Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/EDB5F114A63711EF89F3B833C4F9AE02.roa
File: EDB5F114A63711EF89F3B833C4F9AE02.roa (raw, json)
Hash identifier: yRPrheegIm3V93UgDt8N+OL/cPpnwv9rIo76kYVagnE=
Subject key identifier: 80:58:C4:71:BF:0D:E5:10:28:C8:B3:D5:57:8F:FC:F2:8E:1E:59:51
Certificate issuer: /CN=A915E47C/serialNumber=1B8198E297ECFB8FB51AF79624D3B684A1F9B51D
Certificate serial: 222F
Authority key identifier: 1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/EDB5F114A63711EF89F3B833C4F9AE02.roa
Signing time: Thu 30 Jan 2025 16:03:12 +0000
ROA not before: Thu 30 Jan 2025 16:03:12 +0000
ROA not after: Tue 31 Mar 2026 00:00:00 +0000
asID: 14618
IP address blocks: 103.205.78.0/24 maxlen: 24
103.205.79.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8751 (0x222f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E47C
Validity
Not Before: Jan 30 16:03:12 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=679ba2c0-af7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:c9:64:31:51:25:1e:8c:61:85:87:8f:98:
3b:57:34:58:92:ea:35:e3:cf:f0:5e:15:b0:b4:77:
53:a6:6f:e8:bb:b3:08:d5:e0:72:a5:28:93:9b:2e:
ea:c4:57:e3:a4:e8:78:09:33:d0:c9:9b:3d:d1:00:
14:25:c1:7a:46:92:5d:e9:97:9f:4b:dc:bb:d4:10:
60:d2:f3:e7:f2:36:25:9a:7f:fc:44:57:03:f7:fc:
3c:20:92:6e:da:d0:7c:fa:35:7a:d2:23:ba:30:98:
48:11:5e:c7:bc:63:4d:91:fb:a0:6d:6d:29:a9:2d:
d4:f1:b0:0c:33:fb:a9:c9:b2:f7:a1:31:e7:c7:1c:
98:8d:f4:7c:50:d1:0a:c9:64:d4:fe:af:74:7d:e8:
56:c4:65:45:74:e1:91:5c:78:bb:25:2f:14:a1:d7:
3d:1b:13:82:bc:dc:f1:d1:73:4d:45:41:e7:9a:26:
13:58:9e:2a:7c:d3:0a:91:54:27:f5:c4:e8:2e:40:
82:11:da:40:e6:84:a2:17:f8:65:d0:46:66:47:41:
ea:36:71:11:8b:13:27:be:1d:e0:e4:70:f0:72:10:
51:b5:91:32:ba:79:1d:aa:bd:6f:0a:0f:b2:bf:19:
1d:d3:23:68:5d:f2:41:e2:7f:2c:fc:09:4c:7c:7d:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:58:C4:71:BF:0D:E5:10:28:C8:B3:D5:57:8F:FC:F2:8E:1E:59:51
X509v3 Authority Key Identifier:
keyid:1B:81:98:E2:97:EC:FB:8F:B5:1A:F7:96:24:D3:B6:84:A1:F9:B5:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/G4GY4pfs-4-1GveWJNO2hKH5tR0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G4GY4pfs-4-1GveWJNO2hKH5tR0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E47C/47B55992AD0F11E5B978FD54C4F9AE02/EDB5F114A63711EF89F3B833C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.205.78.0/23
Signature Algorithm: sha256WithRSAEncryption
84:00:94:a9:74:04:17:aa:54:2b:de:21:5d:f6:d6:42:08:e6:
be:cb:51:97:69:6d:e1:32:a2:b7:80:e5:38:b8:86:f1:fd:d5:
cf:3f:e5:4b:1c:55:1c:bd:e2:7d:ee:bc:71:ba:d3:0c:ed:a6:
3f:5e:e0:e6:5e:f2:7c:bc:06:47:59:c0:fb:62:57:8b:02:24:
b0:62:2e:c0:29:06:23:2e:b1:6b:16:91:e3:14:b2:0e:9a:69:
4d:f9:8d:3f:d6:21:2e:7d:82:75:b7:55:18:15:4e:c8:6f:4d:
f1:ec:84:db:38:3b:58:2c:66:ce:2f:e9:ea:b0:18:96:da:62:
dd:be:94:3c:f5:fa:51:ed:50:5c:44:6a:55:5c:89:86:4f:b0:
5d:cf:dd:7d:c8:4f:c9:d2:57:7d:02:51:27:fd:1b:d1:90:cd:
3d:0a:5e:39:39:49:bd:23:d2:5f:7f:ef:49:d4:cd:be:a0:8d:
7a:7e:e4:cf:e5:37:3c:c5:4c:83:5c:75:4f:4a:d8:cf:4e:a9:
91:5e:06:03:77:25:eb:2b:c4:79:18:2a:dd:25:a2:40:6a:58:
a1:78:76:46:ce:3e:f8:a1:9d:05:cf:6d:55:38:c7:c6:35:d9:
5d:c9:a4:13:d3:8a:dd:be:3b:d6:3f:a4:75:36:5a:01:db:09:
e4:6a:49:b3
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICIi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUU0N0MxMTAvBgNVBAUTKDFCODE5OEUyOTdFQ0ZCOEZCNTFBRjc5NjI0RDNCNjg0
QTFGOUI1MUQwHhcNMjUwMTMwMTYwMzEyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzliYTJjMC1hZjdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ODJZDFRJR6MYYWHj5g7VzRYkuo148/wXhWwtHdTpm/ou7MI1eBypSiTmy7q
xFfjpOh4CTPQyZs90QAUJcF6RpJd6ZefS9y71BBg0vPn8jYlmn/8RFcD9/w8IJJu
2tB8+jV60iO6MJhIEV7HvGNNkfugbW0pqS3U8bAMM/upybL3oTHnxxyYjfR8UNEK
yWTU/q90fehWxGVFdOGRXHi7JS8Uodc9GxOCvNzx0XNNRUHnmiYTWJ4qfNMKkVQn
9cToLkCCEdpA5oSiF/hl0EZmR0HqNnERixMnvh3g5HDwchBRtZEyunkdqr1vCg+y
vxkd0yNoXfJB4n8s/AlMfH2n/QIDAQABo4IClTCCApEwHQYDVR0OBBYEFIBYxHG/
DeUQKMiz1VeP/PKOHllRMB8GA1UdIwQYMBaAFBuBmOKX7PuPtRr3liTTtoSh+bUd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3Qy80N0I1NTk5MkFE
MEYxMUU1Qjk3OEZENTRDNEY5QUUwMi9HNEdZNHBmcy00LTFHdmVXSk5PMmhLSDV0
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0c0R1k0cGZzLTQtMUd2ZVdKTk8yaEtINXRSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUU0N0MvNDdCNTU5OTJBRDBGMTFFNUI5NzhGRDU0QzRGOUFFMDIvRURCNUYxMTRB
NjM3MTFFRjg5RjNCODMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnzU4wDQYJKoZIhvcNAQELBQADggEBAIQAlKl0BBeqVCve
IV321kII5r7LUZdpbeEyoreA5Ti4hvH91c8/5UscVRy94n3uvHG60wztpj9e4OZe
8ny8BkdZwPtiV4sCJLBiLsApBiMusWsWkeMUsg6aaU35jT/WIS59gnW3VRgVTshv
TfHshNs4O1gsZs4v6eqwGJbaYt2+lDz1+lHtUFxEalVciYZPsF3P3X3IT8nSV30C
USf9G9GQzT0KXjk5Sb0j0l9/70nUzb6gjXp+5M/lNzzFTINcdU9K2M9OqZFeBgN3
JesrxHkYKt0lokBqWKF4dkbOPvihnQXPbVU4x8Y12V3JpBPTit2+O9Y/pHU2WgHb
CeRqSbM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:34 2025 by rpki-client