Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/838FF1720E9711EB9A6C2B3CC4F9AE02.roa
File: 838FF1720E9711EB9A6C2B3CC4F9AE02.roa (raw, json)
Hash identifier: tNSguQUh8sNUgbAKZpvSsVvscBcO/TE7me7lFAl/mPg=
Subject key identifier: BD:22:AC:D0:19:9B:C1:07:C7:32:F3:C9:E0:1A:CC:02:D9:49:C8:53
Certificate issuer: /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial: 0480
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/838FF1720E9711EB9A6C2B3CC4F9AE02.roa
Signing time: Wed 04 May 2022 12:10:33 +0000
ROA not before: Wed 04 May 2022 12:10:33 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 135162
IP address blocks: 202.92.140.0/24 maxlen: 24
202.92.141.0/24 maxlen: 24
2400:b000:1000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1152 (0x480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Validity
Not Before: May 4 12:10:33 2022 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=62726d38-a9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:88:a5:92:d9:d2:0b:70:21:36:80:4e:02:
10:10:13:05:02:48:e6:36:a6:29:af:bd:8d:e0:54:
84:be:77:ee:dd:f2:7a:60:0b:a5:ab:f1:9d:e8:0c:
48:59:40:f8:e1:96:19:14:8a:4d:ad:c9:90:cf:4d:
f5:3d:c8:42:4b:e1:6f:3d:6d:f3:50:a9:79:bf:66:
6d:3f:0d:b8:ab:25:8e:fd:f9:2b:bb:f8:f6:68:7f:
2f:9a:46:6f:cb:45:85:8e:5d:d8:98:a6:60:68:d6:
0e:82:92:5f:cd:4b:77:96:1e:21:6b:7a:47:3c:31:
61:f9:98:c4:ce:5e:a6:22:c1:50:49:2a:72:44:d2:
20:fb:e6:9d:9a:4f:46:5f:50:76:ff:1f:e3:bc:72:
41:d5:26:4b:ea:e8:fa:bf:eb:64:88:59:5e:57:3e:
a1:f4:bb:bc:f3:fb:14:69:70:df:05:ed:f9:a2:d5:
0d:dc:1d:7e:c3:65:65:ee:85:d5:e5:ce:ac:6f:da:
f4:c2:d9:08:4f:0a:85:ce:1b:7a:28:86:25:41:23:
b7:3f:25:73:65:0c:27:77:be:45:6b:70:28:d3:52:
ee:a7:de:25:01:26:aa:ca:06:3a:44:2a:4b:f8:cb:
2b:0e:ab:39:86:c8:97:d0:c6:85:1c:d4:43:72:f8:
97:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:22:AC:D0:19:9B:C1:07:C7:32:F3:C9:E0:1A:CC:02:D9:49:C8:53
X509v3 Authority Key Identifier:
keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/838FF1720E9711EB9A6C2B3CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.92.140.0/23
IPv6:
2400:b000:1000::/48
Signature Algorithm: sha256WithRSAEncryption
58:32:05:8b:39:43:96:72:9a:fe:c1:75:97:16:4c:5f:ee:8f:
d2:66:08:9a:8e:2f:02:13:7f:fd:ae:36:9f:85:49:a0:28:23:
0b:72:77:63:78:58:16:7a:c7:78:a6:76:e1:a7:ad:22:d3:5c:
1c:ab:1f:d5:15:00:92:f4:9c:72:00:fa:c3:85:3d:8b:27:90:
58:d9:65:b6:28:b8:39:9a:93:5d:da:0c:81:97:38:8f:dd:b3:
06:89:d8:f7:a3:db:fc:15:b5:e0:02:8d:25:9a:b7:58:b6:e0:
79:b1:bf:9c:cf:e2:2e:9a:14:b3:a5:a4:ca:19:96:01:a9:4d:
7d:74:70:11:be:85:4b:8e:26:3b:a0:c9:a7:48:70:7b:70:cc:
30:fe:e5:35:f4:a1:c6:7e:7c:d4:13:15:3f:aa:1e:83:39:16:
21:bf:98:b1:27:a4:27:d6:57:b9:f8:e3:be:ea:aa:c1:ee:66:
ba:7d:45:fb:4c:dd:e0:81:f8:1e:76:e8:cb:87:97:b7:6a:5e:
d4:7e:c9:79:bd:ef:23:b1:c8:9a:3c:4a:65:79:2c:c8:ba:af:
50:48:1c:d2:0a:81:0b:ee:b3:48:da:c5:d5:7b:71:d7:81:de:
a2:8a:2a:30:e1:79:4c:3a:ee:cf:67:e2:42:95:e0:d0:56:18:
6b:d1:45:c4
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTA3MTgxMTAvBgNVBAUTKDc2MTc0NjI1RTgxNjMyRDM4REY2MkE4M0I1N0IwM0JB
Mjg4N0U2RjUwHhcNMjIwNTA0MTIxMDMzWhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjcyNmQzOC1hOWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwiSIpZLZ0gtwITaATgIQEBMFAkjmNqYpr72N4FSEvnfu3fJ6YAulq/Gd6AxI
WUD44ZYZFIpNrcmQz031PchCS+FvPW3zUKl5v2ZtPw24qyWO/fkru/j2aH8vmkZv
y0WFjl3YmKZgaNYOgpJfzUt3lh4ha3pHPDFh+ZjEzl6mIsFQSSpyRNIg++admk9G
X1B2/x/jvHJB1SZL6uj6v+tkiFleVz6h9Lu88/sUaXDfBe35otUN3B1+w2Vl7oXV
5c6sb9r0wtkITwqFzht6KIYlQSO3PyVzZQwnd75Fa3Ao01Lup94lASaqygY6RCpL
+MsrDqs5hsiX0MaFHNRDcviXfQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFL0irNAZ
m8EHxzLzyeAazALZSchTMB8GA1UdIwQYMBaAFHYXRiXoFjLTjfYqg7V7A7ooh+b1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDcxOC85MjgzRURFRTBF
OTQxMUVCOTY2OUUxMzNDNEY5QUUwMi9kaGRHSmVnV010T045aXFEdFhzRHVpaUg1
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RoZEdKZWdXTXRPTjlpcUR0WHNEdWlpSDV2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTA3MTgvOTI4M0VERUUwRTk0MTFFQjk2NjlFMTMzQzRGOUFFMDIvODM4RkYxNzIw
RTk3MTFFQjlBNkMyQjNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAHKXIwwDwQCAAIwCQMHACQAsAAQADANBgkqhkiG9w0BAQsF
AAOCAQEAWDIFizlDlnKa/sF1lxZMX+6P0mYImo4vAhN//a42n4VJoCgjC3J3Y3hY
FnrHeKZ24aetItNcHKsf1RUAkvSccgD6w4U9iyeQWNlltii4OZqTXdoMgZc4j92z
BonY96Pb/BW14AKNJZq3WLbgebG/nM/iLpoUs6WkyhmWAalNfXRwEb6FS44mO6DJ
p0hwe3DMMP7lNfShxn581BMVP6oegzkWIb+YsSekJ9ZXufjjvuqqwe5mun1F+0zd
4IH4Hnboy4eXt2pe1H7Jeb3vI7HImjxKZXksyLqvUEgc0gqBC+6zSNrF1Xtx14He
oooqMOF5TDruz2fiQpXg0FYYa9FFxA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org