Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/0B7314303CC511EEAAF7E47DC4F9AE02.roa
File: 0B7314303CC511EEAAF7E47DC4F9AE02.roa (raw, json)
Hash identifier: VwRp4+tOnSB8TpfxU/UXtvXwzD30lgaTPKC1ppCn+CY=
Subject key identifier: 75:9E:59:C6:36:90:92:96:5D:53:11:B2:10:15:F8:D8:4F:E7:05:79
Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial: 65
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/0B7314303CC511EEAAF7E47DC4F9AE02.roa
Signing time: Thu 17 Aug 2023 06:12:29 +0000
ROA not before: Thu 17 Aug 2023 06:12:29 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 17941
IP address blocks: 103.71.92.0/24 maxlen: 24
103.71.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116DDB, serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Validity
Not Before: Aug 17 06:12:29 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64ddba4d-37b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:4d:01:ed:80:4b:01:dd:14:38:a6:17:54:
26:d6:28:01:8d:e9:42:81:2a:42:b5:39:62:ae:8d:
73:49:53:33:b3:cf:11:8d:d1:7c:27:47:c3:ea:ed:
cf:4a:68:44:99:28:24:20:5c:76:b1:53:cb:b6:fa:
33:34:ff:37:2d:51:77:11:1b:4d:1d:7e:a5:cd:ad:
d0:7e:dc:66:b6:ac:c9:3b:83:c1:8d:33:5b:44:43:
60:3b:45:a0:57:b4:fb:14:06:f5:06:b9:82:77:a8:
62:3f:29:cf:6c:65:3f:41:b1:39:bd:7e:ee:b6:91:
81:f8:e1:ec:48:85:69:e1:e9:4b:10:b1:c0:37:bf:
b2:b9:eb:f7:25:e9:9c:4e:ca:e5:2d:9a:da:08:72:
9e:82:52:2c:0a:1d:f8:12:9f:6e:86:ad:56:43:0b:
b1:6c:2a:13:68:50:2d:c0:c8:c3:f6:bf:59:2b:bc:
c2:38:40:d3:ac:01:10:70:ed:f1:7f:11:af:ad:dd:
74:83:eb:f1:7f:99:84:e8:40:eb:00:e8:85:b4:cc:
d0:fc:21:c3:8b:fb:ef:5a:71:3d:69:50:48:b2:1c:
6c:e7:92:e6:65:1c:e8:f6:30:e5:43:50:6f:fd:f6:
81:cd:b4:7e:9f:8f:cd:0a:ea:00:c2:3e:53:68:36:
b1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9E:59:C6:36:90:92:96:5D:53:11:B2:10:15:F8:D8:4F:E7:05:79
X509v3 Authority Key Identifier:
keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/0B7314303CC511EEAAF7E47DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.71.92.0/24
103.71.94.0/24
Signature Algorithm: sha256WithRSAEncryption
25:15:67:41:1b:33:63:e2:34:88:15:62:fe:4e:ab:f4:c4:a0:
31:35:b3:c3:9a:62:88:51:3a:03:0c:c2:b0:8a:cd:a9:ec:32:
55:21:c8:59:24:07:5a:4a:0e:ba:d0:e3:41:ca:c6:cc:54:51:
99:a0:13:a9:73:0a:bb:a7:15:63:84:1e:0b:e1:4e:bb:47:ef:
11:45:3d:af:5c:47:96:c8:0b:ce:e1:95:48:81:52:84:d2:23:
f9:00:44:f5:60:3b:75:d2:5f:6c:44:40:f0:02:7b:bf:ff:7e:
1f:25:27:af:40:2d:17:04:ab:39:7b:4e:0d:d2:c8:54:37:35:
6d:00:c5:9e:ff:c6:f0:8e:75:f7:f3:f8:b5:d2:f6:33:1d:bc:
c9:1f:df:90:c3:33:76:8f:49:60:0b:2e:97:cf:9f:2e:21:5b:
f5:6d:82:f9:f9:59:df:59:8b:a8:5c:31:e8:42:30:c4:bf:61:
e9:f6:f7:3b:f8:03:db:47:80:f8:1e:6b:18:95:8d:56:3e:46:
eb:a7:f5:27:05:09:ac:60:13:02:f8:f2:00:80:fd:65:35:73:
6c:d9:4f:5f:74:84:42:c6:13:f7:97:da:02:6f:e7:80:3e:8a:
ba:2b:35:57:84:6d:cf:a5:ae:2a:3a:13:44:cd:14:f2:43:02:
a1:4f:7c:22
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NkREQjExMC8GA1UEBRMoMEM3NjlEQTQ0OTgyRjYxNjUwMzYyOTQzRTZERkVGOTUx
Qjk3NzdGQTAeFw0yMzA4MTcwNjEyMjlaFw0yMzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0ZGRiYTRkLTM3YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+F00B7YBLAd0UOKYXVCbWKAGN6UKBKkK1OWKujXNJUzOzzxGN0XwnR8Pq7c9K
aESZKCQgXHaxU8u2+jM0/zctUXcRG00dfqXNrdB+3Ga2rMk7g8GNM1tEQ2A7RaBX
tPsUBvUGuYJ3qGI/Kc9sZT9BsTm9fu62kYH44exIhWnh6UsQscA3v7K56/cl6ZxO
yuUtmtoIcp6CUiwKHfgSn26GrVZDC7FsKhNoUC3AyMP2v1krvMI4QNOsARBw7fF/
Ea+t3XSD6/F/mYToQOsA6IW0zND8IcOL++9acT1pUEiyHGznkuZlHOj2MOVDUG/9
9oHNtH6fj80K6gDCPlNoNrFHAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUdZ5ZxjaQ
kpZdUxGyEBX42E/nBXkwHwYDVR0jBBgwFoAUDHadpEmC9hZQNilD5t/vlRuXd/ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2RERCL0UxQ0RDREQyQkUx
QjExRURBNjFBQ0Q4NEM0RjlBRTAyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRf
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvREhhZHBFbUM5aFpRTmlsRDV0X3ZsUnVYZF9vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi8wQjczMTQzMDND
QzUxMUVFQUFGN0U0N0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW
MBQwEgQCAAEwDAMEAGdHXAMEAGdHXjANBgkqhkiG9w0BAQsFAAOCAQEAJRVnQRsz
Y+I0iBVi/k6r9MSgMTWzw5piiFE6AwzCsIrNqewyVSHIWSQHWkoOutDjQcrGzFRR
maATqXMKu6cVY4QeC+FOu0fvEUU9r1xHlsgLzuGVSIFShNIj+QBE9WA7ddJfbERA
8AJ7v/9+HyUnr0AtFwSrOXtODdLIVDc1bQDFnv/G8I519/P4tdL2Mx28yR/fkMMz
do9JYAsul8+fLiFb9W2C+flZ31mLqFwx6EIwxL9h6fb3O/gD20eA+B5rGJWNVj5G
66f1JwUJrGATAvjyAID9ZTVzbNlPX3SEQsYT95faAm/ngD6Kuis1V4Rtz6WuKjoT
RM0U8kMCoU98Ig==
-----END CERTIFICATE-----
Generated at Sat Apr 26 07:40:11 2025 by rpki-client