Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E3BFBA92258111EEA197162DC4F9AE02.roa
File: E3BFBA92258111EEA197162DC4F9AE02.roa (raw, json)
Hash identifier: 3jTufXkHB7FLGsXY2aWNFCl/A2Q3lMKwCZxoO9lkUMw=
Subject key identifier: AE:43:0E:17:B8:17:E0:8A:08:C6:D5:0F:70:81:80:84:82:A5:85:6B
Certificate issuer: /CN=A916D8D9/serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Certificate serial: 0476
Authority key identifier: 03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E3BFBA92258111EEA197162DC4F9AE02.roa
Signing time: Tue 18 Jul 2023 15:45:25 +0000
ROA not before: Tue 18 Jul 2023 15:45:25 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 61302
IP address blocks: 122.50.0.0/24 maxlen: 24
122.50.2.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D8D9, serialNumber=031C9C26E5BAB1B01AF18A0BB1B970AB5773456B
Validity
Not Before: Jul 18 15:45:25 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=64b6b395-6a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:eb:da:09:36:93:f2:95:6f:21:d9:15:27:
8d:ec:1b:65:6f:25:c9:0c:f9:68:b1:08:0b:77:79:
3a:ac:e7:7d:8e:84:6a:d5:32:c1:f9:e1:35:fe:6b:
f4:45:b2:04:0f:b3:10:96:39:b4:03:e3:eb:10:49:
97:09:1a:86:e0:6d:73:79:f2:80:5f:d9:4c:c1:7d:
e6:0e:f1:0c:30:07:1b:a1:2a:76:d0:34:e3:f5:e1:
67:5c:b0:ea:98:2a:cc:2f:0a:ca:31:a0:9a:7a:19:
98:74:73:5e:c0:1f:7f:0f:1e:86:f4:1a:28:64:45:
08:35:cc:94:c2:ce:96:38:6a:a1:be:18:d7:1f:06:
c0:14:ec:c6:ca:1b:8c:7a:94:37:9b:25:11:e0:45:
41:d9:6e:a1:67:30:a7:eb:48:71:23:48:fa:41:d6:
f5:47:72:d2:67:40:5c:6f:5d:d0:09:6e:a3:37:ae:
68:fe:1e:2d:66:3d:67:f7:3e:9f:16:34:50:9b:05:
d6:c1:7a:30:74:24:a5:29:16:3f:70:e1:3e:01:32:
c9:7a:d8:de:4b:d9:73:6b:6c:aa:a8:6f:87:f6:6f:
e3:31:cb:10:45:c2:55:fa:c9:93:ee:08:09:20:80:
ba:a5:59:53:c2:0d:dc:d6:fb:3b:27:9f:77:22:02:
f8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:43:0E:17:B8:17:E0:8A:08:C6:D5:0F:70:81:80:84:82:A5:85:6B
X509v3 Authority Key Identifier:
keyid:03:1C:9C:26:E5:BA:B1:B0:1A:F1:8A:0B:B1:B9:70:AB:57:73:45:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/AxycJuW6sbAa8YoLsblwq1dzRWs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AxycJuW6sbAa8YoLsblwq1dzRWs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8D9/5483BFB6C8FB11EBBA5BAE51C4F9AE02/E3BFBA92258111EEA197162DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.50.0.0/24
122.50.2.0/24
Signature Algorithm: sha256WithRSAEncryption
49:23:ea:73:59:a3:99:b1:47:e9:c0:24:88:aa:75:79:16:25:
4a:f7:56:bc:b9:4b:6c:21:c2:e8:b6:ac:7c:7e:7b:e3:b9:5d:
14:e7:dc:22:00:bb:43:2e:21:35:dc:37:7d:e7:81:14:6d:23:
89:86:0f:e5:f5:c2:ed:7a:7e:bf:e9:69:51:f6:d2:a4:00:e3:
5c:db:4a:e4:ee:42:79:6f:f4:c0:ee:fe:c1:ec:a4:b5:04:78:
3a:d0:32:0d:8d:c0:d2:dc:62:bc:e2:6f:09:15:4f:ec:6e:02:
8e:53:83:2b:c1:1b:e2:ac:14:9d:3f:f5:6d:d0:de:26:97:a5:
53:83:15:8b:06:6c:13:27:b4:c6:3b:d2:d3:2e:55:7c:ed:1c:
ea:cc:cd:78:3e:27:f9:d9:ba:e9:6a:0d:7f:75:ed:b2:13:1d:
52:26:02:40:94:0e:7a:96:d9:9c:16:76:bb:90:ce:7d:c3:27:
37:93:a3:0f:69:af:12:8e:08:1e:84:b0:0a:c2:d4:ee:16:9a:
95:a5:6a:80:2e:c4:44:c9:5e:41:e9:c8:fa:38:ec:42:44:51:
7f:56:92:6a:f6:76:55:28:d8:11:bd:0e:38:d6:6c:f8:d0:2e:
c6:ef:f7:11:56:df:92:7b:b0:cc:52:c4:af:e5:9c:b1:61:54:
da:ed:7b:3e
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBHYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ4RDkxMTAvBgNVBAUTKDAzMUM5QzI2RTVCQUIxQjAxQUYxOEEwQkIxQjk3MEFC
NTc3MzQ1NkIwHhcNMjMwNzE4MTU0NTI1WhcNMjQwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGI2YjM5NS02YTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvHr2gk2k/KVbyHZFSeN7BtlbyXJDPlosQgLd3k6rOd9joRq1TLB+eE1/mv0
RbIED7MQljm0A+PrEEmXCRqG4G1zefKAX9lMwX3mDvEMMAcboSp20DTj9eFnXLDq
mCrMLwrKMaCaehmYdHNewB9/Dx6G9BooZEUINcyUws6WOGqhvhjXHwbAFOzGyhuM
epQ3myUR4EVB2W6hZzCn60hxI0j6Qdb1R3LSZ0Bcb13QCW6jN65o/h4tZj1n9z6f
FjRQmwXWwXowdCSlKRY/cOE+ATLJetjeS9lza2yqqG+H9m/jMcsQRcJV+smT7ggJ
IIC6pVlTwg3c1vs7J593IgL47QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFK5DDhe4
F+CKCMbVD3CBgISCpYVrMB8GA1UdIwQYMBaAFAMcnCblurGwGvGKC7G5cKtXc0Vr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDhEOS81NDgzQkZCNkM4
RkIxMUVCQkE1QkFFNTFDNEY5QUUwMi9BeHljSnVXNnNiQWE4WW9Mc2Jsd3ExZHpS
V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F4eWNKdVc2c2JBYThZb0xzYmx3cTFkelJXcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQ4RDkvNTQ4M0JGQjZDOEZCMTFFQkJBNUJBRTUxQzRGOUFFMDIvRTNCRkJBOTIy
NTgxMTFFRUExOTcxNjJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAB6MgADBAB6MgIwDQYJKoZIhvcNAQELBQADggEBAEkj6nNZ
o5mxR+nAJIiqdXkWJUr3Vry5S2whwui2rHx+e+O5XRTn3CIAu0MuITXcN33ngRRt
I4mGD+X1wu16fr/paVH20qQA41zbSuTuQnlv9MDu/sHspLUEeDrQMg2NwNLcYrzi
bwkVT+xuAo5TgyvBG+KsFJ0/9W3Q3iaXpVODFYsGbBMntMY70tMuVXztHOrMzXg+
J/nZuulqDX917bITHVImAkCUDnqW2ZwWdruQzn3DJzeTow9prxKOCB6EsArC1O4W
mpWlaoAuxETJXkHpyPo47EJEUX9Wkmr2dlUo2BG9DjjWbPjQLsbv9xFW35J7sMxS
xK/lnLFhVNrtez4=
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:45:13 2025 by rpki-client