Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BCEB2E4BDD311EA96E94420C4F9AE02.roa
File: 7BCEB2E4BDD311EA96E94420C4F9AE02.roa (raw, json)
Hash identifier: p39MgkO0JtcUa8f7ucSS1aT5yV/JoJD8VOoJLCKSY6M=
Subject key identifier: 04:5B:3F:8A:B2:67:47:C1:2F:AC:45:5E:84:BF:E6:18:22:D4:81:A5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8938
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BCEB2E4BDD311EA96E94420C4F9AE02.roa
Signing time: Thu 30 May 2024 15:57:54 +0000
ROA not before: Thu 30 May 2024 15:57:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133965
IP address blocks: 103.54.144.0/22 maxlen: 24
2001:df0:ef40::/48 maxlen: 48
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35128 (0x8938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: May 30 15:57:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6658a202-75a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:ab:11:01:6a:3b:5e:cc:08:74:3f:0a:d7:
6d:df:6c:7c:c3:3c:af:ed:68:81:49:76:12:02:15:
6d:5a:f5:2c:07:55:60:75:1e:91:ba:07:77:be:3b:
d6:90:2e:cb:9d:a8:9e:b8:78:be:34:16:87:11:4d:
09:3f:a3:94:c2:db:09:bf:76:da:3e:17:a1:00:70:
92:af:f0:d1:71:43:da:70:00:93:4c:b3:1e:f8:09:
ae:4d:9b:08:cb:da:14:14:3d:c8:06:c0:1e:ee:72:
51:c1:87:f9:b0:15:a4:54:f5:63:3b:34:ef:ae:1e:
c0:c2:cf:1a:a3:0e:ee:fa:4e:10:06:a3:64:2c:78:
1a:14:eb:ce:b0:c5:63:16:e7:6f:80:92:13:bf:3f:
aa:b5:d7:a7:85:71:d5:88:48:c7:b0:36:27:42:bd:
4e:89:a9:f6:96:5d:14:84:14:d0:a7:47:3a:65:21:
46:5b:5d:ed:43:71:27:e4:1c:ed:fd:d7:7a:c7:c7:
fb:9d:7b:a3:d6:fc:f8:e2:20:dc:08:c3:71:b0:7d:
30:c6:d7:79:52:e9:ec:2f:70:3b:46:aa:d7:87:92:
b1:01:4e:b4:47:0a:e5:91:d5:58:8f:60:cf:6e:3f:
d5:c9:e0:ba:2d:79:8a:32:22:89:58:07:da:a4:d1:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5B:3F:8A:B2:67:47:C1:2F:AC:45:5E:84:BF:E6:18:22:D4:81:A5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BCEB2E4BDD311EA96E94420C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.144.0/22
IPv6:
2001:df0:ef40::/48
Signature Algorithm: sha256WithRSAEncryption
89:c6:a3:a6:69:36:c8:6a:13:0c:de:ab:ab:75:bf:ff:49:4c:
bc:45:1a:0a:91:b5:21:3e:4f:8a:a3:7f:9a:bb:e5:aa:0a:2f:
97:89:a0:25:a2:35:3a:98:c5:a2:1d:70:22:cb:38:bd:17:d8:
e4:a0:ed:7a:56:e7:47:1f:1d:79:e1:ba:4a:d3:36:33:45:f5:
a6:59:76:28:d7:3c:3b:23:94:26:9f:08:33:26:08:8d:ba:fa:
d6:73:53:a7:89:08:15:30:81:a9:28:46:cf:ab:6a:26:53:f8:
8d:67:49:d5:3e:fc:86:0b:a8:38:9d:8a:5b:85:3e:ac:46:2c:
8c:93:f9:59:e3:b7:73:00:30:f6:3b:cc:f9:e4:38:9a:ae:00:
ef:69:7f:84:1c:54:a3:fc:df:83:1b:d4:db:2d:9f:5a:b4:2e:
ab:ec:bc:00:bb:85:3b:43:f7:ad:e7:c7:24:95:b2:b9:de:b2:
89:71:b9:47:18:8d:44:05:22:9f:5f:80:2a:1d:84:0e:9e:df:
55:cb:f3:62:61:b5:44:92:05:89:b9:f7:b4:74:8a:82:7d:b8:
36:1c:e6:a0:3d:5e:fb:56:60:7f:90:b9:15:69:b1:a7:45:44:
33:5d:3a:33:54:48:84:4b:d7:df:10:cd:62:b1:be:be:53:8a:
dc:e9:f2:8a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIDAIk4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE1NTc1NFoXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGEyMDItNzVhNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM1VqxEBajtezAh0PwrXbd9sfMM8r+1ogUl2EgIVbVr1LAdVYHUekboHd747
1pAuy52onrh4vjQWhxFNCT+jlMLbCb922j4XoQBwkq/w0XFD2nAAk0yzHvgJrk2b
CMvaFBQ9yAbAHu5yUcGH+bAVpFT1Yzs0764ewMLPGqMO7vpOEAajZCx4GhTrzrDF
Yxbnb4CSE78/qrXXp4Vx1YhIx7A2J0K9Tomp9pZdFIQU0KdHOmUhRltd7UNxJ+Qc
7f3XesfH+517o9b8+OIg3AjDcbB9MMbXeVLp7C9wO0aq14eSsQFOtEcK5ZHVWI9g
z24/1cngui15ijIiiVgH2qTRJ38CAwEAAaOCAqYwggKiMB0GA1UdDgQWBBQEWz+K
smdHwS+sRV6Ev+YYItSBpTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzdCQ0VCMkU0
QkREMzExRUE5NkU5NDQyMEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDAGCCsGAQUFBwEHAQH/
BCEwHzAMBAIAATAGAwQCZzaQMA8EAgACMAkDBwAgAQ3w70AwDQYJKoZIhvcNAQEL
BQADggEBAInGo6ZpNshqEwzeq6t1v/9JTLxFGgqRtSE+T4qjf5q75aoKL5eJoCWi
NTqYxaIdcCLLOL0X2OSg7XpW50cfHXnhukrTNjNF9aZZdijXPDsjlCafCDMmCI26
+tZzU6eJCBUwgakoRs+raiZT+I1nSdU+/IYLqDidiluFPqxGLIyT+Vnjt3MAMPY7
zPnkOJquAO9pf4QcVKP834Mb1Nstn1q0LqvsvAC7hTtD963nxySVsrnesolxuUcY
jUQFIp9fgCodhA6e31XL82JhtUSSBYm597R0ioJ9uDYc5qA9XvtWYH+QuRVpsadF
RDNdOjNUSIRL198QzWKxvr5Titzp8oo=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:51 2025 by rpki-client