Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8131E964B34D11ED96C6216DC4F9AE02.roa
File: 8131E964B34D11ED96C6216DC4F9AE02.roa (raw, json)
Hash identifier: W1G7GPxhZDQA/NItn8CffLQ6KEfvccF3GFQ+A4UX0KI=
Subject key identifier: 76:BA:83:4B:62:22:1E:DA:8E:DE:4F:39:C3:D1:DD:2A:5E:74:7A:3F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6593
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8131E964B34D11ED96C6216DC4F9AE02.roa
Signing time: Thu 23 Feb 2023 11:41:44 +0000
ROA not before: Thu 23 Feb 2023 11:41:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 150604
IP address blocks: 103.181.84.0/23 maxlen: 24
103.182.58.0/24 maxlen: 24
103.182.59.0/24 maxlen: 24
103.187.92.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26003 (0x6593)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Feb 23 11:41:44 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63f750f8-7d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:28:6b:c7:27:5e:5a:c7:e5:af:42:01:33:
45:85:9f:ac:40:dc:6c:78:06:fc:2d:0f:c5:da:d3:
81:72:a8:c4:5a:2c:68:5c:81:14:b4:2b:c2:6a:bf:
e8:9f:18:47:1d:22:a0:7f:05:0a:33:8d:2d:a0:2b:
1c:c5:ba:40:33:83:69:15:fa:4b:d8:df:d1:0e:eb:
fa:df:3a:10:4c:ab:ea:18:46:6b:d6:6c:62:a1:04:
fc:99:1e:c1:0d:38:c7:e4:6c:42:4d:e0:e4:31:69:
1a:b5:cc:8c:4d:0b:41:8f:d2:01:ce:bd:7c:c2:dd:
39:fd:28:f4:47:b8:f1:1c:5b:59:37:dc:c3:38:ca:
fb:b8:5c:86:cc:77:e7:97:15:12:93:35:e0:b5:2d:
1d:11:0d:0a:3c:4b:b7:62:93:83:c6:74:55:25:7c:
e1:e8:9a:51:9e:fa:68:4a:98:c4:37:29:57:f6:be:
a2:b9:1c:85:26:d2:03:16:1a:e6:c4:6c:78:af:76:
7e:4d:cf:e6:dc:9a:e3:40:a7:77:74:30:91:93:cb:
b3:d5:83:8c:93:be:e3:c0:eb:b9:53:0a:8f:39:5a:
42:d2:23:92:92:e8:f7:a5:10:0c:eb:9a:66:8b:12:
3b:fe:54:82:a5:d0:a3:1d:65:05:18:49:71:77:70:
2a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:BA:83:4B:62:22:1E:DA:8E:DE:4F:39:C3:D1:DD:2A:5E:74:7A:3F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8131E964B34D11ED96C6216DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.181.84.0/23
103.182.58.0/23
103.187.92.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:54:0a:06:0a:66:8f:50:bf:85:dd:86:dd:40:bf:67:54:d3:
c4:25:5a:49:4e:fc:cf:eb:88:f8:51:b0:34:3d:34:84:4f:bf:
31:06:de:d0:0e:e0:ed:a2:c5:60:31:c7:48:c4:18:ae:74:8e:
2f:79:d1:07:bb:77:f8:30:09:51:6c:76:df:34:d8:57:e8:09:
0e:df:fb:cb:96:e6:53:c9:c2:c4:62:b6:99:b9:5e:1b:ed:f5:
30:71:fa:06:ac:e8:76:f0:3c:ac:33:d5:9d:61:04:11:4e:99:
fe:2e:08:c9:b1:b6:b7:79:71:67:66:00:99:48:34:51:0f:2c:
4c:01:89:84:2f:9d:fb:b1:8e:3b:29:0a:77:00:3e:2e:6e:93:
c7:a4:bb:65:02:99:02:01:0b:3c:8f:ce:32:16:44:64:45:48:
e9:4a:28:f2:74:bf:e7:e2:73:5b:ea:a1:11:62:77:8f:c7:16:
85:9d:62:ee:9d:18:86:31:ce:b5:80:45:ed:0c:70:c8:79:f4:
71:57:67:d0:5f:b4:9d:c8:7c:fd:fe:0b:3a:c4:a3:af:4e:fc:
ab:6b:bd:f9:27:50:de:f8:9e:43:71:78:55:ba:b2:eb:0e:0e:
44:c1:cf:32:7b:90:19:4b:59:b6:58:20:6e:33:8f:69:b4:63:
3d:f1:d4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:38 2025 by rpki-client