Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/84F3D632F15811ECAF20A34AC4F9AE02.roa
File: 84F3D632F15811ECAF20A34AC4F9AE02.roa (raw, json)
Hash identifier: rizHnWRcFfoQTVmbsrXIezw7izAHq8Xw5e1c++OPRQU=
Subject key identifier: 09:05:CC:39:8C:82:81:4F:55:AA:0F:9B:FE:F6:93:D6:4A:8A:32:F4
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 57C5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/84F3D632F15811ECAF20A34AC4F9AE02.roa
Signing time: Tue 21 Jun 2022 11:51:44 +0000
ROA not before: Tue 21 Jun 2022 11:51:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140545
IP address blocks: 103.189.214.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22469 (0x57c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 21 11:51:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62b1b0cf-dff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:b1:0e:c6:b2:36:94:2d:2b:26:ce:68:2b:
ff:48:11:d2:3f:0c:b5:fd:88:86:61:58:ae:f4:5d:
a0:a9:f9:56:34:e2:d7:c4:63:1d:9d:82:44:e2:24:
a9:b8:79:06:01:02:6a:82:cf:26:6c:25:ee:70:13:
39:b1:34:36:ec:61:ad:fa:a5:30:42:16:a7:cf:8b:
b6:30:bb:e5:e0:34:20:0b:bb:22:f5:24:09:34:97:
92:09:9c:81:e9:1f:3a:6f:17:52:fd:69:19:89:8d:
ed:71:8c:3c:8d:ae:8b:ea:b8:c8:ba:55:9a:7a:08:
b0:36:45:6f:86:e4:ad:da:99:ed:67:97:6b:55:e7:
f9:cf:7f:b4:fb:88:5b:42:a0:b6:e8:f4:43:37:2a:
f4:42:00:a3:9b:c5:10:3a:e1:4d:a4:68:05:fc:df:
8a:a2:c8:9d:a8:03:71:53:ff:9e:f5:d7:4f:f2:c4:
67:08:3d:33:61:8a:2e:b7:9d:02:4c:df:6a:fc:ee:
bd:ae:7a:be:3f:95:33:9a:8b:a7:2a:7e:6d:63:60:
d3:45:d0:2c:11:99:0f:f2:50:5f:1e:a4:08:85:d7:
c1:08:86:1b:48:d7:3e:de:93:aa:16:43:ee:44:4e:
51:3e:ea:b1:48:a3:ad:a9:b5:a7:2b:a1:04:9c:f9:
0b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:05:CC:39:8C:82:81:4F:55:AA:0F:9B:FE:F6:93:D6:4A:8A:32:F4
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/84F3D632F15811ECAF20A34AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.189.214.0/23
Signature Algorithm: sha256WithRSAEncryption
40:4b:13:fe:87:85:7b:3f:58:7f:2e:ed:19:e2:a5:f0:14:0f:
87:27:fe:b4:67:04:c8:96:4a:78:47:a9:45:c0:c7:b1:a0:38:
7a:2f:4a:11:92:5c:f6:e6:90:9a:5b:c1:04:cb:60:42:fd:0c:
26:0f:84:46:96:8f:50:18:f9:a1:d8:bf:5c:33:b5:30:2f:a4:
d5:58:a9:37:c6:9e:14:a5:65:ed:3b:60:ab:a6:43:3f:b0:5e:
e7:9f:18:e2:58:33:81:af:14:35:69:13:46:c4:d9:ff:dc:22:
d4:18:35:c9:17:23:67:e1:f1:9e:b6:22:74:33:13:ea:8e:28:
a8:66:d2:26:c5:42:63:25:59:4d:3b:b0:a6:fe:b8:ac:3a:17:
79:e0:df:87:a5:13:f2:ce:c7:50:17:5e:30:cb:ba:ec:5f:82:
47:ce:a6:52:38:93:c7:41:01:08:f1:12:99:e0:f7:91:ba:9f:
e4:31:d9:21:c8:1a:c3:fc:2c:00:7a:00:43:43:d3:a3:17:90:
f2:c8:1b:df:13:8c:3d:6e:a5:d9:8e:d1:d1:3d:e2:70:ed:b2:
20:36:75:11:54:fb:f6:10:29:c9:f2:01:fe:7a:2e:72:4f:09:
48:2d:31:3f:7b:3b:39:26:7a:a2:d6:b6:96:25:3b:86:a6:c8:
af:38:49:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:47 2025 by rpki-client