Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/84D72E74D9F011EEBF37992BC4F9AE02.roa
File: 84D72E74D9F011EEBF37992BC4F9AE02.roa (raw, json)
Hash identifier: hyDiYNMa+5XveyLEYkwxCQzuRNk/dJpu1weG9mSv+74=
Subject key identifier: FD:1D:CB:16:6D:53:34:DE:0F:61:87:BA:AE:2F:32:5A:57:E0:AE:16
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8409
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/84D72E74D9F011EEBF37992BC4F9AE02.roa
Signing time: Mon 04 Mar 2024 06:34:16 +0000
ROA not before: Mon 04 Mar 2024 06:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133304
IP address blocks: 103.105.100.0/22 maxlen: 24
103.159.30.0/24 maxlen: 24
103.159.31.0/24 maxlen: 24
2400:5ca0::/32 maxlen: 32
2400:5ca0::/48 maxlen: 48
2400:5ca0:1::/48 maxlen: 48
2400:5ca0:2::/48 maxlen: 48
2400:5ca0:3::/48 maxlen: 48
2400:5ca0:4::/48 maxlen: 48
2400:5ca0:5::/48 maxlen: 48
2400:5ca0:6::/48 maxlen: 48
2400:5ca0:7::/48 maxlen: 48
2400:5ca0:8::/48 maxlen: 48
2400:5ca0:9::/48 maxlen: 48
2400:c5e0::/32 maxlen: 32
2400:c5e0::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 33801 (0x8409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Mar 4 06:34:16 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65e56b68-f151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:a3:bc:12:f3:e5:7b:ca:6d:b4:68:8d:23:
bb:8b:3e:f4:67:3b:cc:38:8a:c8:9a:d5:2c:85:62:
88:94:72:44:07:c5:97:9a:99:a3:fc:b6:7e:b8:75:
fc:80:c3:30:27:f9:33:7a:c4:21:e4:ce:91:1e:d2:
b4:6f:dc:d0:03:50:ea:8d:5f:85:ab:41:0c:6d:46:
35:ba:53:33:a3:ee:91:e9:7b:68:93:d5:f7:34:06:
15:35:7e:04:93:a7:64:18:a9:b4:57:8d:e3:37:7f:
3a:d3:2d:da:6d:14:55:78:e3:68:a8:64:65:8c:de:
fe:62:08:e0:f7:27:b6:20:e9:67:a4:2d:32:05:41:
98:c1:57:8e:4c:e9:23:9b:dc:58:56:e1:46:08:f0:
b1:52:9c:27:87:d5:85:73:72:99:11:1a:ea:6a:c8:
7c:6f:2e:36:ad:8a:42:73:d2:82:f1:02:f1:a8:ff:
6e:9c:c1:42:40:1b:95:af:7a:ae:e8:77:75:70:d4:
11:86:c4:0c:97:ea:3a:b4:f3:18:ce:be:4e:75:6f:
74:06:00:64:a3:af:73:c6:7f:fc:7e:49:97:1d:26:
7f:5e:ac:4f:dc:c2:1b:a1:e0:25:c2:82:6f:bc:ba:
d7:70:ea:b3:58:92:19:f8:1e:a1:91:76:13:4c:d6:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1D:CB:16:6D:53:34:DE:0F:61:87:BA:AE:2F:32:5A:57:E0:AE:16
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/84D72E74D9F011EEBF37992BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.105.100.0/22
103.159.30.0/23
IPv6:
2400:5ca0::/32
2400:c5e0::/32
Signature Algorithm: sha256WithRSAEncryption
02:89:f3:ed:98:e3:e1:26:71:60:f2:9e:8b:90:0a:0f:df:24:
a7:7f:7a:04:2f:9f:7b:0d:e7:25:3a:88:d1:74:af:5a:e6:bf:
77:de:94:a6:53:63:1a:c9:9a:43:3f:e4:f5:8f:91:9a:7e:da:
aa:cd:8c:6b:52:95:7e:63:ad:28:88:a1:b1:1d:04:dc:44:4c:
b4:95:58:61:1f:da:f6:a5:eb:46:38:01:12:54:1b:64:2e:e7:
bd:d8:92:5d:3c:01:66:96:80:c0:41:fa:61:e5:2b:33:60:46:
cc:75:b6:70:fd:06:36:77:41:e5:cf:0a:08:3b:90:bc:37:b5:
09:07:51:50:89:c7:10:63:52:5e:01:5f:55:35:6a:fc:39:c8:
dd:a7:58:ca:af:c8:64:70:49:46:e9:d5:83:50:26:e4:ca:35:
d4:00:24:21:66:0c:11:da:27:15:15:bf:dd:95:e5:44:88:7a:
4a:7d:21:3f:0d:8c:3a:32:27:3b:13:5c:ee:18:07:46:69:c6:
fc:76:8c:36:ae:90:f5:4c:af:84:96:ec:c6:28:fb:d8:5e:e3:
bb:a1:45:bf:7e:25:8c:a0:f8:f4:09:6d:c0:dc:96:52:e2:3a:
6b:d8:84:da:e4:43:fd:35:d1:37:3d:1c:73:ea:42:ec:6b:41:
dd:ce:c6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:15 2025 by rpki-client