Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EB9F19E89F611EE8A326640C4F9AE02.roa
File: 5EB9F19E89F611EE8A326640C4F9AE02.roa (raw, json)
Hash identifier: 5KxrxLFpRbyjfdM9oXop5/a1xaTYknr98u7cCBAkRRI=
Subject key identifier: 13:15:84:D7:C1:64:AC:AA:58:89:19:CF:A3:14:C9:48:BC:03:A6:B1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7F24
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EB9F19E89F611EE8A326640C4F9AE02.roa
Signing time: Thu 30 Nov 2023 11:45:16 +0000
ROA not before: Thu 30 Nov 2023 11:45:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149240
IP address blocks: 103.3.234.0/23 maxlen: 24
103.67.92.0/23 maxlen: 24
103.88.56.0/24 maxlen: 24
103.88.57.0/24 maxlen: 24
103.91.244.0/22 maxlen: 22
103.91.244.0/24 maxlen: 24
103.91.245.0/24 maxlen: 24
103.91.246.0/24 maxlen: 24
103.91.247.0/24 maxlen: 24
103.124.172.0/24 maxlen: 24
103.139.191.0/24 maxlen: 24
103.159.99.0/24 maxlen: 24
103.162.196.0/23 maxlen: 24
103.163.166.0/23 maxlen: 24
103.167.172.0/24 maxlen: 24
103.170.1.0/24 maxlen: 24
103.173.41.0/24 maxlen: 24
103.174.108.0/23 maxlen: 24
103.178.176.0/23 maxlen: 24
103.184.40.0/24 maxlen: 24
103.184.236.0/23 maxlen: 24
103.191.203.0/24 maxlen: 24
2001:df0:3bc0::/48 maxlen: 48
2001:df0:9340::/48 maxlen: 48
2001:df2:c3c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32548 (0x7f24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 30 11:45:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=656875cc-70cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:aa:e0:2f:a3:aa:ec:57:85:9f:fc:7a:b2:6e:
ec:3f:d7:d0:49:82:ab:5e:4d:21:48:92:8e:5b:37:
f6:b1:84:7e:26:68:73:06:51:d3:d1:6e:68:de:fc:
71:b2:2e:78:e2:27:df:cd:80:5f:80:6a:01:59:60:
b0:f1:ee:59:8b:ff:1b:b0:fa:92:10:c6:ca:9f:f8:
a3:1d:fd:51:30:5c:64:7e:eb:70:f1:f8:ee:44:e1:
8f:92:9a:00:b3:1e:30:52:c2:81:b6:2d:a6:d9:98:
d4:4d:eb:4f:f3:2b:0f:6e:b0:9a:44:57:72:6c:20:
a5:c7:60:75:f8:7d:ed:b2:3d:6f:72:c6:e2:60:e6:
ea:9c:45:22:b3:71:64:78:a4:66:98:9e:6b:74:6e:
da:3a:28:7e:8c:4b:eb:44:80:32:65:61:b4:08:63:
49:7c:4a:c3:98:95:56:48:db:2f:e5:c3:56:45:16:
d8:f9:cc:53:81:82:36:6a:81:12:09:25:ed:5e:d0:
85:c1:99:d0:74:96:b5:cc:41:98:0e:bf:5a:df:8c:
3a:c7:94:1c:1a:7b:12:eb:99:34:9a:df:ba:d0:ed:
73:f0:60:d2:ed:0a:84:77:28:c3:85:3b:ee:5c:3c:
49:6a:47:e1:08:6a:86:28:56:77:f6:eb:2b:83:67:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:15:84:D7:C1:64:AC:AA:58:89:19:CF:A3:14:C9:48:BC:03:A6:B1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5EB9F19E89F611EE8A326640C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.3.234.0/23
103.67.92.0/23
103.88.56.0/23
103.91.244.0/22
103.124.172.0/24
103.139.191.0/24
103.159.99.0/24
103.162.196.0/23
103.163.166.0/23
103.167.172.0/24
103.170.1.0/24
103.173.41.0/24
103.174.108.0/23
103.178.176.0/23
103.184.40.0/24
103.184.236.0/23
103.191.203.0/24
IPv6:
2001:df0:3bc0::/48
2001:df0:9340::/48
2001:df2:c3c0::/48
Signature Algorithm: sha256WithRSAEncryption
a6:50:0a:bb:c2:2e:68:87:df:af:97:ce:b6:fa:0b:13:37:5f:
61:b3:24:83:e3:d9:c8:4a:98:98:b6:95:7f:a0:63:85:6a:b6:
1b:a4:bd:62:68:47:e1:cf:86:16:41:28:b6:bf:d8:ee:a8:2c:
3a:14:93:b7:79:89:18:73:09:98:1e:df:bb:f6:ec:73:72:43:
64:e0:40:56:72:7a:1d:85:a8:3a:5c:3c:9b:54:9d:39:01:20:
84:a4:77:bb:e9:bc:87:b2:ce:05:10:6b:09:c4:53:56:0b:c7:
6c:00:f2:b9:c5:42:46:59:3a:ee:7c:fc:5c:60:12:32:b0:7b:
87:83:11:38:58:31:13:5c:d4:49:5a:16:32:b5:68:b1:12:b5:
c3:56:86:72:81:a5:bb:5e:78:c7:00:f2:a3:43:98:e1:86:fa:
ea:e5:78:44:1f:84:55:41:9e:03:84:2e:ad:d6:9f:26:71:85:
a1:d2:37:55:01:0a:54:d2:75:77:05:29:15:08:94:92:94:84:
6f:8f:c6:27:06:8c:2f:fb:14:40:c7:ee:c8:12:d9:3f:81:1f:
81:b2:e2:f7:7b:c8:51:1d:72:8e:b1:6e:81:01:a7:bb:10:60:
0f:4b:c4:71:50:e6:4b:6b:e9:5d:41:ea:68:22:28:27:d3:fd:
1e:bb:68:94
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgICfyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMxMTMwMTE0NTE2WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTY4NzVjYy03MGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsKrgL6Oq7FeFn/x6sm7sP9fQSYKrXk0hSJKOWzf2sYR+JmhzBlHT0W5o3vxx
si544iffzYBfgGoBWWCw8e5Zi/8bsPqSEMbKn/ijHf1RMFxkfutw8fjuROGPkpoA
sx4wUsKBti2m2ZjUTetP8ysPbrCaRFdybCClx2B1+H3tsj1vcsbiYObqnEUis3Fk
eKRmmJ5rdG7aOih+jEvrRIAyZWG0CGNJfErDmJVWSNsv5cNWRRbY+cxTgYI2aoES
CSXtXtCFwZnQdJa1zEGYDr9a34w6x5QcGnsS65k0mt+60O1z8GDS7QqEdyjDhTvu
XDxJakfhCGqGKFZ39usrg2cWpwIDAQABo4IDGzCCAxcwHQYDVR0OBBYEFBMVhNfB
ZKyqWIkZz6MUyUi8A6axMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUVCOUYxOUU4
OUY2MTFFRThBMzI2NjQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgaQGCCsGAQUFBwEHAQH/
BIGUMIGRMGwEAgABMGYDBAFnA+oDBAFnQ1wDBAFnWDgDBAJnW/QDBABnfKwDBABn
i78DBABnn2MDBAFnosQDBAFno6YDBABnp6wDBABnqgEDBABnrSkDBAFnrmwDBAFn
srADBABnuCgDBAFnuOwDBABnv8swIQQCAAIwGwMHACABDfA7wAMHACABDfCTQAMH
ACABDfLDwDANBgkqhkiG9w0BAQsFAAOCAQEAplAKu8IuaIffr5fOtvoLEzdfYbMk
g+PZyEqYmLaVf6BjhWq2G6S9YmhH4c+GFkEotr/Y7qgsOhSTt3mJGHMJmB7fu/bs
c3JDZOBAVnJ6HYWoOlw8m1SdOQEghKR3u+m8h7LOBRBrCcRTVgvHbADyucVCRlk6
7nz8XGASMrB7h4MROFgxE1zUSVoWMrVosRK1w1aGcoGlu154xwDyo0OY4Yb66uV4
RB+EVUGeA4QurdafJnGFodI3VQEKVNJ1dwUpFQiUkpSEb4/GJwaML/sUQMfuyBLZ
P4EfgbLi93vIUR1yjrFugQGnuxBgD0vEcVDmS2vpXUHqaCIoJ9P9HrtolA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:45 2025 by rpki-client