Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/281068C03F9611EF92484011C4F9AE02.roa
File: 281068C03F9611EF92484011C4F9AE02.roa (raw, json)
Hash identifier: jGg54kruOyA+Yl4s34FxL+nNhAVUFtBtEjBrDWA3Pmg=
Subject key identifier: 64:96:F7:CF:C0:A4:DE:E5:4C:82:52:F5:E6:02:DA:4B:E2:C2:16:DB
Certificate issuer: /CN=A911ACAC/serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
Certificate serial: 0407
Authority key identifier: 91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/281068C03F9611EF92484011C4F9AE02.roa
Signing time: Thu 11 Jul 2024 14:59:22 +0000
ROA not before: Thu 11 Jul 2024 14:59:22 +0000
ROA not after: Fri 31 Jan 2025 00:00:00 +0000
asID: 141433
IP address blocks: 103.174.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1031 (0x407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911ACAC, serialNumber=91E679721ED1E0927EBB7E461C80580D2393592A
Validity
Not Before: Jul 11 14:59:22 2024 GMT
Not After : Jan 31 00:00:00 2025 GMT
Subject: CN=668ff34a-677d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:de:0e:ee:5c:b3:5d:1c:2e:0e:0b:74:99:
fc:20:67:88:0e:fb:79:cc:22:1e:29:3f:78:ee:8d:
77:59:11:cb:54:fc:38:56:3e:3f:64:9d:4d:84:1d:
2d:da:f3:33:27:34:46:43:80:a3:e4:52:89:19:a5:
7d:77:2c:3c:01:c6:cc:cc:56:0d:bd:e7:41:12:af:
9f:3c:2b:e0:97:da:4a:29:7a:e7:4a:8d:7c:5e:5d:
99:66:6d:73:c2:17:92:15:3a:ab:30:61:32:0d:9b:
eb:14:4d:13:65:dd:80:8b:69:0f:77:f4:b0:d8:f6:
71:12:47:9e:72:44:98:25:73:22:10:13:3f:e9:a4:
62:f8:41:e4:bf:93:18:8a:41:40:4c:4b:72:e0:af:
40:79:4f:4e:b8:12:3c:ec:2d:83:64:96:f5:e0:f5:
9d:0d:7e:2f:02:91:90:82:00:da:f1:3b:46:3e:e2:
2a:08:05:ca:10:41:7e:a7:fe:0d:bd:57:1e:01:23:
0a:ef:bd:9d:8a:fe:e6:08:2d:3b:c0:2c:61:39:d3:
ea:f4:9f:8d:38:ae:dd:9b:bf:49:9d:02:ac:1d:6c:
04:eb:c1:17:3d:37:ab:7c:42:43:b4:85:ff:15:18:
b3:98:a3:52:fa:6b:1c:38:a7:c3:c8:57:dc:de:f0:
b4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:96:F7:CF:C0:A4:DE:E5:4C:82:52:F5:E6:02:DA:4B:E2:C2:16:DB
X509v3 Authority Key Identifier:
keyid:91:E6:79:72:1E:D1:E0:92:7E:BB:7E:46:1C:80:58:0D:23:93:59:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/keZ5ch7R4JJ-u35GHIBYDSOTWSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZ5ch7R4JJ-u35GHIBYDSOTWSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911ACAC/B3BDA56431D311EC8D3BBF30C4F9AE02/281068C03F9611EF92484011C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.174.189.0/24
Signature Algorithm: sha256WithRSAEncryption
26:41:80:5b:5d:81:ea:17:6d:e4:ad:b2:42:2d:06:8b:2d:5f:
6d:8e:e4:e2:5d:6c:8a:4a:fb:2f:e5:e4:6d:ba:53:b1:f4:f7:
77:0b:68:31:47:2b:8e:2c:37:7e:9f:9a:74:c6:6b:7a:bd:e0:
6d:c9:b5:8b:06:2d:a2:65:f3:1f:5a:c5:3f:bb:1e:38:94:e0:
31:3d:00:f3:9b:58:80:71:71:20:09:9b:9e:ed:d7:56:39:66:
c2:dd:46:0a:2e:9a:2b:ca:c2:11:fe:4a:dc:43:69:3b:12:db:
82:06:51:97:ce:e7:22:bc:da:de:8c:b2:88:d2:4e:3c:0e:bc:
27:ef:0a:d1:11:40:74:82:c3:8b:75:8a:d7:a7:51:a7:ad:c7:
d6:c3:d5:2b:49:b9:31:ab:e1:cb:64:6b:7a:e7:54:e5:be:a2:
9e:16:c0:92:84:9a:a2:8a:82:47:1a:4a:f5:5b:5c:b2:7d:c1:
2a:1d:e7:74:43:70:93:64:0c:92:1e:ea:83:8a:6c:82:21:ec:
0d:0c:0d:1d:07:8b:2b:ee:93:40:4b:a0:1c:db:11:25:4a:fc:
7c:fd:5a:27:9e:39:32:a0:ff:d1:ff:e0:b5:e5:5c:e9:19:6e:
f0:bd:27:31:63:ff:9b:c5:2a:0b:bd:7d:13:f6:87:6e:db:3c:
9a:ee:ea:7a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFDQUMxMTAvBgNVBAUTKDkxRTY3OTcyMUVEMUUwOTI3RUJCN0U0NjFDODA1ODBE
MjM5MzU5MkEwHhcNMjQwNzExMTQ1OTIyWhcNMjUwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjhmZjM0YS02NzdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAytfeDu5cs10cLg4LdJn8IGeIDvt5zCIeKT947o13WRHLVPw4Vj4/ZJ1NhB0t
2vMzJzRGQ4Cj5FKJGaV9dyw8AcbMzFYNvedBEq+fPCvgl9pKKXrnSo18Xl2ZZm1z
wheSFTqrMGEyDZvrFE0TZd2Ai2kPd/Sw2PZxEkeeckSYJXMiEBM/6aRi+EHkv5MY
ikFATEty4K9AeU9OuBI87C2DZJb14PWdDX4vApGQggDa8TtGPuIqCAXKEEF+p/4N
vVceASMK772div7mCC07wCxhOdPq9J+NOK7dm79JnQKsHWwE68EXPTerfEJDtIX/
FRizmKNS+mscOKfDyFfc3vC0LwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGSW98/A
pN7lTIJS9eYC2kviwhbbMB8GA1UdIwQYMBaAFJHmeXIe0eCSfrt+RhyAWA0jk1kq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUNBQy9CM0JEQTU2NDMx
RDMxMUVDOEQzQkJGMzBDNEY5QUUwMi9rZVo1Y2g3UjRKSi11MzVHSElCWURTT1RX
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tlWjVjaDdSNEpKLXUzNUdISUJZRFNPVFdTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUFDQUMvQjNCREE1NjQzMUQzMTFFQzhEM0JCRjMwQzRGOUFFMDIvMjgxMDY4QzAz
Rjk2MTFFRjkyNDg0MDExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnrr0wDQYJKoZIhvcNAQELBQADggEBACZBgFtdgeoXbeSt
skItBostX22O5OJdbIpK+y/l5G26U7H093cLaDFHK44sN36fmnTGa3q94G3JtYsG
LaJl8x9axT+7HjiU4DE9APObWIBxcSAJm57t11Y5ZsLdRgoumivKwhH+StxDaTsS
24IGUZfO5yK82t6MsojSTjwOvCfvCtERQHSCw4t1itenUaetx9bD1StJuTGr4ctk
a3rnVOW+op4WwJKEmqKKgkcaSvVbXLJ9wSod53RDcJNkDJIe6oOKbIIh7A0MDR0H
iyvuk0BLoBzbESVK/Hz9WieeOTKg/9H/4LXlXOkZbvC9JzFj/5vFKgu9fRP2h27b
PJru6no=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:16:44 2025 by rpki-client