Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB345E90E32711EDB4DEA453C4F9AE02.roa
File: AB345E90E32711EDB4DEA453C4F9AE02.roa (raw, json)
Hash identifier: BZyE31obdfH/ueNfX27CerE0EKxSPm2Fc0Wkck4FdPA=
Subject key identifier: 51:DB:5E:F6:A5:88:7E:98:E6:C4:54:D4:55:D8:C5:DE:9B:86:7F:9E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 68F6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB345E90E32711EDB4DEA453C4F9AE02.roa
Signing time: Tue 25 Apr 2023 05:11:44 +0000
ROA not before: Tue 25 Apr 2023 05:11:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137119
IP address blocks: 103.171.50.0/23 maxlen: 24
103.172.84.0/23 maxlen: 24
2001:df7:4c00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26870 (0x68f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Apr 25 05:11:44 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6447610f-22a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:aa:e1:d8:6e:a1:28:9b:eb:99:b3:01:9a:a7:
d4:e2:b4:55:e1:b9:a6:48:6e:76:f4:33:d0:31:be:
db:9d:32:07:a0:46:cd:06:03:ec:7f:79:fa:0c:6f:
ed:d0:35:25:b4:74:3a:92:f6:46:54:5b:08:f0:56:
63:d9:77:ba:b6:6c:28:b7:13:0e:6d:33:54:c4:9a:
2c:af:6d:c1:90:08:8f:04:e8:77:f3:9e:7b:f9:ff:
5c:d6:4b:a4:6c:a9:c2:96:2c:33:85:67:60:63:f8:
6f:6d:90:d7:10:50:07:77:cd:79:ca:65:44:f2:f1:
f9:c9:7d:17:0e:4f:d4:9f:2e:4e:04:ee:b9:ec:c0:
4a:21:9d:02:25:42:56:b5:34:79:b5:76:87:11:de:
2c:39:6d:fa:20:7c:64:f7:4e:b3:fc:86:c1:bf:fb:
fc:36:08:37:cc:f0:21:6a:3b:82:29:c0:d2:96:f4:
d3:2e:e3:17:62:43:d3:75:d9:a4:5e:47:2b:10:8f:
8c:52:3e:13:f9:00:29:e4:af:26:f5:9e:4c:9d:ad:
83:d7:46:4a:63:a7:7e:db:26:52:e7:34:e0:d9:bb:
cb:80:fe:2a:12:a8:e3:92:ae:60:c4:1d:7d:0c:9e:
c0:b1:ad:83:61:55:73:35:f6:f8:dc:32:da:f8:1b:
f8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DB:5E:F6:A5:88:7E:98:E6:C4:54:D4:55:D8:C5:DE:9B:86:7F:9E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/AB345E90E32711EDB4DEA453C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.50.0/23
103.172.84.0/23
IPv6:
2001:df7:4c00::/48
Signature Algorithm: sha256WithRSAEncryption
0b:03:6d:00:ff:47:b2:29:73:47:42:00:7a:1c:0c:d4:62:3b:
a2:f0:bd:52:4f:e5:1d:82:2e:bf:13:09:dd:bc:bf:13:50:10:
cc:92:3d:a5:a4:93:6a:ad:04:4a:3e:8d:7e:91:ac:68:c3:3f:
ba:c7:63:5b:b3:5b:0f:4a:12:c2:0b:96:18:43:52:e3:43:c9:
dd:59:3d:b9:f2:89:96:fd:40:05:b6:40:09:ee:50:a4:01:e9:
21:bb:aa:53:30:98:17:ec:ce:c6:77:be:aa:a2:e3:1f:18:86:
29:86:c4:7a:b6:87:6a:e2:30:b3:5b:fe:71:13:4f:43:bf:b0:
e1:76:84:75:94:68:4e:b5:ca:c8:b0:d4:a4:04:7e:de:c0:7a:
ca:97:20:ed:a3:25:1e:90:a8:5c:cc:1a:08:b9:64:45:7e:cd:
5e:fc:b6:66:8b:6b:54:84:1c:20:72:f6:3d:8d:32:6e:bf:78:
ab:3f:7a:77:28:80:0b:2e:f4:b4:f9:a7:15:36:5a:35:65:02:
89:82:32:26:db:6e:e8:84:35:d2:b6:c5:91:a1:fd:8c:ac:9e:
92:8c:88:c2:fd:75:9f:11:36:12:05:89:07:cb:08:0b:ce:3a:
0c:f0:27:c0:c6:b9:78:df:1e:7e:18:80:4c:3f:db:7c:1c:c1:
a7:ab:a6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:04 2025 by rpki-client