Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/CD56EE84A1B711EFB6A2A32DC4F9AE02.roa
File: CD56EE84A1B711EFB6A2A32DC4F9AE02.roa (raw, json)
Hash identifier: e0DDB57Y7SGC8rWc3Ozg+WzxMnyr3TW/EsNdoBakZnw=
Subject key identifier: 68:95:A6:85:FF:23:D6:02:B6:1C:47:B5:10:E8:62:A7:19:43:55:C2
Certificate issuer: /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial: 0122
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/CD56EE84A1B711EFB6A2A32DC4F9AE02.roa
Signing time: Wed 13 Nov 2024 12:07:07 +0000
ROA not before: Wed 13 Nov 2024 12:07:07 +0000
ROA not after: Mon 31 Mar 2025 00:00:00 +0000
asID: 138346
IP address blocks: 103.179.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Validity
Not Before: Nov 13 12:07:07 2024 GMT
Not After : Mar 31 00:00:00 2025 GMT
Subject: CN=6734966b-7791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:5c:aa:bf:05:c5:67:37:32:c0:f1:1c:e5:
97:40:20:d5:61:86:78:07:fb:dd:18:7c:67:53:79:
11:85:92:72:d0:11:36:ac:90:b1:3f:60:a6:75:e8:
35:d6:25:01:7c:5f:53:ab:85:a8:da:87:a4:cf:e3:
26:07:23:25:c9:f7:48:c3:84:9e:00:8a:86:d4:a4:
8f:0c:22:9b:a8:fc:89:30:0c:cf:c2:57:fe:b6:56:
ce:74:fd:16:42:ce:27:b8:ab:77:ee:04:43:da:62:
97:48:a5:99:bd:13:22:12:08:43:3b:8c:4a:2e:59:
3b:3d:0d:7f:d4:51:94:cf:45:53:98:98:a9:ac:92:
49:e0:eb:a9:79:0f:39:b2:4b:54:eb:43:2a:e7:5a:
a8:13:68:09:6f:82:58:7f:4f:38:74:7d:e8:2e:93:
76:b9:f7:38:4f:71:0c:10:a3:97:dd:b4:c0:57:b9:
ef:30:76:88:44:ba:6f:63:82:64:f1:1a:66:c3:a3:
76:fb:07:70:51:58:8b:37:0a:e4:11:c8:48:43:14:
fb:20:5a:8f:ec:ea:41:da:6e:2a:0e:da:5a:51:35:
c1:e6:67:4d:8e:e8:a3:d9:20:0a:e1:99:7e:46:10:
9d:f1:75:38:2b:f5:7b:02:61:1b:dc:3b:72:df:f0:
ec:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:95:A6:85:FF:23:D6:02:B6:1C:47:B5:10:E8:62:A7:19:43:55:C2
X509v3 Authority Key Identifier:
keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/CD56EE84A1B711EFB6A2A32DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.127.0/24
Signature Algorithm: sha256WithRSAEncryption
36:ab:a2:4a:09:b3:8a:01:bc:91:e2:83:ed:16:28:e8:12:a1:
21:3e:2d:b7:f4:5d:04:a9:ee:42:3e:84:3b:0a:07:8b:4f:8d:
f1:e9:bd:21:42:b8:38:a2:28:55:5a:db:17:ca:da:b0:4c:e8:
a5:11:30:09:06:f7:12:33:da:a5:6b:bf:8a:5d:50:04:9b:7e:
69:f6:38:8e:69:44:54:45:12:d3:d0:03:e0:3e:dd:03:0b:d8:
cb:8f:b6:b8:8e:da:62:02:07:25:f5:9a:a9:e5:b1:fc:a3:7f:
1d:1a:7d:93:3b:3b:3f:1d:0c:e8:02:af:c8:56:77:45:41:6f:
f7:bd:df:f1:90:20:97:fe:ae:df:50:86:ca:c8:f1:ee:a7:a4:
b1:bf:28:41:3d:d1:9f:76:46:8b:75:f3:37:09:9f:0f:a1:33:
9f:82:b9:1a:8a:f2:66:d0:57:9a:49:b0:37:d5:e0:42:61:82:
f7:60:78:53:65:22:a6:e6:95:7f:2e:48:08:b3:8a:e5:d7:df:
81:bc:13:34:49:6e:d0:f8:00:15:a3:5b:0e:01:51:0f:04:8e:
13:35:05:ee:81:3a:51:12:7f:8c:e5:b9:4a:32:c3:17:65:53:
62:37:b0:31:65:75:a9:67:33:f1:2c:1b:11:5a:2e:ce:1e:09:
0d:4e:11:54
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFCNjQxMTAvBgNVBAUTKDIwRUQwQUFCMjA3NTBCOEIyN0E4NkRGOTg5QTc1NEJG
NTcyNkREN0UwHhcNMjQxMTEzMTIwNzA3WhcNMjUwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzM0OTY2Yi03NzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqpFcqr8FxWc3MsDxHOWXQCDVYYZ4B/vdGHxnU3kRhZJy0BE2rJCxP2Cmdeg1
1iUBfF9Tq4Wo2oekz+MmByMlyfdIw4SeAIqG1KSPDCKbqPyJMAzPwlf+tlbOdP0W
Qs4nuKt37gRD2mKXSKWZvRMiEghDO4xKLlk7PQ1/1FGUz0VTmJiprJJJ4OupeQ85
sktU60Mq51qoE2gJb4JYf084dH3oLpN2ufc4T3EMEKOX3bTAV7nvMHaIRLpvY4Jk
8Rpmw6N2+wdwUViLNwrkEchIQxT7IFqP7OpB2m4qDtpaUTXB5mdNjuij2SAK4Zl+
RhCd8XU4K/V7AmEb3Dty3/DsgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGiVpoX/
I9YCthxHtRDoYqcZQ1XCMB8GA1UdIwQYMBaAFCDtCqsgdQuLJ6ht+YmnVL9XJt1+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUI2NC85QjQ0RUI3NDhG
MjkxMUVDQjZBNjk5NkNDNEY5QUUwMi9JTzBLcXlCMUM0c25xRzM1aWFkVXYxY20z
WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lPMEtxeUIxQzRzbnFHMzVpYWRVdjFjbTNYNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUFCNjQvOUI0NEVCNzQ4RjI5MTFFQ0I2QTY5OTZDQzRGOUFFMDIvQ0Q1NkVFODRB
MUI3MTFFRkI2QTJBMzJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABns38wDQYJKoZIhvcNAQELBQADggEBADarokoJs4oBvJHi
g+0WKOgSoSE+Lbf0XQSp7kI+hDsKB4tPjfHpvSFCuDiiKFVa2xfK2rBM6KURMAkG
9xIz2qVrv4pdUASbfmn2OI5pRFRFEtPQA+A+3QML2MuPtriO2mICByX1mqnlsfyj
fx0afZM7Oz8dDOgCr8hWd0VBb/e93/GQIJf+rt9QhsrI8e6npLG/KEE90Z92Rot1
8zcJnw+hM5+CuRqK8mbQV5pJsDfV4EJhgvdgeFNlIqbmlX8uSAiziuXX34G8EzRJ
btD4ABWjWw4BUQ8EjhM1Be6BOlESf4zluUoywxdlU2I3sDFldalnM/EsGxFaLs4e
CQ1OEVQ=
-----END CERTIFICATE-----
Generated at Fri Apr 18 20:36:36 2025 by rpki-client