Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/557B0C023BB411EEA1B0CC83C4F9AE02.roa
File: 557B0C023BB411EEA1B0CC83C4F9AE02.roa (raw, json)
Hash identifier: vCnc/NS4covg/Fj16SB2l2aeiQa1RvAtlSz9QKShRGU=
Subject key identifier: C0:41:0C:8B:4B:18:B4:73:2B:21:7B:C2:64:2A:87:C8:C4:5F:40:A4
Certificate issuer: /CN=A9154FE7/serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
Certificate serial: 06C4
Authority key identifier: CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/557B0C023BB411EEA1B0CC83C4F9AE02.roa
Signing time: Tue 15 Aug 2023 21:40:21 +0000
ROA not before: Tue 15 Aug 2023 21:40:21 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 9790
IP address blocks: 103.123.164.0/22 maxlen: 23
103.123.164.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1732 (0x6c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9154FE7, serialNumber=CBE3D2A165B194B958EEC3B6A94457772A3A092A
Validity
Not Before: Aug 15 21:40:21 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=64dbf0c5-d6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4c:74:24:1e:99:64:c5:52:9d:f7:72:a9:4d:
53:0c:15:f0:ff:50:e3:68:76:9e:82:be:6a:6b:22:
df:4d:00:56:dc:02:95:8b:e8:28:fd:4f:80:8b:b8:
d7:84:7f:78:27:5f:0b:9b:36:e6:48:5d:14:3a:3d:
f3:dc:48:44:4d:d9:35:0c:65:e1:9f:32:66:6d:63:
f8:34:6f:e1:b6:5b:c2:60:de:0c:72:0d:94:88:a7:
d5:ac:fb:57:60:9a:d0:9f:64:df:d7:96:27:34:85:
1a:a3:60:da:4b:1f:0a:ec:b2:32:a2:f8:fe:9e:d8:
5d:ed:0f:6d:ba:47:88:02:82:cf:cf:e2:f0:d5:5e:
0d:55:a8:50:71:9e:d8:b8:bb:b1:c0:71:ea:9a:43:
92:2e:b5:e5:85:20:b3:ef:8f:a0:a1:9e:ee:ab:e5:
68:7a:10:82:18:86:66:6a:2c:79:90:83:06:0b:02:
a4:82:64:74:a0:6e:cb:4a:32:a5:db:dc:c5:36:cb:
08:67:59:37:67:47:fc:ef:6e:e4:34:85:1e:fa:70:
f5:22:ad:a0:a6:a4:d5:71:f4:b9:7b:11:5c:83:b4:
88:a6:38:8a:c4:ba:53:53:4a:a0:b6:a1:81:2f:cb:
4e:3e:8e:c1:89:ba:18:26:58:4c:2f:dd:dd:c9:70:
02:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:41:0C:8B:4B:18:B4:73:2B:21:7B:C2:64:2A:87:C8:C4:5F:40:A4
X509v3 Authority Key Identifier:
keyid:CB:E3:D2:A1:65:B1:94:B9:58:EE:C3:B6:A9:44:57:77:2A:3A:09:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/y-PSoWWxlLlY7sO2qURXdyo6CSo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y-PSoWWxlLlY7sO2qURXdyo6CSo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FE7/5A2D89EADB7D11EABCF3EC3EC4F9AE02/557B0C023BB411EEA1B0CC83C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.123.164.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:a7:21:53:d9:63:7a:07:5e:50:e2:10:a3:94:4d:f7:ce:79:
5b:5f:e2:37:10:cc:84:60:b0:5f:78:2f:dc:c5:ef:33:23:e0:
f1:d8:00:36:17:ec:29:ce:6f:1c:0f:b2:ad:7c:7c:a7:1f:4c:
28:88:c1:9b:53:c2:af:36:d6:6b:99:60:a6:3e:9b:ba:bc:4d:
12:02:4e:19:ba:95:e5:64:70:ae:0d:4c:da:46:6a:57:45:db:
bb:6d:dc:85:f2:db:65:64:5b:fe:62:c1:ca:b2:18:88:04:76:
ce:b3:d6:a3:63:54:ea:6b:e3:87:35:ac:c1:80:b6:7e:4f:28:
c6:d9:14:31:7c:9f:0e:de:94:26:a7:92:d3:55:6c:f4:ca:1d:
e5:4f:39:48:d8:73:f8:0e:d9:07:04:d4:e4:2e:8b:02:da:4a:
70:b2:9a:30:c4:3e:1e:eb:6f:a9:aa:73:4c:03:73:65:28:9d:
3f:6f:a9:9b:4e:25:13:e9:9d:b9:32:00:8a:ee:4a:1b:df:4f:
d2:9e:39:94:be:0f:63:a4:07:bc:75:2e:73:62:98:2b:24:48:
94:22:79:f5:12:bb:fb:f8:62:55:d8:97:9c:06:cd:05:72:20:
64:5f:c5:29:e5:d3:a0:a0:cb:eb:d4:ec:25:ce:66:9e:1e:12:
f0:4b:71:30
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTRGRTcxMTAvBgNVBAUTKENCRTNEMkExNjVCMTk0Qjk1OEVFQzNCNkE5NDQ1Nzc3
MkEzQTA5MkEwHhcNMjMwODE1MjE0MDIxWhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGRiZjBjNS1kNmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Ux0JB6ZZMVSnfdyqU1TDBXw/1DjaHaegr5qayLfTQBW3AKVi+go/U+Ai7jX
hH94J18LmzbmSF0UOj3z3EhETdk1DGXhnzJmbWP4NG/htlvCYN4Mcg2UiKfVrPtX
YJrQn2Tf15YnNIUao2DaSx8K7LIyovj+nthd7Q9tukeIAoLPz+Lw1V4NVahQcZ7Y
uLuxwHHqmkOSLrXlhSCz74+goZ7uq+VoehCCGIZmaix5kIMGCwKkgmR0oG7LSjKl
29zFNssIZ1k3Z0f8727kNIUe+nD1Iq2gpqTVcfS5exFcg7SIpjiKxLpTU0qgtqGB
L8tOPo7BiboYJlhML93dyXACRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMBBDItL
GLRzKyF7wmQqh8jEX0CkMB8GA1UdIwQYMBaAFMvj0qFlsZS5WO7DtqlEV3cqOgkq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEZFNy81QTJEODlFQURC
N0QxMUVBQkNGM0VDM0VDNEY5QUUwMi95LVBTb1dXeGxMbFk3c08ycVVSWGR5bzZD
U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ktUFNvV1d4bExsWTdzTzJxVVJYZHlvNkNTby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTRGRTcvNUEyRDg5RUFEQjdEMTFFQUJDRjNFQzNFQzRGOUFFMDIvNTU3QjBDMDIz
QkI0MTFFRUExQjBDQzgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJne6QwDQYJKoZIhvcNAQELBQADggEBAMCnIVPZY3oHXlDi
EKOUTffOeVtf4jcQzIRgsF94L9zF7zMj4PHYADYX7CnObxwPsq18fKcfTCiIwZtT
wq821muZYKY+m7q8TRICThm6leVkcK4NTNpGaldF27tt3IXy22VkW/5iwcqyGIgE
ds6z1qNjVOpr44c1rMGAtn5PKMbZFDF8nw7elCanktNVbPTKHeVPOUjYc/gO2QcE
1OQuiwLaSnCymjDEPh7rb6mqc0wDc2UonT9vqZtOJRPpnbkyAIruShvfT9KeOZS+
D2OkB7x1LnNimCskSJQiefUSu/v4YlXYl5wGzQVyIGRfxSnl06Cgy+vU7CXOZp4e
EvBLcTA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:49:11 2025 by rpki-client