Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FBC0FC0137D11EB8F8D4341C4F9AE02.roa
File: 5FBC0FC0137D11EB8F8D4341C4F9AE02.roa (raw, json)
Hash identifier: 64eu1F/64wZfc4gdrh8MqgPWFUxcJo4wMOSRpoYFg+c=
Subject key identifier: 3C:07:7B:56:4E:7A:8B:94:42:AF:4E:3C:42:50:47:7E:05:B3:F7:18
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 71D0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FBC0FC0137D11EB8F8D4341C4F9AE02.roa
Signing time: Wed 10 May 2023 16:50:04 +0000
ROA not before: Wed 10 May 2023 16:50:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59179
IP address blocks: 27.100.24.0/22 maxlen: 24
103.44.96.0/22 maxlen: 24
103.188.46.0/23 maxlen: 24
203.112.152.0/22 maxlen: 24
2407:8e80::/32 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29136 (0x71d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 10 16:50:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bcb3c-d62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:bd:e9:10:2a:03:43:17:61:ac:8e:01:c1:
18:23:ac:53:95:33:e6:bb:e1:68:3e:a7:d2:e3:ac:
2f:f4:95:20:0e:eb:b8:4e:20:48:00:9c:ac:2b:0b:
ba:03:af:d5:fd:9e:63:ed:b0:c9:4d:72:70:b8:51:
be:32:1a:66:14:30:a5:b0:b7:b0:bb:76:b1:c0:d5:
10:32:c8:53:2f:68:0a:9e:3d:b3:0d:7f:7a:ad:85:
88:78:af:db:d7:61:35:1b:c8:8f:77:6b:c1:cd:cd:
f6:95:b7:c8:73:fc:da:05:c1:4e:67:d7:d4:52:0f:
5a:e3:1d:4a:9a:a3:2a:90:71:7c:78:15:e4:aa:2a:
b2:cd:3e:e2:41:5f:18:77:66:81:6b:ec:4f:64:f7:
0c:7d:7f:b0:04:71:ad:f2:64:30:0d:0d:13:c6:2c:
b9:5c:9a:07:5f:aa:50:8b:3e:5c:77:98:e0:94:bf:
eb:3f:02:e7:7c:21:df:b5:e2:6b:84:76:f0:56:7d:
3f:3b:bf:b7:39:4c:e7:a5:37:cc:e3:b6:6d:d0:31:
89:07:f6:53:04:c6:10:8a:17:40:92:c4:d2:9a:fa:
66:a3:cb:10:4e:39:a7:ce:f0:de:63:ab:c4:ee:f9:
97:c2:5f:f7:a9:15:80:ad:6e:4a:7b:db:cd:d8:a8:
7a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:07:7B:56:4E:7A:8B:94:42:AF:4E:3C:42:50:47:7E:05:B3:F7:18
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FBC0FC0137D11EB8F8D4341C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.100.24.0/22
103.44.96.0/22
103.188.46.0/23
203.112.152.0/22
IPv6:
2407:8e80::/32
Signature Algorithm: sha256WithRSAEncryption
4a:6a:fd:af:ef:ed:29:f5:73:58:25:1b:3a:1d:85:a1:15:94:
1f:aa:9e:7c:f7:43:88:ee:26:58:20:84:9c:bf:83:52:5f:2d:
d5:52:b9:20:65:4e:65:dd:9e:5a:14:5c:cb:83:e6:6e:a3:85:
96:6d:d3:b4:bf:da:5b:9e:ec:2c:c6:6c:fd:e1:f4:5b:9f:80:
41:37:11:23:ac:31:5b:93:28:e1:93:35:b9:55:d3:b2:c4:d9:
93:b4:d7:97:af:4b:77:3d:4d:ee:40:9c:29:0c:4f:bc:4c:e1:
f6:af:16:d8:58:9b:32:42:e3:41:ec:90:f4:1f:10:ac:61:e8:
f3:74:f0:a1:4f:65:c1:79:11:3b:5e:51:37:20:9d:f3:4d:76:
de:98:9a:cd:a0:4d:48:e7:3d:74:74:8f:3d:f5:be:ff:c4:ce:
c1:6a:53:26:38:da:bb:3d:36:15:08:8b:7b:96:af:b2:c7:86:
ac:2e:4a:b2:9a:62:51:1d:0b:7e:47:e2:f2:9a:11:db:17:5e:
a7:ea:60:c2:4e:45:45:30:36:13:33:ac:74:7f:48:c5:96:78:
1e:c4:d6:6b:a2:e8:43:2b:70:ed:40:f1:74:09:69:0e:29:72:
23:53:f8:1d:c6:36:fe:16:50:ca:05:ad:f7:c0:c3:57:16:16:
b1:ba:90:33
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgICcdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNTEwMTY1MDA0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDViY2IzYy1kNjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy3i96RAqA0MXYayOAcEYI6xTlTPmu+FoPqfS46wv9JUgDuu4TiBIAJysKwu6
A6/V/Z5j7bDJTXJwuFG+MhpmFDClsLewu3axwNUQMshTL2gKnj2zDX96rYWIeK/b
12E1G8iPd2vBzc32lbfIc/zaBcFOZ9fUUg9a4x1KmqMqkHF8eBXkqiqyzT7iQV8Y
d2aBa+xPZPcMfX+wBHGt8mQwDQ0Txiy5XJoHX6pQiz5cd5jglL/rPwLnfCHfteJr
hHbwVn0/O7+3OUznpTfM47Zt0DGJB/ZTBMYQihdAksTSmvpmo8sQTjmnzvDeY6vE
7vmXwl/3qRWArW5Ke9vN2Kh6iQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFDwHe1ZO
eouUQq9OPEJQR34Fs/cYMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNUZCQzBGQzAx
MzdEMTFFQjhGOEQ0MzQxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E
MTAvMB4EAgABMBgDBAIbZBgDBAJnLGADBAFnvC4DBALLcJgwDQQCAAIwBwMFACQH
joAwDQYJKoZIhvcNAQELBQADggEBAEpq/a/v7Sn1c1glGzodhaEVlB+qnnz3Q4ju
JlgghJy/g1JfLdVSuSBlTmXdnloUXMuD5m6jhZZt07S/2lue7CzGbP3h9FufgEE3
ESOsMVuTKOGTNblV07LE2ZO015evS3c9Te5AnCkMT7xM4favFthYmzJC40HskPQf
EKxh6PN08KFPZcF5ETteUTcgnfNNdt6Yms2gTUjnPXR0jz31vv/EzsFqUyY42rs9
NhUIi3uWr7LHhqwuSrKaYlEdC35H4vKaEdsXXqfqYMJORUUwNhMzrHR/SMWWeB7E
1mui6EMrcO1A8XQJaQ4pciNT+B3GNv4WUMoFrffAw1cWFrG6kDM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:30 2025 by rpki-client