Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A70EEA8F77D11EC8A48E072C4F9AE02.roa
File: 8A70EEA8F77D11EC8A48E072C4F9AE02.roa (raw, json)
Hash identifier: LNIyrVT6ZkDq/EaA//U9RsrT4c83pJFbKbRTLgFatpg=
Subject key identifier: 46:32:EC:81:45:8E:0C:75:F3:89:46:55:07:46:B8:C1:DB:B6:3D:15
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 582F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A70EEA8F77D11EC8A48E072C4F9AE02.roa
Signing time: Wed 29 Jun 2022 07:31:51 +0000
ROA not before: Wed 29 Jun 2022 07:31:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 103.171.50.0/24 maxlen: 24
103.172.84.0/24 maxlen: 24
103.176.130.0/23 maxlen: 24
103.235.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22575 (0x582f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Jun 29 07:31:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62bbffe7-e4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a9:fc:ee:d9:43:19:d2:76:91:af:b8:83:5a:
9c:01:e2:c8:41:c3:ff:f8:36:8c:15:e7:c8:77:ef:
ea:dc:df:a1:9b:0b:d5:01:4e:77:53:45:4c:9b:c1:
14:7a:23:e5:f8:a8:ca:bf:e5:75:a2:f2:9b:f9:f9:
1c:8c:25:df:d3:af:de:67:28:49:b2:b7:86:69:2f:
34:b6:63:e6:fc:5d:c4:79:4c:e2:a8:3b:38:86:e4:
fa:da:14:ba:1d:1f:7b:c6:67:43:9f:46:3d:32:c8:
01:9c:de:d6:62:92:70:83:69:78:0d:79:b1:30:7b:
05:04:9a:38:35:1d:89:6f:c1:9f:64:41:71:47:c9:
7a:80:31:61:9e:27:2a:ec:59:8f:b8:a8:b4:c1:90:
97:70:21:e3:d2:a3:c6:54:a0:b5:a6:39:9a:55:b1:
39:ca:02:bb:f6:72:b8:0c:94:79:71:38:0b:39:2c:
e0:a7:42:27:48:e5:da:44:66:d3:9a:4a:05:13:39:
29:00:f6:c6:90:c8:58:e6:18:a6:e9:35:96:86:22:
0b:9e:47:b7:b1:eb:5a:2c:59:ea:48:70:9d:d5:73:
65:1d:62:4d:18:25:34:91:52:f8:03:68:74:b6:44:
aa:7d:cd:fe:48:87:da:f9:7b:8b:05:5e:8a:e0:3e:
77:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:32:EC:81:45:8E:0C:75:F3:89:46:55:07:46:B8:C1:DB:B6:3D:15
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8A70EEA8F77D11EC8A48E072C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.50.0/24
103.172.84.0/24
103.176.130.0/23
103.235.64.0/24
Signature Algorithm: sha256WithRSAEncryption
66:8b:2f:bd:e5:80:62:48:0f:39:15:8c:a0:2f:86:a4:e8:7c:
b7:f3:a0:f1:78:c3:b6:b9:06:b8:07:aa:96:6c:0f:22:85:b1:
ae:79:48:d6:c7:1e:36:af:c6:25:21:50:bc:e2:16:ec:ea:d2:
bc:d7:0e:4f:fd:7d:84:98:c3:a0:26:89:65:49:fc:67:e9:25:
cd:90:4a:74:53:c6:16:17:ad:74:de:e4:37:ac:9e:54:1c:22:
b3:27:07:d0:f5:7d:a1:2b:0b:4d:b7:42:39:64:00:f7:7a:0a:
45:9f:ed:d9:5a:86:c9:ad:bf:34:f0:01:a7:aa:52:a4:fa:4d:
62:50:c6:79:77:17:c9:a5:06:2d:46:bd:35:01:ce:2b:4b:5e:
d6:18:5e:31:4e:93:b2:b4:db:78:22:36:66:c0:b0:7b:8a:7d:
80:d9:e5:cd:fa:66:9b:82:0c:05:de:e7:9c:83:86:3a:56:93:
a5:5d:db:25:51:79:70:3e:d8:60:03:be:ac:f5:db:b0:dd:56:
eb:60:11:19:48:c9:47:dc:ab:62:e5:cf:00:30:d9:be:11:2c:
73:ac:0c:27:3a:21:ba:9a:8d:1a:5c:a1:eb:e0:3f:6c:2a:20:
5b:c1:20:9e:c5:0b:6c:2e:1e:8f:be:2e:24:49:61:8b:95:35:
33:98:a5:dc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICWC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjIwNjI5MDczMTUxWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmJiZmZlNy1lNGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtKn87tlDGdJ2ka+4g1qcAeLIQcP/+DaMFefId+/q3N+hmwvVAU53U0VMm8EU
eiPl+KjKv+V1ovKb+fkcjCXf06/eZyhJsreGaS80tmPm/F3EeUziqDs4huT62hS6
HR97xmdDn0Y9MsgBnN7WYpJwg2l4DXmxMHsFBJo4NR2Jb8GfZEFxR8l6gDFhnicq
7FmPuKi0wZCXcCHj0qPGVKC1pjmaVbE5ygK79nK4DJR5cTgLOSzgp0InSOXaRGbT
mkoFEzkpAPbGkMhY5him6TWWhiILnke3setaLFnqSHCd1XNlHWJNGCU0kVL4A2h0
tkSqfc3+SIfa+XuLBV6K4D53bwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFEYy7IFF
jgx184lGVQdGuMHbtj0VMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOEE3MEVFQThG
NzdEMTFFQzhBNDhFMDcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E
IjAgMB4EAgABMBgDBABnqzIDBABnrFQDBAFnsIIDBABn60AwDQYJKoZIhvcNAQEL
BQADggEBAGaLL73lgGJIDzkVjKAvhqTofLfzoPF4w7a5BrgHqpZsDyKFsa55SNbH
HjavxiUhULziFuzq0rzXDk/9fYSYw6AmiWVJ/GfpJc2QSnRTxhYXrXTe5DesnlQc
IrMnB9D1faErC023QjlkAPd6CkWf7dlahsmtvzTwAaeqUqT6TWJQxnl3F8mlBi1G
vTUBzitLXtYYXjFOk7K023giNmbAsHuKfYDZ5c36ZpuCDAXe55yDhjpWk6Vd2yVR
eXA+2GADvqz127DdVutgERlIyUfcq2LlzwAw2b4RLHOsDCc6IbqajRpcoevgP2wq
IFvBIJ7FC2wuHo++LiRJYYuVNTOYpdw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:58:18 2025 by rpki-client