Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/FCF87E229A9F11ECA3CBCD2CC4F9AE02.roa
File: FCF87E229A9F11ECA3CBCD2CC4F9AE02.roa (raw, json)
Hash identifier: lGsXZeURgtI2xaCF/UJ5XBXVINybAQE4Yp8RsG4921Y=
Subject key identifier: 9B:65:81:84:87:7D:42:D4:C0:E1:49:8E:C1:59:83:39:BB:3F:59:B3
Certificate issuer: /CN=A91C63A6/serialNumber=701F3C14F0AD7EEF65D34D003CDC1924648CDE37
Certificate serial: 020A
Authority key identifier: 70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/FCF87E229A9F11ECA3CBCD2CC4F9AE02.roa
Signing time: Mon 03 Apr 2023 04:54:40 +0000
ROA not before: Mon 03 Apr 2023 04:54:40 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 136816
IP address blocks: 103.84.44.0/22 maxlen: 22
210.79.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 522 (0x20a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C63A6
Validity
Not Before: Apr 3 04:54:40 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=642a5c0f-a963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:64:1f:aa:a8:8a:87:cc:56:7c:14:97:5d:
d6:3b:fb:75:89:28:a9:81:5b:bb:92:0e:95:ac:26:
3e:c0:f5:b7:a1:6a:6a:58:f6:13:58:36:65:77:d3:
e4:60:ff:ba:15:ad:88:ce:a3:a1:e9:e6:5d:ca:0e:
03:6a:8e:75:32:76:ed:a6:c4:ca:4d:21:b5:9e:da:
51:bc:9c:22:e0:4c:7d:7e:dd:37:86:1a:50:8f:af:
6d:df:03:47:b9:7c:f3:9c:a4:ed:8f:c3:8f:86:62:
b0:b0:7f:56:4f:1b:fd:d6:5c:79:2b:2e:c1:d6:06:
95:ef:da:96:ef:b0:55:77:6a:9c:8b:46:a5:28:6e:
dd:31:e0:2b:b7:0a:e4:c5:c6:5e:55:78:af:15:63:
64:44:26:50:54:36:84:62:44:39:f2:01:f2:d8:8d:
3a:0b:b5:14:37:07:89:15:5f:59:f6:5f:a2:c6:fe:
9a:6f:e2:03:44:ad:d7:e1:11:74:2c:8d:c1:38:38:
d4:4f:cb:4d:2f:ba:f1:56:8c:80:a4:5b:12:11:44:
a8:c3:ec:ed:0c:5a:05:e5:57:e8:32:b0:96:54:f6:
b1:0d:78:01:92:84:4f:3a:6a:3b:18:9f:06:3a:6d:
4d:78:47:b4:a0:67:7e:d1:d6:97:39:99:68:29:c5:
e6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:65:81:84:87:7D:42:D4:C0:E1:49:8E:C1:59:83:39:BB:3F:59:B3
X509v3 Authority Key Identifier:
keyid:70:1F:3C:14:F0:AD:7E:EF:65:D3:4D:00:3C:DC:19:24:64:8C:DE:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/cB88FPCtfu9l000APNwZJGSM3jc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cB88FPCtfu9l000APNwZJGSM3jc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C63A6/0D39C4E49A9B11EC82C70B20C4F9AE02/FCF87E229A9F11ECA3CBCD2CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.44.0/22
210.79.60.0/22
Signature Algorithm: sha256WithRSAEncryption
27:0e:78:ca:a2:b6:95:3d:44:cf:7e:68:d5:01:50:b5:d6:75:
8d:dc:1d:52:89:36:00:da:fa:42:70:c7:d2:2f:b6:e5:4a:40:
26:18:9b:6a:7c:92:31:e0:e1:01:3a:ad:a3:85:55:8e:7e:66:
d3:3f:47:32:51:14:90:13:93:f5:44:a5:c4:5d:c4:d5:df:42:
57:b5:e1:f9:7b:e1:4c:6a:67:35:b5:f6:74:e7:25:d6:14:e0:
2a:5e:05:be:41:87:a8:70:07:8b:a7:59:08:72:c0:c8:00:42:
13:db:4e:31:12:dd:84:17:d0:d4:c1:04:33:f9:3a:0b:45:d1:
d6:a4:1c:26:26:86:99:52:e6:ba:45:8b:3d:b1:23:04:29:93:
bc:22:1c:5f:85:9b:b5:e0:53:3f:a9:a2:03:d8:b5:89:92:a4:
30:8a:06:b8:a2:4b:66:03:b9:81:d9:2c:78:92:9b:bc:d5:b2:
11:a2:b3:92:1d:c3:b8:50:6e:49:62:df:35:04:53:26:1b:bb:
f8:1c:1e:88:eb:43:20:5b:ab:f5:30:a5:35:b6:01:50:1e:52:
5a:4f:89:ab:e6:08:9a:43:e6:71:06:57:01:d2:e8:5d:fb:27:
12:66:f1:45:c0:31:64:d3:80:b2:9a:ba:f8:e0:63:5c:2e:ae:
02:be:ac:91
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYzQTYxMTAvBgNVBAUTKDcwMUYzQzE0RjBBRDdFRUY2NUQzNEQwMDNDREMxOTI0
NjQ4Q0RFMzcwHhcNMjMwNDAzMDQ1NDQwWhcNMjQwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDJhNWMwZi1hOTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx8xkH6qoiofMVnwUl13WO/t1iSipgVu7kg6VrCY+wPW3oWpqWPYTWDZld9Pk
YP+6Fa2IzqOh6eZdyg4Dao51MnbtpsTKTSG1ntpRvJwi4Ex9ft03hhpQj69t3wNH
uXzznKTtj8OPhmKwsH9WTxv91lx5Ky7B1gaV79qW77BVd2qci0alKG7dMeArtwrk
xcZeVXivFWNkRCZQVDaEYkQ58gHy2I06C7UUNweJFV9Z9l+ixv6ab+IDRK3X4RF0
LI3BODjUT8tNL7rxVoyApFsSEUSow+ztDFoF5VfoMrCWVPaxDXgBkoRPOmo7GJ8G
Om1NeEe0oGd+0daXOZloKcXm8wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJtlgYSH
fULUwOFJjsFZgzm7P1mzMB8GA1UdIwQYMBaAFHAfPBTwrX7vZdNNADzcGSRkjN43
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjNBNi8wRDM5QzRFNDlB
OUIxMUVDODJDNzBCMjBDNEY5QUUwMi9jQjg4RlBDdGZ1OWwwMDBBUE53WkpHU00z
amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NCODhGUEN0ZnU5bDAwMEFQTndaSkdTTTNqYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzYzQTYvMEQzOUM0RTQ5QTlCMTFFQzgyQzcwQjIwQzRGOUFFMDIvRkNGODdFMjI5
QTlGMTFFQ0EzQ0JDRDJDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnVCwDBALSTzwwDQYJKoZIhvcNAQELBQADggEBACcOeMqi
tpU9RM9+aNUBULXWdY3cHVKJNgDa+kJwx9IvtuVKQCYYm2p8kjHg4QE6raOFVY5+
ZtM/RzJRFJATk/VEpcRdxNXfQle14fl74UxqZzW19nTnJdYU4CpeBb5Bh6hwB4un
WQhywMgAQhPbTjES3YQX0NTBBDP5OgtF0dakHCYmhplS5rpFiz2xIwQpk7wiHF+F
m7XgUz+pogPYtYmSpDCKBriiS2YDuYHZLHiSm7zVshGis5Idw7hQbkli3zUEUyYb
u/gcHojrQyBbq/UwpTW2AVAeUlpPiavmCJpD5nEGVwHS6F37JxJm8UXAMWTTgLKa
uvjgY1wurgK+rJE=
-----END CERTIFICATE-----
Generated at Fri Apr 11 15:30:39 2025 by rpki-client