Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/62E7F898AD1411ED8A4E3620C4F9AE02.roa
File: 62E7F898AD1411ED8A4E3620C4F9AE02.roa (raw, json)
Hash identifier: L9pqGPtsdthKm70UJzoUdKJiBaQtEIZmqAEbwjMbyiU=
Subject key identifier: FE:6D:3F:6E:0D:B4:61:88:48:8D:75:3E:C9:63:BD:CE:A4:CF:2F:3A
Certificate issuer: /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
Certificate serial: 0A
Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/62E7F898AD1411ED8A4E3620C4F9AE02.roa
Signing time: Tue 28 Feb 2023 18:36:07 +0000
ROA not before: Tue 28 Feb 2023 18:36:07 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 141393
IP address blocks: 103.84.58.0/23 maxlen: 23
103.84.58.0/24 maxlen: 24
103.84.59.0/24 maxlen: 24
2001:df1:f040::/48 maxlen: 56
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10 (0xa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
Validity
Not Before: Feb 28 18:36:07 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=63fe4997-8816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:69:4e:f7:66:0c:31:5b:f0:ed:c9:23:70:
f4:6d:08:f2:1d:1d:84:db:21:75:24:01:a8:f6:e7:
e6:67:d4:49:3f:ed:d7:a6:fc:0b:ae:26:f8:7d:ee:
77:35:c8:27:39:e3:c8:e7:29:9e:18:88:dd:1b:3c:
e8:67:ed:74:f9:08:0f:3e:94:be:b5:cb:a2:5e:64:
97:ea:a8:2d:c0:f2:6f:14:e5:dd:dc:ec:27:a4:05:
13:d8:d2:86:69:a2:06:a4:ee:11:f0:e4:0d:16:6f:
17:19:7a:3b:b5:7b:02:de:65:85:7e:a6:88:a1:24:
e0:fd:81:33:d6:e4:70:10:7b:1a:86:35:7b:0e:21:
58:1d:cc:56:38:d7:c9:8e:24:3c:cd:43:c5:60:94:
da:9a:dc:c9:88:03:c1:ea:da:b4:f6:71:14:e5:ee:
ee:96:60:a3:2f:d9:70:42:83:dc:d2:37:ec:48:49:
0c:25:dd:8b:84:ee:76:19:89:5e:04:98:02:8c:6f:
75:88:a6:ba:94:1c:53:6e:3d:02:4c:c1:ae:e0:65:
dd:fd:a5:48:1c:df:3c:80:d9:eb:ba:4b:ad:cf:b7:
df:8c:71:d1:02:1f:c7:9b:da:8f:34:d3:1d:a4:22:
69:9f:cb:06:0f:f9:eb:8a:77:f3:1c:99:6b:91:3d:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6D:3F:6E:0D:B4:61:88:48:8D:75:3E:C9:63:BD:CE:A4:CF:2F:3A
X509v3 Authority Key Identifier:
keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/62E7F898AD1411ED8A4E3620C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.84.58.0/23
IPv6:
2001:df1:f040::/48
Signature Algorithm: sha256WithRSAEncryption
70:fd:13:a2:45:8c:48:a9:60:43:11:b7:34:06:e6:0e:3f:f1:
b6:75:5d:a6:8d:27:88:fc:a5:13:9a:03:b0:4e:aa:a2:d8:7d:
97:56:74:8d:2c:62:da:d1:6f:b7:62:1d:dd:c7:32:29:d9:77:
13:49:f1:37:6a:36:df:ca:19:08:ab:bd:65:6a:21:46:f2:47:
60:f3:e3:77:91:1a:f6:05:5f:ac:0d:b2:72:5f:55:32:b8:c8:
4b:40:fb:7c:c9:5f:1c:a9:47:01:e1:ff:61:68:6c:67:77:62:
18:26:93:dc:4a:58:44:79:b1:c1:6c:cc:15:0f:2a:88:2d:85:
08:12:32:bf:ac:92:7c:68:a5:43:53:e4:ef:95:b5:20:f8:74:
f4:6f:4d:e2:e8:be:cd:ed:f3:cf:21:b6:90:7d:d9:c7:1c:43:
ce:ce:05:2e:62:28:72:e6:59:8c:de:ed:63:79:a1:f3:9c:c0:
b4:4f:52:57:83:b9:08:09:6d:6f:68:db:5e:81:cd:64:f5:ef:
ff:64:4a:02:b5:43:d3:6d:77:7d:57:71:0c:cd:74:61:5f:64:
61:2f:16:e4:63:5e:ae:95:bb:18:cd:0c:0d:d2:a2:22:c2:f3:
60:ef:9f:a1:44:1a:03:94:ef:d4:a9:07:34:38:6d:00:30:d6:
7d:af:aa:07
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
QjMxMDExMC8GA1UEBRMoRTMxNjY3OTYwNDgwQ0YwN0UzQzIyRDc5MERFNEUyMDFF
RjcwNDBEQjAeFw0yMzAyMjgxODM2MDdaFw0yNDA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYzZmU0OTk3LTg4MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCt32lO92YMMVvw7ckjcPRtCPIdHYTbIXUkAaj25+Zn1Ek/7dem/AuuJvh97nc1
yCc548jnKZ4YiN0bPOhn7XT5CA8+lL61y6JeZJfqqC3A8m8U5d3c7CekBRPY0oZp
ogak7hHw5A0WbxcZeju1ewLeZYV+poihJOD9gTPW5HAQexqGNXsOIVgdzFY418mO
JDzNQ8VglNqa3MmIA8Hq2rT2cRTl7u6WYKMv2XBCg9zSN+xISQwl3YuE7nYZiV4E
mAKMb3WIprqUHFNuPQJMwa7gZd39pUgc3zyA2eu6S63Pt9+McdECH8eb2o800x2k
ImmfywYP+euKd/McmWuRPWjfAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU/m0/bg20
YYhIjXU+yWO9zqTPLzowHwYDVR0jBBgwFoAU4xZnlgSAzwfjwi15DeTiAe9wQNsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCMzEwLzNFQkQxN0MyQUQx
MDExRUQ4NTRBM0UxREM0RjlBRTAyLzR4Wm5sZ1NBendmandpMTVEZVRpQWU5d1FO
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNHhabmxnU0F6d2Zqd2kxNURlVGlBZTl3UU5zLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjMxMC8zRUJEMTdDMkFEMTAxMUVEODU0QTNFMURDNEY5QUUwMi82MkU3Rjg5OEFE
MTQxMUVEOEE0RTM2MjBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAWdUOjAPBAIAAjAJAwcAIAEN8fBAMA0GCSqGSIb3DQEBCwUA
A4IBAQBw/ROiRYxIqWBDEbc0BuYOP/G2dV2mjSeI/KUTmgOwTqqi2H2XVnSNLGLa
0W+3Yh3dxzIp2XcTSfE3ajbfyhkIq71laiFG8kdg8+N3kRr2BV+sDbJyX1UyuMhL
QPt8yV8cqUcB4f9haGxnd2IYJpPcSlhEebHBbMwVDyqILYUIEjK/rJJ8aKVDU+Tv
lbUg+HT0b03i6L7N7fPPIbaQfdnHHEPOzgUuYihy5lmM3u1jeaHznMC0T1JXg7kI
CW1vaNtegc1k9e//ZEoCtUPTbXd9V3EMzXRhX2RhLxbkY16ulbsYzQwN0qIiwvNg
75+hRBoDlO/UqQc0OG0AMNZ9r6oH
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-ams.rpki-client.org