Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/4E346C189D6211ED93AEBC52C4F9AE02.roa
File: 4E346C189D6211ED93AEBC52C4F9AE02.roa (raw, json)
Hash identifier: 3uyDprPdVRC4y0ArLp8qeFMpzXaNkmzMmfHSm4vt9oY=
Subject key identifier: AA:C3:4E:30:A9:0B:0C:1A:B4:7A:44:57:A0:F1:37:60:EE:06:39:4B
Certificate issuer: /CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Certificate serial: 0B
Authority key identifier: C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/4E346C189D6211ED93AEBC52C4F9AE02.roa
Signing time: Thu 26 Jan 2023 10:15:07 +0000
ROA not before: Thu 26 Jan 2023 10:15:07 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 147176
IP address blocks: 103.38.250.0/24 maxlen: 24
103.38.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11 (0xb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9111D36/serialNumber=C0AEF625AF9D504AE847F6923DA891069C9003F4
Validity
Not Before: Jan 26 10:15:07 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=63d252aa-2cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a6:db:ad:ad:ef:4a:aa:b0:9a:7a:3f:74:5a:
27:b0:e6:7b:09:59:64:ee:a9:8a:97:a4:a8:8e:90:
67:e9:19:6c:54:40:c1:a9:28:6f:f7:20:f1:89:13:
99:10:f4:e1:87:9c:0f:f9:1b:0d:f0:87:5d:5f:99:
02:42:16:d8:02:cd:f4:63:e3:83:07:e0:42:be:61:
1b:93:76:78:f9:c4:f5:1b:86:7e:f2:8f:9d:8c:cb:
53:fb:00:cc:75:02:6d:92:00:a9:db:ac:34:8c:e0:
6c:07:42:e1:38:39:58:3b:ff:f8:f3:bb:dd:c1:fe:
65:c5:38:f8:3c:66:9a:12:ba:d7:ea:79:8e:eb:b4:
03:32:5f:6a:98:e6:84:24:90:6a:bf:22:64:ed:32:
69:93:07:88:31:6c:a9:8a:58:d6:ef:f1:55:b5:3b:
94:48:8a:af:b1:61:09:e6:14:42:87:bf:d5:22:92:
c1:b5:f7:46:5c:63:22:af:5c:9c:f8:47:6f:d8:11:
2c:a3:ec:fe:ef:8a:0d:65:9b:11:27:ea:3d:2c:6b:
90:d0:75:b0:99:31:4a:61:d6:3b:55:98:d3:17:e4:
f6:f5:58:7b:c7:40:b3:00:ef:7e:f3:41:d1:33:3a:
c0:83:1c:8d:07:58:74:78:30:69:3c:f5:6d:76:72:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C3:4E:30:A9:0B:0C:1A:B4:7A:44:57:A0:F1:37:60:EE:06:39:4B
X509v3 Authority Key Identifier:
keyid:C0:AE:F6:25:AF:9D:50:4A:E8:47:F6:92:3D:A8:91:06:9C:90:03:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/wK72Ja-dUEroR_aSPaiRBpyQA_Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK72Ja-dUEroR_aSPaiRBpyQA_Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D36/FC13A3E491AA11ED80C17A5EC4F9AE02/4E346C189D6211ED93AEBC52C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.250.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:82:b7:2d:20:6a:c8:0e:ef:12:f8:6c:75:23:1e:6e:f8:25:
9f:9d:23:94:7f:2c:c0:cd:68:f4:8d:ec:ca:7b:10:a6:77:3e:
e5:e3:1c:15:e0:c2:c5:39:30:6b:58:47:23:48:c5:22:61:6a:
1a:31:70:39:bf:51:28:5a:4f:d9:7b:f2:9f:63:cd:03:d5:e2:
fa:ab:6e:69:5f:f9:53:05:96:e0:d5:21:75:7f:a8:e1:66:2a:
85:b4:37:c9:fa:17:54:02:7e:44:a1:24:6b:23:9f:bb:62:56:
dc:03:cc:41:e9:23:08:05:05:cc:bd:81:1d:e9:55:37:d8:98:
e0:ee:ca:b8:39:ac:83:5b:33:aa:94:a5:b5:5e:25:10:c2:0a:
24:99:ae:a7:46:79:6b:6b:95:63:11:d6:48:d7:a3:fb:57:ee:
6a:80:8f:67:69:9f:5a:94:f4:e7:84:e3:60:58:40:aa:b9:11:
ce:97:4b:de:a8:87:02:9e:cf:c3:12:89:aa:df:a1:4b:9a:bd:
d1:0a:21:80:13:36:d9:08:08:3f:64:df:95:bf:73:68:09:06:
13:6b:cf:1d:61:d5:14:84:13:68:26:06:b4:58:ee:de:cb:6b:
96:38:cf:b4:8b:ed:49:6a:45:1e:c3:9a:b4:99:9b:e9:85:7c:
28:e7:57:0d
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MUQzNjExMC8GA1UEBRMoQzBBRUY2MjVBRjlENTA0QUU4NDdGNjkyM0RBODkxMDY5
QzkwMDNGNDAeFw0yMzAxMjYxMDE1MDdaFw0yNDAzMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYzZDI1MmFhLTJjZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDPptutre9KqrCaej90Wiew5nsJWWTuqYqXpKiOkGfpGWxUQMGpKG/3IPGJE5kQ
9OGHnA/5Gw3wh11fmQJCFtgCzfRj44MH4EK+YRuTdnj5xPUbhn7yj52My1P7AMx1
Am2SAKnbrDSM4GwHQuE4OVg7//jzu93B/mXFOPg8ZpoSutfqeY7rtAMyX2qY5oQk
kGq/ImTtMmmTB4gxbKmKWNbv8VW1O5RIiq+xYQnmFEKHv9UiksG190ZcYyKvXJz4
R2/YESyj7P7vig1lmxEn6j0sa5DQdbCZMUph1jtVmNMX5Pb1WHvHQLMA737zQdEz
OsCDHI0HWHR4MGk89W12cgKBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUqsNOMKkL
DBq0ekRXoPE3YO4GOUswHwYDVR0jBBgwFoAUwK72Ja+dUEroR/aSPaiRBpyQA/Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTExRDM2L0ZDMTNBM0U0OTFB
QTExRUQ4MEMxN0E1RUM0RjlBRTAyL3dLNzJKYS1kVUVyb1JfYVNQYWlSQnB5UUFf
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvd0s3MkphLWRVRXJvUl9hU1BhaVJCcHlRQV9RLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MUQzNi9GQzEzQTNFNDkxQUExMUVEODBDMTdBNUVDNEY5QUUwMi80RTM0NkMxODlE
NjIxMUVEOTNBRUJDNTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWcm+jANBgkqhkiG9w0BAQsFAAOCAQEAL4K3LSBqyA7vEvhs
dSMebvgln50jlH8swM1o9I3synsQpnc+5eMcFeDCxTkwa1hHI0jFImFqGjFwOb9R
KFpP2Xvyn2PNA9Xi+qtuaV/5UwWW4NUhdX+o4WYqhbQ3yfoXVAJ+RKEkayOfu2JW
3APMQekjCAUFzL2BHelVN9iY4O7KuDmsg1szqpSltV4lEMIKJJmup0Z5a2uVYxHW
SNej+1fuaoCPZ2mfWpT054TjYFhAqrkRzpdL3qiHAp7PwxKJqt+hS5q90QohgBM2
2QgIP2Tflb9zaAkGE2vPHWHVFIQTaCYGtFju3strljjPtIvtSWpFHsOatJmb6YV8
KOdXDQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:45 2024 by rpki-client on console-ams.rpki-client.org