Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99FBE33A33BD11EB9CBE0C10C4F9AE02.roa
File: 99FBE33A33BD11EB9CBE0C10C4F9AE02.roa (raw, json)
Hash identifier: YuDBM/OgwizmN4Dyky5FumkaMDCCqdD/+a48mYlcDJo=
Subject key identifier: 88:C7:61:77:4C:96:11:A4:63:82:21:50:99:B9:EE:EE:05:D7:D8:80
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 4005
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99FBE33A33BD11EB9CBE0C10C4F9AE02.roa
Signing time: Wed 27 Oct 2021 10:41:24 +0000
ROA not before: Wed 27 Oct 2021 10:41:24 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 141314
IP address blocks: 103.87.104.0/24 maxlen: 24
103.87.105.0/24 maxlen: 24
103.87.106.0/24 maxlen: 24
103.87.107.0/24 maxlen: 24
2001:df5:6b80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16389 (0x4005)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Oct 27 10:41:24 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61792cd3-350b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:aa:95:d5:73:89:fd:ce:a9:7a:e6:44:92:
1c:38:57:7f:2c:d1:53:9a:23:ca:51:ab:53:de:3d:
77:47:ec:5f:11:01:89:ce:b6:f4:d6:9c:f7:d8:1e:
37:34:f6:25:5e:aa:8e:ab:d1:9f:d3:41:d1:06:69:
bf:11:7d:52:40:53:1e:3c:ee:88:06:8c:8a:71:a6:
e5:a2:43:b2:5b:42:6b:26:3e:39:6d:6a:ee:cc:43:
e4:00:7c:a7:d2:24:b0:a6:bf:3c:16:66:5a:d1:ba:
f9:7f:1d:f0:c0:c9:74:66:f1:8a:36:86:fe:c1:98:
a5:6f:58:b0:e0:0b:c0:0a:95:6b:d9:dd:f7:c7:9c:
9c:60:48:7f:67:de:c7:10:f5:7f:77:8a:f8:09:bf:
f3:4d:e8:a1:f2:c9:d0:b7:3d:11:c8:67:df:1c:2f:
03:71:dd:bd:cb:67:ae:81:7b:71:f6:83:d0:f2:e1:
71:d8:00:dd:16:14:00:ce:f9:dc:85:6b:02:5b:5f:
19:30:72:f7:58:1f:d3:e6:5e:3f:a8:9d:20:5a:5f:
76:c6:b3:08:19:83:ab:43:12:d3:88:f4:cb:b0:d7:
a2:92:74:30:65:c8:77:cf:6a:d7:4f:de:c0:59:b9:
60:e0:67:58:31:a7:e1:28:6f:84:cb:3f:fe:14:f6:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C7:61:77:4C:96:11:A4:63:82:21:50:99:B9:EE:EE:05:D7:D8:80
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99FBE33A33BD11EB9CBE0C10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.87.104.0/22
IPv6:
2001:df5:6b80::/48
Signature Algorithm: sha256WithRSAEncryption
3f:eb:6c:8e:23:82:28:41:de:72:bf:6b:8b:7c:2d:d0:ec:dc:
dc:51:71:a4:84:80:41:0b:3b:16:2a:3b:b5:13:8e:f0:2f:27:
07:bb:b4:a2:de:3d:76:0f:b8:63:b9:c5:e7:f8:5a:fd:fc:29:
8b:8e:98:f8:75:0a:ce:37:45:55:ea:15:cf:a5:de:ba:83:9e:
a4:6b:c3:03:6d:fa:33:d1:8e:1f:f6:f4:d8:20:60:fb:04:89:
1a:26:9b:95:5e:46:9f:e8:31:63:1a:00:fd:1d:f5:92:8a:de:
1b:df:69:4b:41:aa:13:b3:a0:c6:69:54:bb:90:a5:f9:eb:a0:
af:17:b9:1c:3f:d3:a4:3e:2b:87:86:6c:24:52:2c:4f:57:e1:
37:5a:d6:7f:3a:8c:69:bc:3d:32:d9:c4:62:e5:5c:0a:88:39:
cc:09:a9:36:c8:1d:7a:87:55:5b:1a:43:15:11:7e:27:4a:30:
5d:17:49:36:21:47:57:a0:a6:0a:6f:bd:6d:7d:aa:fa:5a:e2:
fa:cc:68:d7:69:60:ca:d4:c1:df:27:32:81:7e:20:46:ec:fd:
9f:25:e3:58:87:8e:80:7b:58:5b:10:3c:aa:f0:11:c7:57:42:
cc:25:2f:0c:1c:1d:b9:d4:c3:46:9d:26:80:f5:6c:44:aa:c4:
8a:49:3e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:04:36 2025 by rpki-client