Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/5E27DF8AC71211EE9CBD9C80C4F9AE02.roa
File: 5E27DF8AC71211EE9CBD9C80C4F9AE02.roa (raw, json)
Hash identifier: 22WJmogcXhRvVO/EzMnfafCIDpqoRSTZv83B1v29zcY=
Subject key identifier: 27:8B:5E:43:22:69:23:F6:F3:7F:5B:1C:25:6B:BD:85:C0:C3:3C:DD
Certificate issuer: /CN=A911D1A9/serialNumber=742174F32E6CC6E8D1F965BFA1D40A10D6E3E7C9
Certificate serial: 65
Authority key identifier: 74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/5E27DF8AC71211EE9CBD9C80C4F9AE02.roa
Signing time: Fri 09 Feb 2024 06:13:40 +0000
ROA not before: Fri 09 Feb 2024 06:13:40 +0000
ROA not after: Sun 01 Dec 2024 00:00:00 +0000
asID: 147287
IP address blocks: 103.248.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D1A9
Validity
Not Before: Feb 9 06:13:40 2024 GMT
Not After : Dec 1 00:00:00 2024 GMT
Subject: CN=65c5c294-8206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9c:9d:71:2e:82:08:d8:32:0a:36:46:60:e4:
df:f8:54:2a:f3:16:19:1e:a3:73:ac:cb:4d:b3:fe:
2c:2f:24:58:6a:c7:23:95:d8:d1:e6:3e:ac:70:04:
7c:c8:df:59:11:0d:95:1c:a2:07:8b:d6:03:b7:f1:
6a:88:47:f1:d8:13:9f:d5:2f:81:dd:3d:d2:33:10:
0f:09:a0:19:eb:a5:3c:cc:37:2e:a9:1f:8e:81:2b:
73:a4:92:2f:45:4f:07:1b:47:4b:65:5c:c4:91:be:
b0:78:54:cd:d2:c4:b6:7d:4e:25:75:df:c9:3a:b1:
30:4a:44:13:37:89:76:9f:60:27:da:93:0b:4e:67:
27:3f:eb:a2:00:1e:5b:4d:2d:2e:5b:9a:ae:36:e8:
84:0f:1a:8a:9b:62:19:28:9b:2b:cd:df:25:3a:9a:
37:cd:a1:7f:6a:08:23:08:dd:a8:37:77:0c:e3:6a:
c1:e8:c5:4b:1c:e6:8b:dd:93:e4:9f:c8:67:9c:77:
af:00:31:6a:a3:93:18:63:7e:22:79:f1:77:52:5b:
ba:e0:04:ca:e2:a5:3d:4c:41:8a:c9:67:1a:07:cc:
28:fa:cc:aa:54:b2:22:c2:67:09:35:99:24:76:cf:
65:41:30:13:c5:4b:66:05:2d:d2:c9:5d:da:15:56:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8B:5E:43:22:69:23:F6:F3:7F:5B:1C:25:6B:BD:85:C0:C3:3C:DD
X509v3 Authority Key Identifier:
keyid:74:21:74:F3:2E:6C:C6:E8:D1:F9:65:BF:A1:D4:0A:10:D6:E3:E7:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/dCF08y5sxujR-WW_odQKENbj58k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCF08y5sxujR-WW_odQKENbj58k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D1A9/8F916948328811EEB29D3042C4F9AE02/5E27DF8AC71211EE9CBD9C80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.248.48.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d6:48:41:62:56:ea:ad:c9:98:19:fd:84:87:52:2f:03:97:
22:fe:a0:3b:63:48:f5:62:fa:7f:84:01:52:01:59:02:0e:71:
27:1c:f0:73:bd:d5:bd:e0:4f:09:8d:85:a5:b0:56:95:24:d4:
a8:65:24:5f:51:24:fe:4e:78:95:15:39:f4:17:76:48:7e:cf:
f5:b5:ab:12:4f:4c:2f:b8:3f:e2:b7:00:71:b5:98:f6:5c:2a:
40:8e:e0:00:98:e8:46:dc:d8:34:9f:c0:05:54:13:5b:98:7a:
e2:97:34:f2:99:35:35:5b:d7:f9:78:e6:b9:de:54:94:3f:5a:
78:ca:e2:d6:62:f2:5c:4a:33:69:f3:5c:c1:06:2b:c3:64:44:
16:21:31:5d:b3:66:aa:d7:74:3d:0e:d4:9e:c2:b3:36:f5:c8:
46:9b:ad:e7:f9:29:6f:9f:29:45:d2:5b:83:80:cf:19:ae:77:
cf:f8:0c:6c:48:7c:37:f3:c8:cd:fb:ef:19:d7:35:ed:3d:86:
0b:0a:b3:f4:2e:b7:f9:e5:ab:f5:be:08:b8:a9:0d:20:af:b1:
b8:9d:0b:93:7e:ba:2e:38:00:64:6f:18:20:33:5f:9b:ba:a4:
7f:be:b5:e5:c6:b4:1f:82:58:c0:f1:5c:fd:8f:67:8a:0c:a0:
38:03:5d:b6
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RDFBOTExMC8GA1UEBRMoNzQyMTc0RjMyRTZDQzZFOEQxRjk2NUJGQTFENDBBMTBE
NkUzRTdDOTAeFw0yNDAyMDkwNjEzNDBaFw0yNDEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY1YzVjMjk0LTgyMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCsnJ1xLoII2DIKNkZg5N/4VCrzFhkeo3Osy02z/iwvJFhqxyOV2NHmPqxwBHzI
31kRDZUcogeL1gO38WqIR/HYE5/VL4HdPdIzEA8JoBnrpTzMNy6pH46BK3Okki9F
TwcbR0tlXMSRvrB4VM3SxLZ9TiV138k6sTBKRBM3iXafYCfakwtOZyc/66IAHltN
LS5bmq426IQPGoqbYhkomyvN3yU6mjfNoX9qCCMI3ag3dwzjasHoxUsc5ovdk+Sf
yGecd68AMWqjkxhjfiJ58XdSW7rgBMripT1MQYrJZxoHzCj6zKpUsiLCZwk1mSR2
z2VBMBPFS2YFLdLJXdoVVgL5AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUJ4teQyJp
I/bzf1scJWu9hcDDPN0wHwYDVR0jBBgwFoAUdCF08y5sxujR+WW/odQKENbj58kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFEMUE5LzhGOTE2OTQ4MzI4
ODExRUVCMjlEMzA0MkM0RjlBRTAyL2RDRjA4eTVzeHVqUi1XV19vZFFLRU5iajU4
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZENGMDh5NXN4dWpSLVdXX29kUUtFTmJqNThrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RDFBOS84RjkxNjk0ODMyODgxMUVFQjI5RDMwNDJDNEY5QUUwMi81RTI3REY4QUM3
MTIxMUVFOUNCRDlDODBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGf4MDANBgkqhkiG9w0BAQsFAAOCAQEAd9ZIQWJW6q3JmBn9
hIdSLwOXIv6gO2NI9WL6f4QBUgFZAg5xJxzwc73VveBPCY2FpbBWlSTUqGUkX1Ek
/k54lRU59Bd2SH7P9bWrEk9ML7g/4rcAcbWY9lwqQI7gAJjoRtzYNJ/ABVQTW5h6
4pc08pk1NVvX+Xjmud5UlD9aeMri1mLyXEozafNcwQYrw2REFiExXbNmqtd0PQ7U
nsKzNvXIRput5/kpb58pRdJbg4DPGa53z/gMbEh8N/PIzfvvGdc17T2GCwqz9C63
+eWr9b4IuKkNIK+xuJ0Lk366LjgAZG8YIDNfm7qkf7615ca0H4JYwPFc/Y9nigyg
OANdtg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:50:01 2025 by rpki-client