Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/4A83B7CA291811EFB8AFB559C4F9AE02.roa
File: 4A83B7CA291811EFB8AFB559C4F9AE02.roa (raw, json)
Hash identifier: IbAx/zhlpTui8lBEr9+wxQE2e5L1ZO8qHnPx3uFtNr8=
Subject key identifier: 4F:4B:A8:AD:3E:83:17:98:65:32:0B:84:A3:18:F8:1A:17:87:23:B1
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 094A
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/4A83B7CA291811EFB8AFB559C4F9AE02.roa
Signing time: Thu 13 Jun 2024 00:02:58 +0000
ROA not before: Thu 13 Jun 2024 00:02:58 +0000
ROA not after: Mon 30 Dec 2024 00:00:00 +0000
asID: 10143
IP address blocks: 58.96.0.0/17 maxlen: 24
103.237.16.0/22 maxlen: 22
115.70.0.0/16 maxlen: 20
115.70.0.0/18 maxlen: 24
115.70.64.0/22 maxlen: 24
115.70.68.0/22 maxlen: 24
115.70.72.0/21 maxlen: 24
115.70.80.0/20 maxlen: 24
115.70.96.0/19 maxlen: 24
115.70.128.0/17 maxlen: 24
163.53.144.0/22 maxlen: 22
220.233.0.0/16 maxlen: 24
2406:3400::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2378 (0x94a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Jun 13 00:02:58 2024 GMT
Not After : Dec 30 00:00:00 2024 GMT
Subject: CN=666a3732-6c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:00:fd:cb:d5:df:12:3d:9f:b2:81:d9:ef:fe:
0f:03:24:b6:24:16:3e:cb:9c:b8:fc:6c:dc:d1:1d:
b9:88:85:5c:f5:ef:53:87:fe:46:f9:d6:39:c1:59:
a9:85:a5:65:38:22:4f:31:f4:fd:9b:45:14:c2:6b:
a5:ab:03:5f:f6:61:f2:89:b2:46:b7:ec:bd:d7:8d:
2f:d3:93:95:97:77:5d:74:25:3c:ab:56:43:da:18:
9f:73:cf:a6:1b:62:fe:07:a7:cf:3c:b2:7b:11:93:
64:5a:9e:72:61:8d:1c:bb:8d:fd:fb:1c:4d:b7:08:
62:81:68:c1:33:c8:ff:78:00:0a:4d:a3:b4:da:b6:
67:6a:da:62:ad:14:2f:25:7b:f8:f1:54:3d:7d:49:
2f:59:41:82:c4:35:e6:87:09:12:fd:a8:65:de:b1:
8b:05:42:be:dc:10:d0:69:35:75:fa:f1:7c:da:62:
2c:09:59:80:57:81:ca:b0:f2:51:22:09:39:4d:17:
e4:75:53:c5:ed:56:d8:03:a5:41:68:f5:d6:88:6c:
0b:77:c2:c9:dd:03:9b:5a:11:cb:34:85:64:51:b2:
e3:14:c8:52:d6:a6:cb:87:49:fe:1c:71:4f:7b:cb:
a4:50:ec:fa:bf:e7:52:e3:37:c4:cc:e8:07:18:89:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4B:A8:AD:3E:83:17:98:65:32:0B:84:A3:18:F8:1A:17:87:23:B1
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/4A83B7CA291811EFB8AFB559C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.96.0.0/17
103.237.16.0/22
115.70.0.0/16
163.53.144.0/22
220.233.0.0/16
IPv6:
2406:3400::/32
Signature Algorithm: sha256WithRSAEncryption
2e:5d:8a:d0:c7:08:51:13:34:f2:73:9e:01:85:82:c9:e1:a0:
95:c4:f0:94:0d:50:b1:e9:43:db:27:8e:f6:3e:6e:de:a3:da:
9e:83:90:99:1c:0e:ef:a7:fc:c2:b5:f6:43:e8:5b:9b:dd:fa:
5e:d7:8a:57:cd:82:b7:4d:fe:e2:7f:84:c9:28:5d:c4:c7:fd:
e6:a1:59:51:d4:f3:1e:e7:3f:3e:d1:dc:9c:31:27:d3:7b:16:
ea:fb:0c:f4:88:3d:8f:c4:00:f7:a0:9b:bc:69:1f:c7:24:67:
80:b7:20:b9:c5:cd:4e:e5:09:25:94:36:3e:20:88:6f:55:2a:
29:00:99:82:3a:e0:6c:8d:d0:97:80:10:bb:e5:33:f5:5d:d8:
d1:54:09:e0:8c:3e:10:ef:fe:5a:18:8c:d7:dd:d9:b9:41:4a:
2b:aa:db:63:17:50:65:77:ef:45:6d:6d:8b:d3:6a:ba:a2:7a:
52:96:9f:c7:72:30:4f:b2:31:1d:13:ae:81:46:ed:52:7e:c3:
05:c0:01:f8:b1:bf:21:01:f6:c7:5f:00:bd:7f:4c:c7:bc:49:
16:fb:7a:a8:3e:a2:81:ad:ca:3a:4c:7c:32:d9:05:07:b0:2c:
29:06:ac:80:31:55:22:23:6c:69:b2:d3:51:7c:c2:15:bd:bd:
2d:ab:55:08
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0
QkM3OTczQjEwHhcNMjQwNjEzMDAwMjU4WhcNMjQxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NjZhMzczMi02YzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzAD9y9XfEj2fsoHZ7/4PAyS2JBY+y5y4/Gzc0R25iIVc9e9Th/5G+dY5wVmp
haVlOCJPMfT9m0UUwmulqwNf9mHyibJGt+y9140v05OVl3dddCU8q1ZD2hifc8+m
G2L+B6fPPLJ7EZNkWp5yYY0cu439+xxNtwhigWjBM8j/eAAKTaO02rZnatpirRQv
JXv48VQ9fUkvWUGCxDXmhwkS/ahl3rGLBUK+3BDQaTV1+vF82mIsCVmAV4HKsPJR
Igk5TRfkdVPF7VbYA6VBaPXWiGwLd8LJ3QObWhHLNIVkUbLjFMhS1qbLh0n+HHFP
e8ukUOz6v+dS4zfEzOgHGImNCwIDAQABo4ICujCCArYwHQYDVR0OBBYEFE9LqK0+
gxeYZTILhKMY+BoXhyOxMB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB
MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUU0NzUvREE4M0FBN0FDQTExMTFFQUE0NzlDNzM0QzRGOUFFMDIvNEE4M0I3Q0Ey
OTE4MTFFRkI4QUZCNTU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRAYIKwYBBQUHAQcBAf8E
NTAzMCIEAgABMBwDBAc6YAADBAJn7RADAwBzRgMEAqM1kAMDANzpMA0EAgACMAcD
BQAkBjQAMA0GCSqGSIb3DQEBCwUAA4IBAQAuXYrQxwhREzTyc54BhYLJ4aCVxPCU
DVCx6UPbJ472Pm7eo9qeg5CZHA7vp/zCtfZD6Fub3fpe14pXzYK3Tf7if4TJKF3E
x/3moVlR1PMe5z8+0dycMSfTexbq+wz0iD2PxAD3oJu8aR/HJGeAtyC5xc1O5Qkl
lDY+IIhvVSopAJmCOuBsjdCXgBC75TP1XdjRVAngjD4Q7/5aGIzX3dm5QUorqttj
F1Bld+9FbW2L02q6onpSlp/HcjBPsjEdE66BRu1SfsMFwAH4sb8hAfbHXwC9f0zH
vEkW+3qoPqKBrco6THwy2QUHsCwpBqyAMVUiI2xpstNRfMIVvb0tq1UI
-----END CERTIFICATE-----
Generated at Thu Jun 19 05:17:25 2025 by rpki-client