Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/1DF44A602E8511EDB201A41FC4F9AE02.roa
File: 1DF44A602E8511EDB201A41FC4F9AE02.roa (raw, json)
Hash identifier: 9Qep2TdJKK4WEATlPMD3CsR7hnP8hVf1Uv0qod3UOC0=
Subject key identifier: 9D:9A:52:F7:A9:F7:E2:A5:CD:04:14:22:08:DE:B6:7D:CD:E3:CC:4C
Certificate issuer: /CN=A91C1DB8/serialNumber=C319AF7BB4F981611AD00C32F8A357DE6353DC36
Certificate serial: 11D3
Authority key identifier: C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/1DF44A602E8511EDB201A41FC4F9AE02.roa
Signing time: Thu 02 Feb 2023 18:24:46 +0000
ROA not before: Thu 02 Feb 2023 18:24:46 +0000
ROA not after: Sun 31 Mar 2024 00:00:00 +0000
asID: 10204
IP address blocks: 103.229.32.0/24 maxlen: 24
103.229.33.0/24 maxlen: 24
103.229.34.0/24 maxlen: 24
103.229.35.0/24 maxlen: 24
203.115.192.0/18 maxlen: 18
203.115.192.0/19 maxlen: 19
203.115.192.0/21 maxlen: 21
203.115.192.0/24 maxlen: 24
203.115.199.0/24 maxlen: 24
203.115.201.0/24 maxlen: 24
203.115.205.0/24 maxlen: 24
203.115.208.0/21 maxlen: 21
203.115.208.0/24 maxlen: 24
203.115.211.0/24 maxlen: 24
203.115.212.0/22 maxlen: 22
203.115.217.0/24 maxlen: 24
203.115.222.0/24 maxlen: 24
203.115.224.0/19 maxlen: 19
203.115.225.0/24 maxlen: 24
203.115.226.0/24 maxlen: 24
203.115.231.0/24 maxlen: 24
203.115.238.0/24 maxlen: 24
203.115.246.0/24 maxlen: 24
203.115.249.0/24 maxlen: 24
203.115.251.0/24 maxlen: 24
203.115.252.0/22 maxlen: 22
203.115.252.0/24 maxlen: 24
2001:c18::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4563 (0x11d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C1DB8
Validity
Not Before: Feb 2 18:24:46 2023 GMT
Not After : Mar 31 00:00:00 2024 GMT
Subject: CN=63dbffee-7c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:ef:2a:22:14:e1:c1:d0:ef:f9:6f:48:a1:
69:bf:47:a2:38:83:97:32:ea:48:87:6c:b1:d7:5f:
25:95:6b:43:9d:41:e1:3a:2f:d5:00:38:87:1f:26:
90:2a:2d:92:61:bd:d7:bc:20:17:56:55:2b:bc:a0:
cb:b8:b9:a8:05:e7:68:32:eb:cd:02:9f:92:e7:be:
4e:a4:6a:25:3e:ea:72:26:e4:af:fc:40:31:b7:ce:
69:fe:e4:2d:11:dd:ed:c6:4b:1a:16:70:30:fe:2c:
38:b4:a7:29:cf:79:44:1d:a0:78:e1:67:70:a2:5f:
5b:9b:67:14:46:01:ed:a0:02:b2:c2:0a:68:8f:b1:
95:cd:7d:67:26:02:11:fc:c5:41:87:6c:a2:7d:d3:
e4:c8:16:81:10:1c:e2:d6:7f:71:1b:d6:58:cb:c0:
45:f5:cb:b1:e8:8f:d2:cd:b6:a9:fb:46:e5:06:d3:
f7:a7:52:7e:34:29:75:8e:23:00:bc:84:bd:78:de:
e9:61:81:8e:43:18:ef:68:fb:65:fc:0d:cb:7f:08:
9c:86:94:58:2e:5f:de:24:da:a3:39:0c:9e:1a:00:
8a:7b:2b:a5:20:49:7c:c5:82:65:c2:de:c9:f6:7f:
27:8b:7e:b5:18:25:38:90:25:c4:63:42:f0:42:8c:
0a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9A:52:F7:A9:F7:E2:A5:CD:04:14:22:08:DE:B6:7D:CD:E3:CC:4C
X509v3 Authority Key Identifier:
keyid:C3:19:AF:7B:B4:F9:81:61:1A:D0:0C:32:F8:A3:57:DE:63:53:DC:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/wxmve7T5gWEa0Awy-KNX3mNT3DY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wxmve7T5gWEa0Awy-KNX3mNT3DY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1DB8/16CBC054A11E11E89E636710C4F9AE02/1DF44A602E8511EDB201A41FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.229.32.0/22
203.115.192.0/18
IPv6:
2001:c18::/32
Signature Algorithm: sha256WithRSAEncryption
11:62:06:db:a2:f1:ed:26:2b:2a:aa:1c:76:89:fd:44:ae:72:
a7:eb:fc:f0:5a:b3:8c:25:d2:e2:23:df:1a:3e:36:f7:5c:b7:
08:e1:4c:5f:ec:7a:9a:6b:43:91:c7:c5:10:79:57:b3:5b:f7:
77:d0:e8:28:ac:76:13:f8:7d:2a:f5:60:79:e7:46:d8:ae:be:
f6:36:b0:58:a0:59:f9:45:92:94:c8:01:91:b8:cc:9c:8e:bd:
28:59:a6:8b:20:2b:23:fd:7e:f8:ff:06:c6:93:54:1f:49:04:
32:a5:38:57:ad:a2:bc:a3:79:4d:cb:15:8e:05:c3:d3:47:f0:
69:87:80:23:a5:04:6a:5b:4e:ad:27:92:0a:49:5c:f4:ba:5d:
d3:45:8e:59:ff:58:7c:7d:10:44:2a:28:c8:df:6b:53:00:19:
04:5f:ed:a8:46:09:29:32:da:f6:55:29:ad:84:cb:35:79:ac:
07:e9:de:4a:4f:39:a9:cb:5c:06:98:8e:13:74:3f:d8:a3:79:
ab:c2:b6:7a:9f:21:5a:f3:46:98:a6:b9:58:db:ff:af:05:49:
95:c7:de:2a:77:92:ec:d1:2d:a6:ac:60:22:f1:79:55:95:89:
40:fe:8d:5f:e1:df:3b:28:e1:87:5c:a4:9e:0f:4b:81:cf:2b:
a0:d6:e7:ed
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICEdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzFEQjgxMTAvBgNVBAUTKEMzMTlBRjdCQjRGOTgxNjExQUQwMEMzMkY4QTM1N0RF
NjM1M0RDMzYwHhcNMjMwMjAyMTgyNDQ2WhcNMjQwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02M2RiZmZlZS03YzQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzY/vKiIU4cHQ7/lvSKFpv0eiOIOXMupIh2yx118llWtDnUHhOi/VADiHHyaQ
Ki2SYb3XvCAXVlUrvKDLuLmoBedoMuvNAp+S575OpGolPupyJuSv/EAxt85p/uQt
Ed3txksaFnAw/iw4tKcpz3lEHaB44Wdwol9bm2cURgHtoAKywgpoj7GVzX1nJgIR
/MVBh2yifdPkyBaBEBzi1n9xG9ZYy8BF9cux6I/Szbap+0blBtP3p1J+NCl1jiMA
vIS9eN7pYYGOQxjvaPtl/A3LfwichpRYLl/eJNqjOQyeGgCKeyulIEl8xYJlwt7J
9n8ni361GCU4kCXEY0LwQowKuwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFJ2aUvep
9+KlzQQUIgjetn3N48xMMB8GA1UdIwQYMBaAFMMZr3u0+YFhGtAMMvijV95jU9w2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMURCOC8xNkNCQzA1NEEx
MUUxMUU4OUU2MzY3MTBDNEY5QUUwMi93eG12ZTdUNWdXRWEwQXd5LUtOWDNtTlQz
RFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3d4bXZlN1Q1Z1dFYTBBd3ktS05YM21OVDNEWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzFEQjgvMTZDQkMwNTRBMTFFMTFFODlFNjM2NzEwQzRGOUFFMDIvMURGNDRBNjAy
RTg1MTFFREIyMDFBNDFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E
JTAjMBIEAgABMAwDBAJn5SADBAbLc8AwDQQCAAIwBwMFACABDBgwDQYJKoZIhvcN
AQELBQADggEBABFiBtui8e0mKyqqHHaJ/USucqfr/PBas4wl0uIj3xo+Nvdctwjh
TF/sepprQ5HHxRB5V7Nb93fQ6CisdhP4fSr1YHnnRtiuvvY2sFigWflFkpTIAZG4
zJyOvShZposgKyP9fvj/BsaTVB9JBDKlOFetoryjeU3LFY4Fw9NH8GmHgCOlBGpb
Tq0nkgpJXPS6XdNFjln/WHx9EEQqKMjfa1MAGQRf7ahGCSky2vZVKa2EyzV5rAfp
3kpPOanLXAaYjhN0P9ijeavCtnqfIVrzRpimuVjb/68FSZXH3ip3kuzRLaasYCLx
eVWViUD+jV/h3zso4YdcpJ4PS4HPK6DW5+0=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:44 2025 by rpki-client