
Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/ACEAC0A4A62A11EA8EEE5680C4F9AE02.roa
File: ACEAC0A4A62A11EA8EEE5680C4F9AE02.roa (raw, json)
Hash identifier: Om6eOyBuBavrJzDyV/BOeiOVBGF1yS7sWQaSP8Vcwzk=
Subject key identifier: 26:FD:D5:47:CB:A3:71:7E:F3:19:AA:17:C4:A5:08:3F:59:D9:AF:99
Certificate issuer: /CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB
Certificate serial: 0695
Authority key identifier: 0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/ACEAC0A4A62A11EA8EEE5680C4F9AE02.roa
Signing time: Fri 29 Jul 2022 22:27:54 +0000
ROA not before: Fri 29 Jul 2022 22:27:54 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 140696
IP address blocks: 103.151.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1685 (0x695)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DE5DA, serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB
Validity
Not Before: Jul 29 22:27:54 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62e45eea-5cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:af:1e:d1:d3:cc:78:85:e3:a9:b6:0d:86:33:
39:6c:9e:60:de:fb:88:d8:1d:8e:03:84:6f:29:22:
59:81:09:bc:f0:6c:f7:95:13:30:25:f9:1b:11:c0:
97:9e:98:9c:66:31:1c:40:0c:ee:35:37:48:24:70:
94:02:88:ba:17:9a:81:60:5c:04:dc:11:01:e7:11:
89:a6:cb:37:31:4b:9b:b6:6f:79:f6:fc:7f:c3:c3:
93:57:c2:73:89:46:67:2c:b8:06:52:c2:8d:1f:c4:
35:28:17:ba:2e:61:4c:ae:27:dc:ff:9b:4f:74:50:
e5:6a:fb:af:98:a2:47:04:af:73:37:01:ca:58:6e:
11:83:ed:ad:d3:b9:18:51:29:d3:32:9a:7b:2e:e7:
d4:64:7e:f5:93:ff:4a:76:47:c3:8d:45:04:43:dd:
1c:e3:07:a2:cf:bb:b2:9b:4e:8d:e0:98:5f:e7:3a:
86:d0:f8:5a:0d:6f:03:50:db:57:5a:86:95:ca:37:
37:64:49:0a:b5:31:78:ad:48:7d:e1:43:33:e1:40:
c8:bd:9c:b3:c9:f9:11:2d:4d:9d:5b:43:15:82:06:
35:9d:05:3c:ab:61:bb:2f:7f:2d:04:d7:05:12:cf:
de:99:5f:4d:27:a8:d0:07:b1:48:a2:a6:ec:63:87:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FD:D5:47:CB:A3:71:7E:F3:19:AA:17:C4:A5:08:3F:59:D9:AF:99
X509v3 Authority Key Identifier:
keyid:0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/ACEAC0A4A62A11EA8EEE5680C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.248.0/24
Signature Algorithm: sha256WithRSAEncryption
66:45:e7:4c:d4:1c:3f:e9:da:ff:05:dd:f2:8e:03:fc:af:38:
de:09:fa:fb:31:83:46:02:35:96:d8:65:6d:8d:69:a5:fc:6e:
1c:2b:dc:84:a4:50:4d:9d:57:dc:b5:83:9d:26:ee:e7:86:50:
be:d4:2d:5c:37:0c:cf:81:0b:56:ca:c8:c4:64:dc:77:b1:24:
2f:28:56:91:d4:4f:c5:0a:c0:4a:a6:b4:1c:16:a7:df:5a:1d:
1d:a6:8e:48:c0:30:83:05:f4:12:63:9a:85:fc:2b:57:3a:88:
08:80:12:fc:6a:3e:59:c0:d3:06:96:a3:d5:a8:ef:e3:25:47:
b3:23:b9:53:16:1e:22:09:a9:c3:8c:eb:ed:19:d6:19:6f:78:
24:de:3f:d0:3b:29:79:01:4c:c9:de:59:77:d9:40:b2:30:42:
3f:9d:49:74:9c:26:30:32:a2:33:a2:08:f9:7d:3c:96:48:08:
ce:6b:93:95:6e:66:1f:5a:00:c9:e7:5d:54:d5:3f:b7:f4:a1:
52:e9:36:2c:95:aa:51:d7:48:50:80:2f:7c:72:94:48:6d:d6:
d0:aa:14:58:c5:cf:f1:85:44:47:81:d9:a3:e0:03:59:09:6d:
09:a2:c9:74:de:ce:bd:6a:ca:62:cb:b6:0b:95:b1:d0:e3:5f:
42:e2:0b:0c
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBpUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU1REExMTAvBgNVBAUTKDBFQkREMkJGNDQ5RUYzMzQ0MDYzNTE1NTNGMEVENjgz
MkU0NkU0Q0IwHhcNMjIwNzI5MjIyNzU0WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmU0NWVlYS01Y2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwK8e0dPMeIXjqbYNhjM5bJ5g3vuI2B2OA4RvKSJZgQm88Gz3lRMwJfkbEcCX
npicZjEcQAzuNTdIJHCUAoi6F5qBYFwE3BEB5xGJpss3MUubtm959vx/w8OTV8Jz
iUZnLLgGUsKNH8Q1KBe6LmFMrifc/5tPdFDlavuvmKJHBK9zNwHKWG4Rg+2t07kY
USnTMpp7LufUZH71k/9KdkfDjUUEQ90c4weiz7uym06N4Jhf5zqG0PhaDW8DUNtX
WoaVyjc3ZEkKtTF4rUh94UMz4UDIvZyzyfkRLU2dW0MVggY1nQU8q2G7L38tBNcF
Es/emV9NJ6jQB7FIoqbsY4dvQQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCb91UfL
o3F+8xmqF8SlCD9Z2a+ZMB8GA1UdIwQYMBaAFA690r9EnvM0QGNRVT8O1oMuRuTL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTVEQS9CODQ4REY2OEE2
MjkxMUVBODcyNjcwN0ZDNEY5QUUwMi9EcjNTdjBTZTh6UkFZMUZWUHc3V2d5NUc1
TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RyM1N2MFNlOHpSQVkxRlZQdzdXZ3k1RzVNcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
REU1REEvQjg0OERGNjhBNjI5MTFFQTg3MjY3MDdGQzRGOUFFMDIvQUNFQUMwQTRB
NjJBMTFFQThFRUU1NjgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnl/gwDQYJKoZIhvcNAQELBQADggEBAGZF50zUHD/p2v8F
3fKOA/yvON4J+vsxg0YCNZbYZW2NaaX8bhwr3ISkUE2dV9y1g50m7ueGUL7ULVw3
DM+BC1bKyMRk3HexJC8oVpHUT8UKwEqmtBwWp99aHR2mjkjAMIMF9BJjmoX8K1c6
iAiAEvxqPlnA0waWo9Wo7+MlR7MjuVMWHiIJqcOM6+0Z1hlveCTeP9A7KXkBTMne
WXfZQLIwQj+dSXScJjAyojOiCPl9PJZICM5rk5VuZh9aAMnnXVTVP7f0oVLpNiyV
qlHXSFCAL3xylEht1tCqFFjFz/GFREeB2aPgA1kJbQmiyXTezr1qymLLtguVsdDj
X0LiCww=
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:33:46 2025 by rpki-client