Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77D7DCB0876511EE8CEF5323C4F9AE02.roa
File: 77D7DCB0876511EE8CEF5323C4F9AE02.roa (raw, json)
Hash identifier: ZK+rNpWUTmanGAbOCw9Urv+jfD1ZP0Pu54iFcIRKK1I=
Subject key identifier: EE:39:BB:11:FA:88:40:EF:53:96:2C:7F:54:28:9D:07:DE:84:4F:7F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 7DFE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77D7DCB0876511EE8CEF5323C4F9AE02.roa
Signing time: Mon 20 Nov 2023 05:27:17 +0000
ROA not before: Mon 20 Nov 2023 05:27:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141853
IP address blocks: 103.166.214.0/23 maxlen: 24
103.171.108.0/24 maxlen: 24
103.177.226.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32254 (0x7dfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Nov 20 05:27:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=655aee34-64e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:0c:d7:c1:9b:3c:c3:ed:9b:5e:04:53:b1:
5a:f2:24:36:68:2c:6c:a5:dd:b2:12:6d:dc:15:ad:
6a:b1:fd:4b:79:c7:62:a8:d2:a6:7a:d0:03:7c:c2:
28:97:75:2c:37:aa:6b:e0:a4:65:34:39:3c:b6:64:
0f:d1:22:56:a7:b8:75:11:6e:81:c9:81:73:3b:3e:
99:86:82:42:94:8c:30:61:11:76:3d:62:53:9c:20:
c6:04:e7:9b:91:bf:85:1f:c1:10:48:ce:11:31:79:
e9:c8:4d:31:bb:ef:c3:fb:95:72:9b:13:39:28:56:
4e:df:a4:5f:a0:e1:e5:da:67:c1:17:a2:75:18:70:
2a:cd:fa:5a:51:e4:84:44:63:b7:28:7d:5e:b0:cd:
a1:52:33:aa:af:aa:39:d9:98:f2:96:ac:b8:67:d4:
ad:59:63:9c:58:ad:82:af:8d:a6:b4:23:c0:9b:98:
2d:33:79:e0:60:6d:7b:4a:9e:d5:87:24:ad:29:8b:
fc:77:d7:aa:f8:9b:ab:09:bd:b7:1c:46:84:6b:18:
04:28:21:fd:d8:e2:16:94:f3:5e:b5:ac:19:b0:46:
99:a6:89:1e:6c:9e:4a:c4:90:54:0b:04:0d:09:d6:
f8:1e:26:e0:f0:91:c2:7e:ec:36:10:9c:9a:65:ba:
3d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:39:BB:11:FA:88:40:EF:53:96:2C:7F:54:28:9D:07:DE:84:4F:7F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/77D7DCB0876511EE8CEF5323C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.166.214.0/23
103.171.108.0/24
103.177.226.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:87:2c:9a:cf:7b:df:a5:db:7a:1e:3d:01:1d:19:cb:8d:25:
e6:ab:eb:45:e4:6d:40:1b:10:6a:e5:60:93:73:f4:43:cc:8e:
5b:6c:21:ff:d9:1a:80:99:65:14:c1:73:a2:56:6b:22:1f:cc:
21:5a:2a:ab:9a:e2:a1:48:43:ff:fc:83:73:e2:c6:bd:0c:d3:
d9:44:8a:57:aa:73:92:60:88:2a:19:85:8c:8f:f3:23:d4:54:
ee:c3:a3:b8:e2:53:65:22:37:b8:0d:dd:c3:04:66:f6:16:11:
91:e3:4f:92:4f:57:de:02:94:19:d5:71:72:53:bd:29:fa:29:
80:75:f0:d7:3a:fe:ad:68:71:32:23:19:96:e4:91:82:0b:fb:
e8:45:29:ab:dd:3e:50:16:09:8f:99:dd:36:dd:d2:e9:81:67:
94:75:60:b5:26:00:8d:9a:43:47:3a:78:cc:31:fa:6c:49:0a:
d1:3d:6f:16:5a:6c:2a:ae:f8:14:08:77:f8:ee:a8:e1:a4:b6:
53:59:a1:2c:fb:09:87:5d:1a:ee:3c:d9:60:44:37:a3:11:0e:
ab:41:6b:85:bd:11:bb:54:22:9f:03:9f:47:45:9c:34:39:84:
c3:28:70:e6:f3:cc:9f:06:0b:0f:2a:96:47:5a:3f:c9:11:d7:
69:14:5a:84
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgICff4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKDI5NkVEQjY0RjNBRjZFOUQ5ODA5MzJFODE2Rjk1OTgz
RTNBQkM4MjMwHhcNMjMxMTIwMDUyNzE3WhcNMjQwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTVhZWUzNC02NGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuwoM18GbPMPtm14EU7Fa8iQ2aCxspd2yEm3cFa1qsf1LecdiqNKmetADfMIo
l3UsN6pr4KRlNDk8tmQP0SJWp7h1EW6ByYFzOz6ZhoJClIwwYRF2PWJTnCDGBOeb
kb+FH8EQSM4RMXnpyE0xu+/D+5VymxM5KFZO36RfoOHl2mfBF6J1GHAqzfpaUeSE
RGO3KH1esM2hUjOqr6o52Zjylqy4Z9StWWOcWK2Cr42mtCPAm5gtM3ngYG17Sp7V
hyStKYv8d9eq+JurCb23HEaEaxgEKCH92OIWlPNetawZsEaZpokebJ5KxJBUCwQN
Cdb4Hibg8JHCfuw2EJyaZbo9YwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFO45uxH6
iEDvU5Ysf1QonQfehE9/MB8GA1UdIwQYMBaAFClu22Tzr26dmAky6Bb5WYPjq8gj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8yQTQzRTMwQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tXN2JaUE92YnAyWUNUTG9GdmxaZy1PcnlDTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMkE0M0UzMEM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNzdEN0RDQjA4
NzY1MTFFRThDRUY1MzIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E
HDAaMBgEAgABMBIDBAFnptYDBABnq2wDBAFnseIwDQYJKoZIhvcNAQELBQADggEB
AC2HLJrPe9+l23oePQEdGcuNJear60XkbUAbEGrlYJNz9EPMjltsIf/ZGoCZZRTB
c6JWayIfzCFaKqua4qFIQ//8g3Pixr0M09lEileqc5JgiCoZhYyP8yPUVO7Do7ji
U2UiN7gN3cMEZvYWEZHjT5JPV94ClBnVcXJTvSn6KYB18Nc6/q1ocTIjGZbkkYIL
++hFKavdPlAWCY+Z3Tbd0umBZ5R1YLUmAI2aQ0c6eMwx+mxJCtE9bxZabCqu+BQI
d/juqOGktlNZoSz7CYddGu482WBEN6MRDqtBa4W9EbtUIp8Dn0dFnDQ5hMMocObz
zJ8GCw8qlkdaP8kR12kUWoQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:41:29 2025 by rpki-client