Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB278C78E40911EDA0416B1FC4F9AE02.roa
File: FB278C78E40911EDA0416B1FC4F9AE02.roa (raw, json)
Hash identifier: 31GD2AQs6DyM3UrFEvLFdVXJZxyb+5alDybpTsLSwaw=
Subject key identifier: CD:DE:D0:C0:6B:81:D5:36:A1:21:7E:31:5E:12:55:C5:0A:F8:18:47
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6909
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB278C78E40911EDA0416B1FC4F9AE02.roa
Signing time: Wed 26 Apr 2023 08:11:44 +0000
ROA not before: Wed 26 Apr 2023 08:11:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137119
IP address blocks: 103.171.50.0/23 maxlen: 24
2001:df7:4c00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26889 (0x6909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2
Validity
Not Before: Apr 26 08:11:44 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6448dcc0-b0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:5f:1f:35:99:08:59:07:c3:7d:65:51:28:
28:56:7c:99:d1:45:12:5a:86:ef:05:60:b9:a0:7b:
88:a4:89:6d:b8:f4:7f:ee:33:53:31:08:c9:5e:f3:
12:76:f1:97:e1:00:a3:b1:05:ab:df:c3:23:f6:2a:
1b:6f:ae:78:89:8e:40:c4:e3:1c:5a:8e:cd:09:18:
6b:e3:56:f3:73:e8:2f:94:5a:44:78:65:83:14:61:
91:80:c7:38:23:61:96:38:e3:88:c3:ea:83:50:0d:
01:fe:77:ca:e1:4d:74:7b:83:9a:96:51:84:8d:5d:
ae:66:0d:1f:b2:ae:ea:1e:2a:58:02:53:d1:00:ff:
47:6b:ac:23:80:ca:dd:79:d3:3d:b8:96:36:b5:9a:
68:ca:9f:52:2b:83:84:f7:26:93:32:df:f2:1c:d2:
9a:b8:fb:5f:7b:23:4b:07:65:66:b4:91:04:43:5b:
e8:e0:32:da:65:d3:9e:a4:76:22:1f:2d:b3:3b:c3:
cc:0f:ce:d9:f9:2e:5d:fb:a2:57:9f:07:a3:da:e8:
2e:18:93:22:f3:38:6b:d0:2e:93:2b:44:d5:39:b5:
92:dd:8c:40:2a:2c:ed:84:8c:72:88:8f:a0:92:cc:
a8:74:0a:8d:33:ed:8c:7c:3f:b1:cd:5a:d3:a3:0e:
9d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DE:D0:C0:6B:81:D5:36:A1:21:7E:31:5E:12:55:C5:0A:F8:18:47
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB278C78E40911EDA0416B1FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.171.50.0/23
IPv6:
2001:df7:4c00::/48
Signature Algorithm: sha256WithRSAEncryption
35:b0:d0:e2:ec:d4:93:2e:38:a7:02:ee:10:41:cf:22:ae:1c:
d4:6d:41:f4:6b:06:f4:db:e2:0f:e4:e5:95:f2:02:58:a0:d7:
64:41:8a:bd:1b:f5:e4:14:ea:24:55:5c:b1:f6:34:9b:14:e3:
b1:42:dc:51:b1:55:c0:aa:8d:fc:43:37:a1:f5:5e:3c:d5:ea:
8f:af:6b:a3:c0:0e:fe:6a:e1:28:36:95:2b:71:f5:75:6c:0b:
06:3a:5f:3d:a8:91:2e:1a:59:f5:06:7c:3a:2a:02:e5:16:44:
29:b6:d7:b9:ae:ed:cd:ec:36:b7:aa:cd:0f:da:e7:54:35:d6:
96:27:82:fd:1e:a0:e9:e5:3d:21:f2:b8:82:50:4c:75:14:2e:
46:a3:1c:8a:c7:4f:35:83:e7:31:11:9c:ce:2a:0e:4c:8f:fc:
a0:c4:15:71:76:89:74:c4:65:d7:02:61:8a:22:e2:8c:2d:f3:
03:e8:ae:c8:fd:fb:73:a3:45:68:bf:b3:2a:e1:65:1a:79:ca:
4a:32:8f:5c:e7:90:0c:2b:06:38:e3:f1:78:54:28:1f:86:ff:
cb:46:ab:b2:8d:5d:fe:01:a4:0c:5f:a9:2c:4f:f1:7a:47:68:
26:06:da:be:6f:10:82:ef:fc:60:91:b7:6d:48:b5:3a:14:34:
c9:09:a5:f4
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICaQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMwNDI2MDgxMTQ0WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDQ4ZGNjMC1iMGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvedfHzWZCFkHw31lUSgoVnyZ0UUSWobvBWC5oHuIpIltuPR/7jNTMQjJXvMS
dvGX4QCjsQWr38Mj9iobb654iY5AxOMcWo7NCRhr41bzc+gvlFpEeGWDFGGRgMc4
I2GWOOOIw+qDUA0B/nfK4U10e4OallGEjV2uZg0fsq7qHipYAlPRAP9Ha6wjgMrd
edM9uJY2tZpoyp9SK4OE9yaTMt/yHNKauPtfeyNLB2VmtJEEQ1vo4DLaZdOepHYi
Hy2zO8PMD87Z+S5d+6JXnwej2uguGJMi8zhr0C6TK0TVObWS3YxAKizthIxyiI+g
ksyodAqNM+2MfD+xzVrTow6dcwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFM3e0MBr
gdU2oSF+MV4SVcUK+BhHMB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRkIyNzhDNzhF
NDA5MTFFREEwNDE2QjFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnqzIwDwQCAAIwCQMHACABDfdMADANBgkqhkiG9w0BAQsF
AAOCAQEANbDQ4uzUky44pwLuEEHPIq4c1G1B9GsG9NviD+TllfICWKDXZEGKvRv1
5BTqJFVcsfY0mxTjsULcUbFVwKqN/EM3ofVePNXqj69ro8AO/mrhKDaVK3H1dWwL
BjpfPaiRLhpZ9QZ8OioC5RZEKbbXua7tzew2t6rND9rnVDXWlieC/R6g6eU9IfK4
glBMdRQuRqMcisdPNYPnMRGczioOTI/8oMQVcXaJdMRl1wJhiiLijC3zA+iuyP37
c6NFaL+zKuFlGnnKSjKPXOeQDCsGOOPxeFQoH4b/y0arso1d/gGkDF+pLE/xekdo
Jgbavm8Qgu/8YJG3bUi1OhQ0yQml9A==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:17 2025 by rpki-client