Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65DAEC4AE5E911EE9152F766C4F9AE02.roa
File: 65DAEC4AE5E911EE9152F766C4F9AE02.roa (raw, json)
Hash identifier: GSh+q18imogH67Y6zZUiXX2VbNwmhqYsaMNgslbRFus=
Subject key identifier: 04:CA:E8:A1:66:ED:2C:48:76:7D:BE:97:4F:91:EE:D8:D4:D4:1B:19
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8511
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65DAEC4AE5E911EE9152F766C4F9AE02.roa
Signing time: Tue 19 Mar 2024 12:08:29 +0000
ROA not before: Tue 19 Mar 2024 12:08:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149551
IP address blocks: 103.171.76.0/24 maxlen: 24
2001:df1:3740::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34065 (0x8511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 19 12:08:29 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65f9803d-ab1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:3e:24:8f:3c:b8:86:63:92:de:0b:78:8d:
66:8c:23:b0:f5:42:25:b3:13:0a:83:f6:41:50:9c:
73:1c:dd:a3:ac:e7:ec:da:01:95:fb:ee:7c:2c:28:
a4:0c:81:a0:0e:98:95:e3:c2:1e:e5:e1:46:27:a1:
ad:0e:3c:1e:74:88:cb:66:de:58:21:c1:45:b3:e2:
b3:b7:35:0c:d1:76:27:d3:ac:95:ba:06:8d:8c:16:
19:44:4e:16:60:b8:d9:5f:79:37:ed:21:e6:21:60:
16:ad:5b:c4:1b:3c:90:9e:69:88:50:04:d5:0c:56:
bb:03:f8:62:16:37:6f:6b:ad:a7:13:cc:fa:b4:12:
89:42:05:e2:ec:96:bd:ec:b8:96:2a:f5:64:ae:22:
6a:10:9a:57:ba:60:87:5f:47:99:6f:5f:ff:87:c2:
c8:1f:23:e2:eb:59:c6:2f:2a:f6:a9:11:5e:84:a1:
4a:10:14:c6:61:6d:0e:96:c8:5b:8f:67:6a:a1:bf:
80:d3:4b:01:23:e1:a4:02:e4:ef:a9:86:64:01:91:
32:08:f5:88:2d:89:20:6f:e7:dc:d6:d8:54:34:23:
bb:37:52:cd:6e:ec:3d:93:1b:6d:8c:a7:ff:ad:04:
91:1e:70:e7:e2:3c:ff:24:9d:c5:79:b2:1d:2f:b0:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CA:E8:A1:66:ED:2C:48:76:7D:BE:97:4F:91:EE:D8:D4:D4:1B:19
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/65DAEC4AE5E911EE9152F766C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.76.0/24
IPv6:
2001:df1:3740::/48
Signature Algorithm: sha256WithRSAEncryption
64:b2:7e:04:db:b8:02:2b:68:5c:e5:22:e6:3c:78:48:5d:9d:
a1:b4:cf:1d:76:2c:b8:c7:a8:a7:e0:9f:71:2e:86:6f:74:5c:
83:6c:b3:6c:eb:7d:62:5e:b5:a8:39:98:21:ae:11:62:39:f2:
4a:07:b9:e2:20:ff:2e:74:f0:d3:44:34:f7:0f:59:79:af:c5:
ad:9a:f1:b6:2f:35:53:39:b5:49:63:cd:18:f6:e4:8b:6c:55:
b3:c0:c3:23:df:0a:fa:7d:dd:33:17:ff:38:c2:d4:67:f3:13:
86:0a:40:e8:4b:57:21:e6:08:37:45:34:2b:4f:a2:27:38:98:
02:30:ff:b4:97:5f:0e:c9:9b:f1:78:39:36:28:7a:6d:7d:56:
2c:db:44:24:57:47:77:8a:45:a8:46:10:6c:16:e7:cf:53:9f:
a7:c4:49:97:f8:7e:9b:a3:76:bd:4e:5d:ea:24:28:a7:d6:f5:
7b:9b:0a:c9:5a:86:47:ec:67:bb:98:1c:90:4e:90:6d:96:a7:
a0:c4:f0:ba:fa:ef:ad:b3:71:03:3b:82:9e:29:e6:d9:d2:0f:
24:12:c5:b8:0b:34:e7:27:5f:df:ea:07:98:f2:02:d8:ae:e4:
a9:3a:24:cc:50:72:9f:21:01:58:e6:8e:a9:34:b4:0c:bd:fb:
12:b9:13:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:32 2025 by rpki-client