Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4E728BCC7B911ECA398E513C4F9AE02.roa
File: B4E728BCC7B911ECA398E513C4F9AE02.roa (raw, json)
Hash identifier: UyV/h0CWRiC0v/Rg46yO3JRlZQP3QuaSDU9c63ywUpc=
Subject key identifier: F9:C4:2B:57:B6:1D:C1:A4:D5:71:FC:4A:58:12:3E:93:63:AA:5C:EA
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 61DA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4E728BCC7B911ECA398E513C4F9AE02.roa
Signing time: Fri 23 Dec 2022 07:11:37 +0000
ROA not before: Fri 23 Dec 2022 07:11:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141854
IP address blocks: 103.156.206.0/23 maxlen: 24
2001:df1:a140::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25050 (0x61da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Dec 23 07:11:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63a554a9-a881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:5d:ee:62:28:b9:ad:fd:22:e6:13:5a:9e:
fd:20:45:9c:83:d4:7a:0a:a7:8c:c3:54:61:9f:bb:
7c:84:78:4e:72:51:a8:ed:88:c2:d8:8c:a1:9d:75:
1a:7b:ad:73:4b:63:1e:40:a4:d8:46:cb:63:c0:5e:
22:3e:98:48:78:37:8f:b6:78:81:22:56:b1:b2:e6:
77:05:8a:5c:12:66:b7:c2:b3:b1:6f:31:5c:cf:3f:
f4:33:a4:65:8e:06:90:51:0a:a4:19:8d:a9:4b:0f:
0b:f4:67:c8:d7:88:5c:6b:af:1a:5c:c3:e4:d1:86:
df:2d:ee:e2:2b:e0:cc:2a:cf:ff:12:e5:43:a3:e8:
06:00:92:e2:d1:eb:14:8a:98:11:5a:85:f2:f3:d9:
84:01:1f:72:39:07:a1:ca:81:89:a1:e6:a0:bc:38:
f0:a5:fb:f8:23:80:c7:f3:39:f5:1c:63:d4:e7:bf:
37:36:fe:96:33:96:3b:26:51:d0:f8:29:31:a9:88:
8e:eb:da:db:5d:b1:8f:53:2c:1d:4f:56:a2:f5:da:
36:5d:bd:06:28:12:1e:6c:0a:e9:83:8c:16:30:87:
87:77:fb:d2:62:b9:6f:48:0b:d1:5f:18:af:4c:0c:
ee:ef:89:1d:ab:85:c9:94:5a:e5:cf:cf:d6:e5:6f:
75:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C4:2B:57:B6:1D:C1:A4:D5:71:FC:4A:58:12:3E:93:63:AA:5C:EA
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B4E728BCC7B911ECA398E513C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.156.206.0/23
IPv6:
2001:df1:a140::/48
Signature Algorithm: sha256WithRSAEncryption
94:52:61:e8:62:b8:5b:d4:cf:4f:ac:51:3d:66:fb:51:b5:a0:
36:1b:90:6c:30:28:29:b4:b3:f9:ea:22:62:eb:1c:8e:c4:36:
b1:9f:a3:ab:9d:55:d7:9b:56:60:5a:1e:3e:9c:88:1e:2a:20:
4b:84:f9:0b:f2:31:7b:93:9c:d9:5e:6b:82:8c:82:f0:f5:e7:
15:a3:cd:9f:f6:e1:c5:21:92:60:fe:bf:fa:ef:95:33:17:85:
41:3b:36:7e:3a:50:3a:e7:71:2d:eb:ba:fc:98:6d:3e:ef:0a:
b4:f1:a2:fd:b5:bf:31:90:f0:27:82:20:51:7a:15:69:4f:d2:
99:f6:d6:dc:bf:3c:41:4f:21:6e:12:0b:e7:c1:e5:0c:93:d3:
fd:f2:e4:03:a3:15:9c:cc:24:90:d4:65:ae:86:74:31:f7:df:
2f:50:98:84:54:9c:cf:b3:8d:99:30:f1:1a:04:3d:8b:80:2d:
82:04:1b:45:75:b4:73:ae:4a:9c:d3:99:95:64:f6:9b:a2:8d:
d5:29:db:dd:88:33:88:36:d8:52:57:3a:82:42:80:aa:71:b7:
57:74:85:5b:17:c0:26:60:37:f7:76:4e:35:8a:9e:fc:aa:5b:
35:fe:89:ef:48:4e:77:ae:be:8c:3d:1f:53:17:38:60:49:a0:
fd:7d:85:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:50 2025 by rpki-client