Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B043FE6A877B11EEB41EE75BC4F9AE02.roa
File: B043FE6A877B11EEB41EE75BC4F9AE02.roa (raw, json)
Hash identifier: rzP/5Sn3S9WuVKVgo0+rWDslhpsCeUv0W84rU6nnOcg=
Subject key identifier: B7:6F:72:8B:04:31:9C:D8:D8:7D:F3:3E:24:D3:D7:4A:C6:1B:4A:88
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7E4B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B043FE6A877B11EEB41EE75BC4F9AE02.roa
Signing time: Mon 20 Nov 2023 08:06:20 +0000
ROA not before: Mon 20 Nov 2023 08:06:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136367
IP address blocks: 103.180.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32331 (0x7e4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Nov 20 08:06:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655b137c-c712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:01:2a:b6:7f:67:8c:88:d7:5a:98:71:54:
0e:40:81:0f:72:15:d2:3c:c2:2b:fd:76:e6:38:ba:
58:34:8b:c2:75:62:d5:92:f9:34:94:36:40:38:76:
43:a1:fb:9e:47:fe:6d:29:83:bf:6e:95:02:0a:b1:
e5:4a:fb:9a:9d:24:6c:89:33:cd:e4:7f:c6:9e:d8:
7a:ea:c1:ec:b1:76:db:40:60:3c:11:89:a3:4d:b2:
87:4e:92:2f:91:62:23:84:c5:d1:5d:34:22:7c:29:
e6:36:23:ba:7d:2c:11:5d:0f:4b:17:c5:f5:6d:1d:
4a:2a:1c:56:3c:4b:74:f6:0c:b3:aa:d8:42:bd:f0:
24:ce:97:2b:bc:c6:86:02:7b:a5:54:aa:12:c2:10:
26:11:6c:7e:16:dc:0f:e4:e1:62:2b:af:6c:51:fd:
8f:df:9d:64:7f:b8:ce:b2:f2:fb:2e:83:46:61:5f:
31:5a:15:d7:a3:78:6c:47:46:09:f8:03:73:18:12:
3b:24:3d:4b:6f:41:d2:8e:e3:01:ff:93:96:a9:a9:
c1:c6:36:ca:21:ea:93:ec:85:e0:94:9a:02:ed:19:
71:c1:1c:a6:79:ae:03:c8:c3:e0:65:50:ae:a8:1d:
bb:20:ed:57:ef:e3:41:8c:43:ef:2a:d5:99:80:38:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6F:72:8B:04:31:9C:D8:D8:7D:F3:3E:24:D3:D7:4A:C6:1B:4A:88
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B043FE6A877B11EEB41EE75BC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b6:f7:ed:5e:6d:61:19:e7:b8:e7:bf:7a:f1:36:d6:74:e8:
f0:eb:df:8c:dc:19:08:53:ee:7c:c2:23:9d:1d:e9:6e:5e:2c:
78:c3:59:65:0d:8a:a9:d4:35:c7:72:29:23:c2:9d:c5:d9:8d:
97:b4:92:3a:ad:3e:95:d0:31:da:5a:fc:4b:81:07:1c:a3:8e:
5f:90:d1:f7:b6:4f:4c:25:72:e7:9e:86:68:f7:29:36:29:5d:
0c:17:64:06:f7:d7:9f:e5:b2:d7:ae:b9:dd:10:e3:0e:c1:68:
49:d6:f5:ec:b2:9a:9a:0b:b4:06:65:65:a4:fc:4e:46:e8:37:
d3:38:61:3a:b0:6f:42:be:ab:52:2d:76:81:04:3d:3a:1f:00:
63:3f:a1:2a:e7:22:3c:a6:ca:ea:b0:2c:90:4d:3f:7d:97:03:
33:09:93:3f:e4:6a:6d:2b:85:cd:b9:47:dd:a0:e1:c4:52:14:
2c:f2:6e:ec:cb:7c:a1:4b:5c:c5:85:66:4d:75:45:e9:60:df:
4b:43:af:f8:64:3e:a1:ef:0a:07:b3:7e:19:bd:18:b3:57:bb:
d3:0c:1b:b6:97:20:32:fd:21:1f:a8:61:b7:37:ff:86:2d:ff:
1b:1c:d5:7b:57:f6:38:11:7a:6b:da:4a:60:5e:86:02:f7:f2:
7e:40:32:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:56 2025 by rpki-client