:aa:c5:7f:33:ee:bd:d4:
a3:a5:ba:c0:29:d4:bf:60:94:51:12:fd:74:c4:ee:
c1:7c:57:43:d9:f8:70:e8:7a:65:ba:4c:99:e4:29:
d6:54:d9:dd:40:8b:9f:42:a9:e4:84:d4:75:ea:b5:
cb:08:96:0b:7f:f9:0b:a9:33:1f:49:52:fa:90:89:
e9:b2:b9:d3:8e:fe:74:f1:09:cc:e1:82:b7:84:76:
d5:07:eb:5c:bd:ec:bd:7f:fb:9b:b6:c0:6b:19:ad:
16:91:1f:f2:1d:23:26:3b:e9:27:8d:18:cb:88:93:
b1:20:e6:9d:2a:6b:34:91:8f:32:fa:e8:57:9a:6b:
af:da:e6:53:47:a1:d7:dc:e2:14:a8:4e:25:f5:b6:
3a:3e:d8:32:fe:e2:50:d6:06:f9:f6:7b:13:65:32:
a9:87:3c:b6:c0:f3:a6:23:79:79:b3:40:b9:f2:90:
f2:d2:3e:74:39:b5:f4:21:ee:af:a5:2d:ad:03:99:
b6:8f:2e:3f:87:60:14:f9:72:db:2a:65:e9:ab:62:
9e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3A:51:61:12:B0:BD:E6:81:47:9F:2F:CC:03:B9:2C:E9:A4:6C:82
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/512EAC823CED11EE930B555AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.60.0/24
103.179.121.0/24
103.180.177.0/24
103.214.162.0/23
103.229.209.0/24
IPv6:
2001:df2:8d40::/48
Signature Algorithm: sha256WithRSAEncryption
2f:6a:a4:90:ba:1e:1f:29:a3:6c:8a:56:92:d8:14:4a:14:fc:
0a:81:7f:b3:95:ca:f9:73:36:36:a4:2b:59:16:ef:22:35:7e:
75:f4:4a:4c:75:0b:d3:5d:c6:61:9b:17:1d:c5:5e:c9:5f:1f:
dc:04:fb:c7:43:3f:be:61:d3:2a:17:a1:be:dc:5c:08:92:1b:
16:14:8e:b9:15:fb:ee:9d:fb:98:91:59:78:68:0e:8b:43:9b:
5f:b0:43:4a:4b:57:a1:88:89:3b:d2:fd:64:0e:09:a9:63:8f:
24:7e:b1:5e:ee:ce:d8:8b:c6:1d:f2:35:9b:f6:dc:d8:ef:31:
1f:27:f2:f5:a7:57:b6:fd:d1:16:7f:19:0b:ff:6d:7a:ce:48:
11:9d:71:57:85:cb:09:10:dc:bb:b2:22:f3:92:72:1f:17:f2:
01:db:cb:8c:45:ac:d4:69:ae:38:0a:f3:2c:20:1e:47:aa:45:
30:05:d4:11:46:6b:cf:4b:09:a6:76:34:81:16:69:e4:b5:69:
bc:c1:9c:26:5a:8d:2b:d9:06:bf:52:4d:79:cf:55:30:5f:81:
e4:bf:b1:28:25:ed:41:ba:2a:dd:52:4c:e3:52:c0:6b:34:e2:
e6:5d:8a:36:90:47:59:a5:f9:94:98:89:af:54:c7:9e:11:7b:
8f:fe:0c:33
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 11 13:27:17 2025 by rpki-client