Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED29CE309E6011EE80DCD23CC4F9AE02.roa
File: ED29CE309E6011EE80DCD23CC4F9AE02.roa (raw, json)
Hash identifier: PGqhTzCKpOPmHYh2h5EHedoSh1yH6irKVwWAtGrmGWM=
Subject key identifier: 17:BB:B7:1D:51:6E:2F:BB:53:DB:BE:25:19:27:A1:6B:E8:D0:BE:FB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 8032
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED29CE309E6011EE80DCD23CC4F9AE02.roa
Signing time: Tue 19 Dec 2023 11:27:05 +0000
ROA not before: Tue 19 Dec 2023 11:27:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151712
IP address blocks: 43.248.58.0/23 maxlen: 24
103.194.156.0/22 maxlen: 24
2001:df3:1ac0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 32818 (0x8032)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Dec 19 11:27:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65817e09-0556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:76:23:9c:db:35:d4:b4:f7:5f:2c:4a:e5:
2c:86:67:10:16:70:75:62:f3:fc:89:38:68:c3:bc:
e8:17:2d:76:61:21:cd:ee:9b:9f:4d:0b:b5:de:e7:
b7:34:79:c9:97:2b:88:dd:59:a2:6e:3c:28:a4:4d:
46:3f:f8:6c:37:e3:15:d4:76:4f:99:e0:85:81:23:
5a:17:ae:4a:9d:b9:ee:54:64:56:42:df:ed:c9:82:
d4:68:8a:d7:9d:be:c4:90:d0:9d:77:6c:ff:a6:f0:
36:33:ab:3a:58:82:68:d8:f4:7a:c9:6d:c4:67:bf:
9f:14:fb:be:5c:a9:e4:da:37:fc:86:d5:a0:6d:44:
26:bd:df:36:96:85:f0:92:79:5a:51:55:a8:56:ed:
39:e6:9c:b0:84:dc:1f:2f:53:74:7d:05:2e:25:24:
11:b3:10:f9:9d:ce:d5:d9:83:85:27:30:79:66:fd:
99:f1:c3:bd:ee:31:a5:82:63:00:91:03:14:4f:51:
d5:88:ec:88:7e:63:20:88:b2:1f:cf:3e:74:3d:53:
7b:c3:7f:c1:fe:c1:d0:95:e0:27:64:93:b2:33:86:
ac:fa:60:ae:87:50:8b:07:a9:41:fd:5f:fb:df:b5:
44:1d:51:6e:5c:d0:8b:f3:51:a0:2c:07:74:08:5f:
b5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BB:B7:1D:51:6E:2F:BB:53:DB:BE:25:19:27:A1:6B:E8:D0:BE:FB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ED29CE309E6011EE80DCD23CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.248.58.0/23
103.194.156.0/22
IPv6:
2001:df3:1ac0::/48
Signature Algorithm: sha256WithRSAEncryption
7d:23:46:96:33:28:3f:f2:16:58:4c:23:14:2b:37:71:2c:aa:
ad:6d:f0:9b:a2:6a:35:9a:51:6d:df:5f:a4:bb:52:0f:73:54:
20:e6:c4:2a:64:4e:e3:4c:26:63:ce:3b:13:9b:19:02:46:24:
4f:a4:ff:58:d5:2d:8d:da:fe:88:cc:26:69:34:43:dc:9c:5a:
41:51:f4:47:b8:d1:a7:50:a1:c6:09:b2:49:8b:d0:90:40:21:
43:70:cf:44:ee:a5:d4:ba:04:58:cd:ac:ab:c6:bc:0f:42:33:
58:96:b6:65:c4:da:fb:3b:9e:f2:29:aa:0e:82:37:26:d2:7a:
5c:6a:e0:e2:77:98:f4:a5:18:00:e2:48:9a:13:57:83:40:e5:
42:6c:a5:9c:d1:3d:80:9f:25:e1:d1:bd:99:95:63:51:e6:b1:
f2:84:d6:50:d4:68:85:b0:55:4c:6b:d2:63:6d:57:60:a7:f4:
63:0f:d0:ca:dd:d4:4f:0c:9d:44:be:69:2f:0a:b6:f4:7f:a7:
d5:bc:d1:67:0f:62:bc:80:c3:76:41:aa:5f:91:7e:e6:5e:93:
ed:f7:d2:75:c5:e8:e8:b7:e8:cf:ad:09:7c:29:89:c6:44:38:
eb:41:05:09:77:37:cb:39:27:80:ad:3c:97:18:53:4e:42:bf:
7c:e9:dd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:05:07 2025 by rpki-client