Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/40DB402C94D811EA85E1432EC4F9AE02.roa
File: 40DB402C94D811EA85E1432EC4F9AE02.roa (raw, json)
Hash identifier: 8M6TC9Ji/3BTUZXEQs1rubRjC5E0MvhmCiSMFAi6vZU=
Subject key identifier: 52:13:1C:07:AB:98:3A:81:CF:96:93:56:7C:DD:63:68:C2:58:4D:CE
Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial: 185B
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/40DB402C94D811EA85E1432EC4F9AE02.roa
Signing time: Tue 17 Oct 2023 03:04:34 +0000
ROA not before: Tue 17 Oct 2023 03:04:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 121.74.0.0/16 maxlen: 16
121.75.0.0/16 maxlen: 16
202.0.32.0/19 maxlen: 19
203.79.64.0/24 maxlen: 24
203.96.144.0/20 maxlen: 20
203.97.128.0/17 maxlen: 17
218.101.0.0/18 maxlen: 18
2001:4400::/30 maxlen: 48
2407:7000::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6235 (0x185b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7
Validity
Not Before: Oct 17 03:04:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=652df9c2-3087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d9:84:21:59:17:c2:ff:fc:e9:bf:c0:61:93:
9a:ec:db:52:d9:da:4f:c4:e9:58:66:ff:11:0b:b6:
da:29:1d:2e:7e:16:b7:c5:bf:9d:e4:fa:51:b9:a4:
60:43:77:d9:87:d7:8a:97:1e:d3:af:0f:e9:b1:c9:
32:be:21:e7:28:3b:04:15:6b:75:33:e6:ee:1d:09:
c6:9c:de:96:48:d0:2f:0e:04:45:de:f6:4e:0c:72:
ab:83:d8:64:42:fa:ff:0e:b3:10:ce:df:a6:c6:de:
08:c7:ee:5c:8a:e7:27:af:ea:42:65:e8:eb:71:60:
27:cd:af:5a:44:ff:a6:f7:fe:81:77:bb:1e:ee:07:
fd:0b:8c:db:27:25:54:e6:a5:06:c0:50:37:9c:b1:
d6:52:d9:82:9d:d0:43:06:ac:38:a6:a3:99:12:ab:
6a:0c:43:38:31:58:35:b4:15:81:b5:0f:13:7e:ab:
dc:b9:ec:f2:6d:41:74:05:25:94:78:a9:6c:2c:45:
86:71:84:a2:e5:32:90:17:96:df:a1:fe:7e:6a:9b:
a9:c9:01:ee:5c:97:1f:12:04:09:c8:f3:ea:1d:c9:
5e:b1:09:7d:da:24:b6:d9:e4:f2:81:16:db:a5:e8:
af:67:75:69:47:6e:66:41:1f:29:b9:0a:75:c8:42:
2a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:13:1C:07:AB:98:3A:81:CF:96:93:56:7C:DD:63:68:C2:58:4D:CE
X509v3 Authority Key Identifier:
keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/40DB402C94D811EA85E1432EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
121.74.0.0/15
202.0.32.0/19
203.79.64.0/24
203.96.144.0/20
203.97.128.0/17
218.101.0.0/18
IPv6:
2001:4400::/30
2407:7000::/32
Signature Algorithm: sha256WithRSAEncryption
de:be:3e:a5:31:1b:3c:6e:90:74:e9:dd:f7:8b:4f:43:62:18:
a3:a5:58:d2:6d:95:bc:b9:00:68:33:ba:09:80:63:e3:5c:26:
50:a1:a6:8a:4c:f9:75:f3:c7:d9:2e:7b:c5:58:c9:46:12:e5:
25:bb:ae:7b:0f:36:fe:67:01:86:95:38:ec:1b:69:6d:88:c3:
d8:d9:74:fe:31:2e:aa:fc:48:3d:11:db:3e:07:74:71:d8:c3:
6b:86:27:50:99:c4:87:dd:e3:75:69:b8:00:d2:5a:59:30:a7:
38:e1:19:4c:b0:a1:7b:77:03:23:fa:bd:57:cf:56:48:ed:2c:
fb:16:40:73:be:d4:e5:6a:5f:ed:6e:94:0e:37:31:66:77:df:
2b:12:b2:a7:7e:b7:26:52:d4:f3:2b:d5:e8:54:fc:57:60:70:
df:06:57:d8:2b:1b:bd:44:ce:aa:aa:cb:5d:1c:b8:b2:04:0d:
20:62:a3:84:77:d8:b0:d7:45:8b:46:b0:b4:7d:9f:08:db:85:
21:59:62:f9:da:d8:07:51:13:be:2e:e0:e7:c6:14:61:4b:99:
13:9d:a2:79:73:2c:38:2b:ee:44:41:bb:29:1b:0f:7f:8d:64:
24:b0:7c:80:16:be:63:0a:01:d3:75:37:fc:b4:6b:59:e4:ef:
bd:f1:72:df
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgICGFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZBRDcxMTAvBgNVBAUTKEJBRjVBREEzMkNBMEQzNENGM0NDRjUzQUJERjg2REU2
RjhFRDkwMDUwHhcNMjMxMDE3MDMwNDM0WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTJkZjljMi0zMDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA09mEIVkXwv/86b/AYZOa7NtS2dpPxOlYZv8RC7baKR0ufha3xb+d5PpRuaRg
Q3fZh9eKlx7Trw/psckyviHnKDsEFWt1M+buHQnGnN6WSNAvDgRF3vZODHKrg9hk
Qvr/DrMQzt+mxt4Ix+5ciucnr+pCZejrcWAnza9aRP+m9/6Bd7se7gf9C4zbJyVU
5qUGwFA3nLHWUtmCndBDBqw4pqOZEqtqDEM4MVg1tBWBtQ8TfqvcuezybUF0BSWU
eKlsLEWGcYSi5TKQF5bfof5+apupyQHuXJcfEgQJyPPqHclesQl92iS22eTygRbb
peivZ3VpR25mQR8puQp1yEIq0wIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFFITHAer
mDqBz5aTVnzdY2jCWE3OMB8GA1UdIwQYMBaAFLr1raMsoNNM88z1Or34beb47ZAF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFENy9GOEJBQkFDQThC
ODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAwenp6UFU2dmZodDV2anRr
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V2V3RveXlnMDB6enpQVTZ2Zmh0NXZqdGtBVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDZBRDcvRjhCQUJBQ0E4Qjg5MTFFNzkwMTE1QzNGQzRGOUFFMDIvNDBEQjQwMkM5
NEQ4MTFFQTg1RTE0MzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E
QzBBMCkEAgABMCMDAwF5SgMEBcoAIAMEAMtPQAMEBMtgkAMEB8thgAMEBtplADAU
BAIAAjAOAwUCIAFEAAMFACQHcAAwDQYJKoZIhvcNAQELBQADggEBAN6+PqUxGzxu
kHTp3feLT0NiGKOlWNJtlby5AGgzugmAY+NcJlChpopM+XXzx9kue8VYyUYS5SW7
rnsPNv5nAYaVOOwbaW2Iw9jZdP4xLqr8SD0R2z4HdHHYw2uGJ1CZxIfd43VpuADS
WlkwpzjhGUywoXt3AyP6vVfPVkjtLPsWQHO+1OVqX+1ulA43MWZ33ysSsqd+tyZS
1PMr1ehU/FdgcN8GV9grG71Ezqqqy10cuLIEDSBio4R32LDXRYtGsLR9nwjbhSFZ
Yvna2AdRE74u4OfGFGFLmROdonlzLDgr7kRBuykbD3+NZCSwfIAWvmMKAdN1N/y0
a1nk773xct8=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:31 2025 by rpki-client