Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/9C2E3D8E4E5F11ECA170BC69C4F9AE02.roa
File: 9C2E3D8E4E5F11ECA170BC69C4F9AE02.roa (raw, json)
Hash identifier: niFVmQeRtM9bmnTo0GJaObHhL1/VHQ9Qz20OlXqpd44=
Subject key identifier: AA:FD:A5:CD:C4:0F:51:2A:11:5B:87:F9:CE:1F:65:F0:01:DD:00:45
Certificate issuer: /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial: 04
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/9C2E3D8E4E5F11ECA170BC69C4F9AE02.roa
Signing time: Fri 26 Nov 2021 02:21:49 +0000
ROA not before: Fri 26 Nov 2021 02:21:49 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 141677
IP address blocks: 103.177.44.0/24 maxlen: 24
103.177.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Validity
Not Before: Nov 26 02:21:49 2021 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61a044bd-4660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:50:cd:60:82:15:77:df:ba:01:3a:08:26:
ed:6d:69:68:87:ef:f7:2e:1b:84:13:d8:b6:e6:41:
ec:e1:eb:80:fc:4f:96:db:f4:c8:e1:5b:55:83:1f:
25:02:8a:f5:e8:ac:44:e6:66:c2:25:66:9a:dd:4a:
75:b2:3b:95:c0:74:ac:07:4f:f4:96:63:f8:0e:77:
3b:f1:76:5c:2a:57:5e:94:1c:51:db:61:74:c7:c2:
43:16:37:cd:92:d3:93:36:1e:27:2f:dc:2c:18:5f:
5b:52:1e:b5:36:10:f6:9e:cd:eb:47:a9:ae:72:2c:
b1:50:6e:f0:b0:bc:cc:12:56:21:33:99:20:f0:25:
33:86:df:dd:d6:0b:37:e2:61:90:e5:5a:f9:37:07:
2e:75:e9:d3:8a:ab:b3:8d:13:01:b6:7d:fd:51:69:
b4:0b:af:ab:3b:70:8a:18:2f:ac:7d:e1:01:24:a1:
36:da:2d:1f:ff:27:64:ea:2c:14:e0:0b:64:63:c7:
70:ae:3b:13:76:0a:7d:1b:10:82:eb:32:f1:c7:78:
17:20:37:84:1d:4d:1a:92:3d:88:63:c7:37:0e:05:
e4:22:27:1b:44:0a:e2:ba:8c:bf:2e:86:eb:6d:81:
38:a2:8c:f3:0d:3f:d4:c2:3a:c4:3e:21:ca:2c:88:
e8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FD:A5:CD:C4:0F:51:2A:11:5B:87:F9:CE:1F:65:F0:01:DD:00:45
X509v3 Authority Key Identifier:
keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/9C2E3D8E4E5F11ECA170BC69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.44.0/23
Signature Algorithm: sha256WithRSAEncryption
88:33:fe:d8:c8:32:f5:68:a2:e2:2b:f2:ee:b6:40:1a:77:f8:
a1:f9:79:57:be:99:b0:4e:aa:d9:10:ba:4a:60:68:a8:3f:91:
37:cf:6d:c2:42:88:6b:5c:4b:ec:a0:35:4e:8c:17:c8:37:c3:
15:c0:cd:71:8a:bc:79:d9:22:82:b7:24:43:d6:f7:9e:42:ad:
fb:7d:dd:02:22:29:1f:c4:b9:c9:28:ec:e0:e9:fe:96:18:57:
71:cf:5a:65:33:d2:3c:d1:60:e5:00:a1:06:e4:44:8f:cf:18:
35:b1:49:9c:7c:92:8c:67:ff:6f:7a:96:82:81:93:81:b8:29:
98:37:03:19:9e:1d:51:58:9e:78:05:d5:b4:3c:8c:e8:e7:59:
07:2f:ac:8a:40:b0:3e:96:7f:c6:bd:39:f3:6e:10:ba:41:97:
61:e4:35:a4:6b:d6:a5:0e:be:bb:67:0a:40:3d:31:10:3d:e6:
d6:8e:4e:8e:39:5f:98:a7:21:15:3b:69:d7:45:ff:4a:a5:e6:
29:21:0e:4a:33:d7:e1:15:91:5e:a5:b4:14:b4:e4:7b:db:36:
e6:7d:04:59:e3:ae:69:e5:38:c8:93:b1:70:36:d6:da:ee:ec:
5a:14:76:4a:8a:5c:01:fb:6a:9a:ed:3d:7d:b5:13:5f:b7:74:
f6:6a:28:bf
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MzA2NjExMC8GA1UEBRMoMTFCRTkzNTAwMkYwMjhDMTdDRUZDQjVGMEE1ODY4Mzk5
MjVCNTM0QTAeFw0yMTExMjYwMjIxNDlaFw0yMzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTYxYTA0NGJkLTQ2NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUx1DNYIIVd9+6AToIJu1taWiH7/cuG4QT2LbmQezh64D8T5bb9MjhW1WDHyUC
ivXorETmZsIlZprdSnWyO5XAdKwHT/SWY/gOdzvxdlwqV16UHFHbYXTHwkMWN82S
05M2Hicv3CwYX1tSHrU2EPaezetHqa5yLLFQbvCwvMwSViEzmSDwJTOG393WCzfi
YZDlWvk3By516dOKq7ONEwG2ff1RabQLr6s7cIoYL6x94QEkoTbaLR//J2TqLBTg
C2Rjx3CuOxN2Cn0bEILrMvHHeBcgN4QdTRqSPYhjxzcOBeQiJxtECuK6jL8uhutt
gTiijPMNP9TCOsQ+IcosiOjlAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUqv2lzcQP
USoRW4f5zh9l8AHdAEUwHwYDVR0jBBgwFoAUEb6TUALwKMF878tfClhoOZJbU0ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEzMDY2LzY3ODJFMkRBNEUz
RjExRUNBMkI1MkIzMUM0RjlBRTAyL0ViNlRVQUx3S01GODc4dGZDbGhvT1pKYlUw
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRWI2VFVBTHdLTUY4Nzh0ZkNsaG9PWkpiVTBvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzA2Ni82NzgyRTJEQTRFM0YxMUVDQTJCNTJCMzFDNEY5QUUwMi85QzJFM0Q4RTRF
NUYxMUVDQTE3MEJDNjlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWexLDANBgkqhkiG9w0BAQsFAAOCAQEAiDP+2Mgy9Wii4ivy
7rZAGnf4ofl5V76ZsE6q2RC6SmBoqD+RN89twkKIa1xL7KA1TowXyDfDFcDNcYq8
edkigrckQ9b3nkKt+33dAiIpH8S5ySjs4On+lhhXcc9aZTPSPNFg5QChBuREj88Y
NbFJnHySjGf/b3qWgoGTgbgpmDcDGZ4dUVieeAXVtDyM6OdZBy+sikCwPpZ/xr05
824QukGXYeQ1pGvWpQ6+u2cKQD0xED3m1o5OjjlfmKchFTtp10X/SqXmKSEOSjPX
4RWRXqW0FLTke9s25n0EWeOuaeU4yJOxcDbW2u7sWhR2SopcAftqmu09fbUTX7d0
9moovw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org