Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/922B8B32876711EEB382FD42C4F9AE02.roa
File: 922B8B32876711EEB382FD42C4F9AE02.roa (raw, json)
Hash identifier: 3kzZu0kTn+yjDIPjXNJSSHal9vXfLv2T0YrVOVgSFgE=
Subject key identifier: 6D:F6:1C:86:1A:B1:C0:4D:E9:B9:E4:0D:AD:0B:C9:31:3D:82:FD:D3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7E05
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/922B8B32876711EEB382FD42C4F9AE02.roa
Signing time: Mon 20 Nov 2023 05:42:20 +0000
ROA not before: Mon 20 Nov 2023 05:42:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141835
IP address blocks: 103.168.23.0/24 maxlen: 24
103.169.242.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32261 (0x7e05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 20 05:42:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655af1bc-433a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:6e:67:a4:11:3c:3a:6a:d6:76:93:a3:b2:
d4:12:f2:a4:71:fa:c1:38:80:1a:2a:0d:31:60:d2:
1e:a5:da:69:d1:9f:2c:2b:38:51:99:55:50:95:3a:
7d:60:50:c3:b8:6e:31:73:9a:a1:0b:4c:03:0e:86:
44:50:0f:44:88:dd:4e:08:b8:09:a1:67:30:21:e5:
b3:0e:01:25:4d:57:b5:06:d9:8f:ba:4a:e3:db:de:
62:09:4b:94:ab:f2:5e:e9:1c:bd:06:eb:68:89:c1:
50:8c:1f:c3:73:8e:96:53:9d:78:ce:e1:06:c1:ff:
a8:fd:b3:9c:7a:fe:5a:4d:dd:24:5f:3e:93:2e:74:
16:6d:9a:e0:cf:5d:36:52:50:6d:e7:91:70:e8:19:
07:1f:e5:66:ef:ab:25:2d:8e:38:1c:a7:f3:6d:bc:
58:c7:74:4d:76:35:58:09:0f:3d:c8:c6:ff:45:de:
b3:21:13:16:88:65:46:3b:e9:5f:f3:62:b3:59:62:
4c:d5:2a:e0:93:f9:d2:a9:54:e8:42:d4:b8:eb:1b:
50:ea:7d:b9:57:e1:79:6a:f9:e9:ce:42:9b:31:94:
0e:ce:a7:f8:76:fe:4f:d6:c7:35:5d:31:2a:7a:cd:
62:81:b3:1d:5a:7e:67:0c:0d:6b:30:52:60:f1:1a:
4f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F6:1C:86:1A:B1:C0:4D:E9:B9:E4:0D:AD:0B:C9:31:3D:82:FD:D3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/922B8B32876711EEB382FD42C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.168.23.0/24
103.169.242.0/23
Signature Algorithm: sha256WithRSAEncryption
20:e9:b1:53:83:90:0e:48:86:0b:50:c4:7c:64:ae:50:86:f4:
6f:7f:b6:f2:7a:ec:ff:40:e6:eb:df:43:f6:ca:f4:91:7f:be:
fc:98:d9:e4:e5:50:cd:e1:14:da:2e:c0:89:a6:8c:fc:32:57:
70:a8:81:5d:a9:81:35:a7:24:d2:95:c9:ba:ee:34:8a:f7:be:
6d:a3:af:d4:bc:8b:54:00:ca:8d:28:22:c5:50:42:df:76:2f:
32:3b:f7:be:c1:1c:58:32:f2:0d:eb:91:34:58:c0:e6:a3:78:
97:45:23:72:f6:2e:88:54:bf:35:40:d6:d5:8c:c6:af:02:75:
7a:35:5d:09:1c:c9:98:8a:2c:69:7b:70:85:60:7e:c6:12:4e:
fc:66:cb:eb:5f:6b:53:41:17:0b:5a:50:27:3b:da:4a:71:d8:
bc:12:93:0f:7d:29:99:c7:8d:0a:ea:17:5e:52:20:e8:2c:23:
63:fd:7c:dc:70:b3:22:fa:5a:2a:ec:98:1a:bc:42:d2:2c:b7:
c5:01:1e:fa:32:5a:65:bc:a8:3a:58:cc:f4:01:2a:bf:ba:92:
f3:8d:39:99:da:91:87:4a:b3:81:82:1a:89:07:26:70:cd:90:
e4:5c:1d:b0:93:14:8e:77:17:67:f6:4a:9a:c3:98:0d:f5:7e:
da:b7:ec:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:13:25 2025 by rpki-client