Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11D151C8BDE011EAAEA46554C4F9AE02.roa
File: 11D151C8BDE011EAAEA46554C4F9AE02.roa (raw, json)
Hash identifier: EvsWMWkcxkcbx7BVDE1CHN4mPCuyaO1JLDK8F2NyR+g=
Subject key identifier: 68:21:BE:CC:4A:EA:3B:F1:28:A7:A6:F0:9C:74:F0:9E:78:69:1A:60
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6301
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11D151C8BDE011EAAEA46554C4F9AE02.roa
Signing time: Thu 12 Jan 2023 09:11:39 +0000
ROA not before: Thu 12 Jan 2023 09:11:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138760
IP address blocks: 103.103.92.0/24 maxlen: 24
103.103.93.0/24 maxlen: 24
103.103.94.0/24 maxlen: 24
103.103.95.0/24 maxlen: 24
103.139.66.0/23 maxlen: 24
103.164.26.0/24 maxlen: 24
103.164.27.0/24 maxlen: 24
2001:df1:a780::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25345 (0x6301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 12 09:11:39 2023 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63bfceca-c6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:2a:73:ab:04:b3:ee:2f:af:78:3e:b0:be:
82:6f:47:46:8e:41:fc:da:5d:02:86:17:d5:e6:48:
09:75:69:af:d7:93:8c:24:72:73:1f:42:44:b2:53:
62:5b:a7:4d:ef:85:d7:a9:ec:a0:81:6a:8a:e8:28:
69:8d:80:b0:58:94:5a:15:95:0b:81:d5:c9:86:a4:
7c:b0:66:bf:98:18:48:41:32:c3:1e:de:1d:3e:0a:
c4:4e:82:78:a1:41:32:d8:52:13:41:f6:b5:71:c5:
46:0a:c5:c6:ee:50:27:6f:69:e2:d9:c3:23:ea:5a:
8d:f2:cf:18:28:c4:d4:46:05:85:65:fe:a7:11:6f:
9c:6b:20:d9:f9:fa:9c:dc:34:d2:c5:5e:d3:85:d8:
05:9d:ee:63:6a:64:0f:20:a6:e0:b9:99:23:0f:c3:
5d:8f:3b:08:e8:e3:d1:76:35:63:1e:f7:db:c9:04:
b2:56:65:37:8c:f6:2a:c4:b5:5f:95:c0:91:b2:a8:
b7:c1:89:14:0d:0a:f7:b0:47:e3:6d:ff:3e:a1:57:
c5:a8:e9:17:13:55:9e:47:3f:f9:0f:85:be:a5:a9:
b6:60:f6:af:a1:e0:ba:ba:12:36:88:bd:f2:91:82:
2e:1d:f7:52:d6:c9:30:27:d5:5a:d8:c5:9f:05:4c:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:21:BE:CC:4A:EA:3B:F1:28:A7:A6:F0:9C:74:F0:9E:78:69:1A:60
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/11D151C8BDE011EAAEA46554C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.92.0/22
103.139.66.0/23
103.164.26.0/23
IPv6:
2001:df1:a780::/48
Signature Algorithm: sha256WithRSAEncryption
59:ed:d7:a2:d8:78:4e:f3:2b:82:1e:c6:53:0e:fc:84:71:93:
81:fa:b7:69:ad:a3:06:bd:7f:7b:a2:84:ce:10:d6:67:03:a7:
ed:67:a4:41:4e:ca:67:18:29:76:bc:e7:a1:e1:74:57:ec:ec:
52:6b:77:5c:d4:06:e4:57:6d:92:f3:82:88:57:d2:47:6d:3e:
7b:96:97:01:b7:00:25:17:38:20:e2:43:be:88:b7:71:b3:dd:
63:05:38:86:10:f8:ab:26:43:2b:67:47:f3:87:55:f6:c7:8b:
6b:02:1e:06:76:56:d7:62:fb:dd:24:d3:3a:84:6d:66:31:51:
43:33:ad:1a:e5:ee:92:dc:b7:bc:92:16:4f:97:2b:2f:e4:05:
cd:53:b4:e0:26:cf:87:ca:76:82:a6:4a:91:4e:e0:e7:62:c6:
2f:26:f6:1b:0f:cc:57:c3:75:37:be:06:67:8f:d6:af:b5:7b:
d6:09:1a:4d:89:f8:07:0e:b1:8b:a4:f5:9c:55:7f:99:c5:3c:
28:59:6a:6b:1d:15:05:68:d9:e4:d3:14:b5:2b:2c:37:a5:0a:
07:8e:34:0c:d3:ef:ff:e9:4f:2a:b8:33:61:46:16:12:c9:e7:
16:9a:af:0b:96:1a:bc:a5:c0:ce:a6:cc:97:93:d4:ff:81:19:
b7:c1:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 13:25:24 2025 by rpki-client