Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/338E008C33DD11EAB6057973C4F9AE02.roa
File: 338E008C33DD11EAB6057973C4F9AE02.roa (raw, json)
Hash identifier: Vj0WpAKY8IRYWfGam8aAKb2uJFw+aIpOFw7a+IcY6hI=
Subject key identifier: B5:46:70:85:24:0D:87:A2:DC:AC:C0:C1:08:D4:A8:25:4B:91:50:69
Certificate issuer: /CN=A912DC44/serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Certificate serial: 0CF0
Authority key identifier: A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/338E008C33DD11EAB6057973C4F9AE02.roa
Signing time: Wed 25 Dec 2024 12:29:08 +0000
ROA not before: Wed 25 Dec 2024 12:29:08 +0000
ROA not after: Sun 02 Mar 2025 00:00:00 +0000
asID: 134806
IP address blocks: 103.89.26.0/24 maxlen: 24
103.89.27.0/24 maxlen: 24
103.126.216.0/22 maxlen: 24
103.127.56.0/22 maxlen: 24
103.200.36.0/22 maxlen: 22
103.200.36.0/23 maxlen: 23
103.200.36.0/24 maxlen: 24
103.200.37.0/24 maxlen: 24
103.200.38.0/23 maxlen: 23
103.200.38.0/24 maxlen: 24
103.200.39.0/24 maxlen: 24
123.253.64.0/22 maxlen: 24
2401:1040::/32 maxlen: 32
2401:1040::/40 maxlen: 40
2401:1040::/48 maxlen: 48
2401:1040:1::/48 maxlen: 48
2401:1040:2::/48 maxlen: 48
2401:1040:3::/48 maxlen: 48
2401:1040:100::/40 maxlen: 40
2401:1040:102::/48 maxlen: 48
2401:1040:300::/40 maxlen: 40
2401:1040:301::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3312 (0xcf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912DC44, serialNumber=A6421FE13D8C93A7BDDFF8B53719B5808748D0DF
Validity
Not Before: Dec 25 12:29:08 2024 GMT
Not After : Mar 2 00:00:00 2025 GMT
Subject: CN=676bfa94-d5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:44:fd:7b:c0:bc:e6:b2:e7:30:fa:c7:4d:58:
d1:29:e0:5a:f1:71:e6:db:7c:7c:4f:aa:e5:d2:d8:
fd:32:3b:f4:d4:a1:b5:c6:55:69:ec:a6:16:3b:7b:
aa:9c:2f:28:68:81:47:8f:25:25:f2:95:ef:d9:d6:
e3:58:63:a6:b5:bf:1a:55:62:04:c6:79:13:88:6b:
b1:89:3f:f2:19:27:4a:95:8c:60:da:2e:fe:eb:a6:
bd:a9:e4:e6:bc:c9:cc:3e:29:ea:ac:e1:d3:6a:f0:
47:8d:7f:72:ca:5b:58:43:f5:25:23:b3:40:93:db:
c4:7e:69:db:33:c7:3e:91:66:f0:20:5b:b0:5e:13:
66:a8:cc:65:69:2e:ad:44:13:1e:f9:b8:3e:9b:82:
a9:9e:2b:ab:93:db:a0:c6:35:54:cd:db:66:ba:47:
fd:75:25:18:ba:bf:03:22:e6:10:ee:52:ca:fb:42:
1c:34:03:d8:4e:29:6b:e2:92:e9:ee:6e:d3:e4:27:
7b:de:70:09:47:de:b2:e0:b0:6f:8b:50:5f:51:38:
ab:bf:ef:08:38:09:5e:b2:7e:e9:89:30:14:fa:91:
46:82:02:fe:3f:11:f5:e6:c8:ef:32:d6:55:e2:33:
6b:8c:fb:0f:b5:1d:20:db:45:14:86:e1:5e:7f:46:
62:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:46:70:85:24:0D:87:A2:DC:AC:C0:C1:08:D4:A8:25:4B:91:50:69
X509v3 Authority Key Identifier:
keyid:A6:42:1F:E1:3D:8C:93:A7:BD:DF:F8:B5:37:19:B5:80:87:48:D0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pkIf4T2Mk6e93_i1Nxm1gIdI0N8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DC44/29B6BEDAE4FC11E9B13B4860C4F9AE02/338E008C33DD11EAB6057973C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.89.26.0/23
103.126.216.0/22
103.127.56.0/22
103.200.36.0/22
123.253.64.0/22
IPv6:
2401:1040::/32
Signature Algorithm: sha256WithRSAEncryption
2f:f7:00:74:f2:f4:fc:ef:7a:c5:5a:f0:ba:7b:d5:cc:50:38:
80:78:9f:df:f7:21:ee:4c:cd:79:7a:4c:70:7e:93:5b:58:f4:
e9:32:3e:67:e2:5c:88:a5:5c:9a:d6:f6:fc:8c:24:e8:6b:d3:
05:2f:9c:64:73:e1:bb:41:3d:d7:9b:ee:4e:b4:96:a4:71:72:
84:cf:7b:ef:6b:5a:1e:f8:fd:57:74:95:7c:0f:44:09:c1:21:
da:d7:e3:ea:eb:84:ff:3b:2f:50:1d:1c:53:7c:3a:e0:51:95:
d5:a6:cd:fb:18:eb:a6:11:f9:3b:8e:65:9a:50:1a:26:1d:cb:
29:16:e7:ad:0a:65:7c:71:2a:56:a6:37:59:a1:41:8b:94:56:
d9:c8:14:f8:66:4d:a0:12:2d:7c:e4:dc:f6:81:56:e9:b5:27:
d0:85:59:5d:06:bf:ac:65:08:8c:14:bf:80:d8:5d:f1:62:6a:
b7:27:94:23:8a:05:e2:c4:b5:27:51:55:54:4b:75:da:dc:fa:
d4:80:13:04:5f:fe:4f:32:69:71:ea:fd:53:8b:3e:e6:e3:cc:
53:ac:4f:fa:a3:16:a9:28:7b:1d:65:b9:99:19:e7:a1:1a:7f:
af:a2:29:eb:97:6c:e0:ad:d7:12:c4:af:bf:ee:ef:57:e6:f2:
dd:0b:e2:15
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkRDNDQxMTAvBgNVBAUTKEE2NDIxRkUxM0Q4QzkzQTdCRERGRjhCNTM3MTlCNTgw
ODc0OEQwREYwHhcNMjQxMjI1MTIyOTA4WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzZiZmE5NC1kNWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxkT9e8C85rLnMPrHTVjRKeBa8XHm23x8T6rl0tj9Mjv01KG1xlVp7KYWO3uq
nC8oaIFHjyUl8pXv2dbjWGOmtb8aVWIExnkTiGuxiT/yGSdKlYxg2i7+66a9qeTm
vMnMPinqrOHTavBHjX9yyltYQ/UlI7NAk9vEfmnbM8c+kWbwIFuwXhNmqMxlaS6t
RBMe+bg+m4Kpniurk9ugxjVUzdtmukf9dSUYur8DIuYQ7lLK+0IcNAPYTilr4pLp
7m7T5Cd73nAJR96y4LBvi1BfUTirv+8IOAlesn7piTAU+pFGggL+PxH15sjvMtZV
4jNrjPsPtR0g20UUhuFef0ZiKwIDAQABo4ICvDCCArgwHQYDVR0OBBYEFLVGcIUk
DYei3KzAwQjUqCVLkVBpMB8GA1UdIwQYMBaAFKZCH+E9jJOnvd/4tTcZtYCHSNDf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREM0NC8yOUI2QkVEQUU0
RkMxMUU5QjEzQjQ4NjBDNEY5QUUwMi9wa0lmNFQyTWs2ZTkzX2kxTnhtMWdJZEkw
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BrSWY0VDJNazZlOTNfaTFOeG0xZ0lkSTBOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkRDNDQvMjlCNkJFREFFNEZDMTFFOUIxM0I0ODYwQzRGOUFFMDIvMzM4RTAwOEMz
M0REMTFFQUI2MDU3OTczQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E
NzA1MCQEAgABMB4DBAFnWRoDBAJnftgDBAJnfzgDBAJnyCQDBAJ7/UAwDQQCAAIw
BwMFACQBEEAwDQYJKoZIhvcNAQELBQADggEBAC/3AHTy9PzvesVa8Lp71cxQOIB4
n9/3Ie5MzXl6THB+k1tY9OkyPmfiXIilXJrW9vyMJOhr0wUvnGRz4btBPdeb7k60
lqRxcoTPe+9rWh74/Vd0lXwPRAnBIdrX4+rrhP87L1AdHFN8OuBRldWmzfsY66YR
+TuOZZpQGiYdyykW560KZXxxKlamN1mhQYuUVtnIFPhmTaASLXzk3PaBVum1J9CF
WV0Gv6xlCIwUv4DYXfFiarcnlCOKBeLEtSdRVVRLddrc+tSAEwRf/k8yaXHq/VOL
PubjzFOsT/qjFqkoex1luZkZ56Eaf6+iKeuXbOCt1xLEr7/u71fm8t0L4hU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:21:05 2025 by rpki-client