Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/742280A4746D11ED83177C64C4F9AE02.roa
File: 742280A4746D11ED83177C64C4F9AE02.roa (raw, json)
Hash identifier: rWxO/0VJOc6Pj9mKbTNw10sKzrWavQa2XAjD/0yX6vU=
Subject key identifier: 23:FB:3E:DB:29:B3:B8:60:AF:CF:3F:43:D7:16:19:E5:80:C3:91:55
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 611A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/742280A4746D11ED83177C64C4F9AE02.roa
Signing time: Mon 05 Dec 2022 07:21:37 +0000
ROA not before: Mon 05 Dec 2022 07:21:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138245
IP address blocks: 103.127.130.0/23 maxlen: 23
103.127.131.0/24 maxlen: 24
103.158.216.0/23 maxlen: 23
103.158.217.0/24 maxlen: 24
103.159.42.0/23 maxlen: 24
103.174.242.0/23 maxlen: 24
103.176.16.0/23 maxlen: 24
2001:df5:f980::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24858 (0x611a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 5 07:21:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=638d9c01-05f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:77:24:8f:b8:d9:e2:e1:f0:78:c2:8c:32:
34:d6:77:1b:46:2f:58:93:1a:54:06:c4:ad:8d:dc:
63:7e:45:0b:64:d9:8b:42:b7:e1:37:4b:0b:29:70:
ec:f9:13:a0:9c:04:60:28:d9:13:c2:5c:0b:88:20:
41:8f:16:38:11:32:7e:33:74:f2:ef:99:b8:ff:62:
ae:d4:72:6d:67:82:f7:b0:d6:b3:51:83:76:27:15:
01:ba:b2:df:b9:f9:9b:f3:41:5e:50:69:69:87:88:
3a:00:e3:f9:cd:81:21:94:4f:98:05:c3:44:8d:4b:
63:18:31:b2:47:72:d7:db:f8:e3:c3:4f:b7:c8:71:
97:88:56:c1:de:ff:f7:2a:aa:7b:01:61:cb:a9:5b:
2a:d4:87:90:b7:85:c2:25:f5:ee:43:76:bf:d0:e4:
ef:06:bb:15:02:54:63:31:37:a7:66:03:05:f2:6f:
50:df:4f:d2:10:a3:51:a7:78:bb:cc:d9:a3:c4:93:
2f:40:25:36:08:b6:8d:dc:71:d2:91:96:af:d9:f2:
6e:8e:a2:0d:48:4d:b7:8a:28:6c:7e:83:10:22:c3:
6c:08:19:d3:63:99:4f:6f:d1:f5:04:94:53:8b:65:
d7:df:b5:dc:ec:42:1e:f3:39:ef:a0:19:f9:6f:e8:
40:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FB:3E:DB:29:B3:B8:60:AF:CF:3F:43:D7:16:19:E5:80:C3:91:55
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/742280A4746D11ED83177C64C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.127.130.0/23
103.158.216.0/23
103.159.42.0/23
103.174.242.0/23
103.176.16.0/23
IPv6:
2001:df5:f980::/48
Signature Algorithm: sha256WithRSAEncryption
66:0f:83:4f:99:08:c5:eb:42:cf:dd:a9:4a:43:3f:d5:53:fe:
8e:fb:a5:39:d7:37:82:a6:1b:b7:6a:57:ff:c2:23:ed:a6:b6:
6d:dd:98:55:ce:9e:cc:90:dc:cf:78:f2:a9:21:13:be:77:fc:
42:cf:ce:a0:43:a8:39:52:65:ef:e5:d2:31:9b:ba:65:a4:4e:
db:ee:19:3d:05:09:7a:dc:18:ec:cb:0b:06:aa:5b:cd:f6:02:
45:b2:af:34:60:5b:55:65:c3:3e:49:33:74:ca:cb:ba:72:c5:
09:57:70:de:ea:c2:41:f4:b6:57:a1:5c:fd:2a:27:8d:8c:d8:
bd:b8:51:5e:34:f7:b7:a8:6e:ad:61:9c:51:0c:b8:b3:96:e2:
98:24:e0:8f:0c:f6:fe:0c:a8:ca:9c:eb:f7:06:57:f8:e5:94:
49:db:a4:69:5c:54:4c:a4:34:f5:43:8f:b5:80:9f:72:d5:eb:
01:63:62:40:43:5b:16:32:1b:a8:4c:47:34:69:06:7b:76:95:
f8:31:db:03:a0:5f:3e:29:58:29:70:94:6c:e3:6f:6e:38:df:
3a:de:49:e0:24:9c:b5:3b:9e:a3:5f:49:69:4b:77:33:db:d2:
02:91:38:4a:d9:e7:b4:92:fc:9e:4a:22:fd:69:66:0d:70:5b:
d1:24:71:2d
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgICYRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIxMjA1MDcyMTM3WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzhkOWMwMS0wNWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv7R3JI+42eLh8HjCjDI01ncbRi9YkxpUBsStjdxjfkULZNmLQrfhN0sLKXDs
+ROgnARgKNkTwlwLiCBBjxY4ETJ+M3Ty75m4/2Ku1HJtZ4L3sNazUYN2JxUBurLf
ufmb80FeUGlph4g6AOP5zYEhlE+YBcNEjUtjGDGyR3LX2/jjw0+3yHGXiFbB3v/3
Kqp7AWHLqVsq1IeQt4XCJfXuQ3a/0OTvBrsVAlRjMTenZgMF8m9Q30/SEKNRp3i7
zNmjxJMvQCU2CLaN3HHSkZav2fJujqINSE23iihsfoMQIsNsCBnTY5lPb9H1BJRT
i2XX37Xc7EIe8znvoBn5b+hAxwIDAQABo4ICvjCCArowHQYDVR0OBBYEFCP7Ptsp
s7hgr88/Q9cWGeWAw5FVMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzQyMjgwQTQ3
NDZEMTFFRDgzMTc3QzY0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSAYIKwYBBQUHAQcBAf8E
OTA3MCQEAgABMB4DBAFnf4IDBAFnntgDBAFnnyoDBAFnrvIDBAFnsBAwDwQCAAIw
CQMHACABDfX5gDANBgkqhkiG9w0BAQsFAAOCAQEAZg+DT5kIxetCz92pSkM/1VP+
jvulOdc3gqYbt2pX/8Ij7aa2bd2YVc6ezJDcz3jyqSETvnf8Qs/OoEOoOVJl7+XS
MZu6ZaRO2+4ZPQUJetwY7MsLBqpbzfYCRbKvNGBbVWXDPkkzdMrLunLFCVdw3urC
QfS2V6Fc/SonjYzYvbhRXjT3t6hurWGcUQy4s5bimCTgjwz2/gyoypzr9wZX+OWU
SdukaVxUTKQ09UOPtYCfctXrAWNiQENbFjIbqExHNGkGe3aV+DHbA6BfPilYKXCU
bONvbjjfOt5J4CSctTueo19JaUt3M9vSApE4StnntJL8nkoi/WlmDXBb0SRxLQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:17:55 2025 by rpki-client