Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68162204BDCF11EA8755D90DC4F9AE02.roa
File: 68162204BDCF11EA8755D90DC4F9AE02.roa (raw, json)
Hash identifier: D30jtAz9tV3/g2vDvSA2RoBS6F5XHNXmC7SrncSyAGE=
Subject key identifier: D8:C1:3E:0D:A7:7E:85:79:A5:46:C6:F6:C9:BA:56:BD:65:C1:5B:26
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 58E4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68162204BDCF11EA8755D90DC4F9AE02.roa
Signing time: Fri 08 Jul 2022 12:41:28 +0000
ROA not before: Fri 08 Jul 2022 12:41:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139490
IP address blocks: 103.88.236.0/22 maxlen: 24
103.143.168.0/23 maxlen: 24
103.148.206.0/24 maxlen: 24
103.164.70.0/23 maxlen: 24
103.186.128.0/23 maxlen: 24
103.220.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22756 (0x58e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jul 8 12:41:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62c825f7-335f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:dd:17:29:61:49:c5:48:7a:c6:9d:10:ea:
6b:3c:f8:eb:02:9c:b3:0a:58:28:42:5b:29:4b:45:
e7:e8:d2:6a:dc:64:c9:87:55:27:d2:6f:0f:47:45:
02:6f:34:63:95:fd:57:70:3f:e6:95:b0:b8:46:25:
7d:99:5e:fd:1d:7e:76:5b:3b:9e:a8:b8:65:ec:38:
05:d6:a0:0d:0c:e9:31:24:1c:9c:53:f3:79:55:ef:
a4:a7:6b:96:3a:0d:fd:85:30:d3:15:d6:23:02:1a:
cc:8f:f0:54:f6:77:06:78:f6:a3:6d:7d:72:65:60:
7b:4b:ca:41:ee:73:fd:57:b9:45:09:79:f6:d3:3b:
bc:cc:cf:5d:a7:43:af:93:a5:ff:ba:ee:39:c6:f4:
51:3f:f9:35:b5:d1:a7:d2:31:d4:4b:da:e3:d7:1e:
08:b8:b9:14:d9:bd:24:23:94:0e:fa:01:fa:af:34:
f6:15:8e:0d:3f:66:e5:49:29:4e:4b:c4:59:58:7f:
6b:15:c6:45:6b:49:3c:30:2c:02:c7:cb:fa:97:c3:
e0:5c:4b:4a:95:35:f8:9d:06:e5:21:4b:ca:9f:7c:
cc:d2:39:db:97:22:a0:36:58:c0:42:5c:2a:6a:09:
10:e9:54:a3:46:ec:ea:a4:d3:17:6f:ac:ab:28:5c:
81:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C1:3E:0D:A7:7E:85:79:A5:46:C6:F6:C9:BA:56:BD:65:C1:5B:26
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68162204BDCF11EA8755D90DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.88.236.0/22
103.143.168.0/23
103.148.206.0/24
103.164.70.0/23
103.186.128.0/23
103.220.224.0/24
Signature Algorithm: sha256WithRSAEncryption
01:00:3b:8b:5a:04:b0:7b:e6:7e:6f:14:59:dd:d5:16:18:c2:
b7:59:0e:6e:32:80:db:93:38:89:02:cd:6a:15:d1:13:21:11:
a1:8e:62:e1:a8:73:51:86:78:a8:74:8c:e9:7e:ae:8c:10:b2:
13:a1:99:35:f6:98:c8:85:4f:56:2c:91:59:5d:3c:32:a1:49:
a2:37:85:8b:5d:b9:56:a1:99:b4:06:9d:6e:11:9f:04:f1:5f:
c8:64:dc:5b:d7:42:5f:d2:0f:b8:15:97:c4:57:da:e2:d2:d6:
48:df:ea:cb:2b:c3:ad:c4:d2:aa:f2:c9:09:f5:83:43:9d:04:
55:5c:bd:8e:3c:67:f2:ba:71:2e:05:ed:9d:63:14:67:6b:b0:
16:01:27:d2:bb:78:2a:22:39:c2:35:92:ed:d6:2d:e1:3e:22:
a8:d4:2f:73:62:23:d7:fd:74:46:a8:71:e3:a9:40:40:13:11:
56:4d:c4:71:5c:ba:93:bd:92:e9:4f:22:e5:d7:8a:a9:42:6f:
cb:a5:1d:6c:aa:c4:05:5e:ff:4e:ab:89:c0:2d:73:d1:1c:74:
9d:ea:3e:d2:d4:95:c9:b1:fd:ca:4d:a6:ef:0d:80:b4:9e:e2:
8e:d8:01:5b:f8:0a:c0:b7:06:66:88:e9:f3:c0:5c:cc:5f:b5:
cc:8b:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:48 2025 by rpki-client