Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/D5C64638770411EAB2697F2EC4F9AE02.roa
File: D5C64638770411EAB2697F2EC4F9AE02.roa (raw, json)
Hash identifier: y41EDIOGEWLuS42TVMwSxYVxrdzN1ync8vvhk/4GjrE=
Subject key identifier: 48:41:26:40:C8:E0:1F:F3:55:AA:33:2F:31:A0:E0:DA:A2:91:C6:AB
Certificate issuer: /CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587
Certificate serial: 043D
Authority key identifier: 8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/D5C64638770411EAB2697F2EC4F9AE02.roa
Signing time: Fri 21 May 2021 22:15:58 +0000
ROA not before: Fri 21 May 2021 22:15:58 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 140502
IP address blocks: 103.150.6.0/23 maxlen: 23
103.150.6.0/24 maxlen: 24
103.150.7.0/24 maxlen: 24
2001:df3:4c80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1085 (0x43d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911B7EB/serialNumber=8CF6F26283E0943E17D412B19CA2AF2CD60D4587
Validity
Not Before: May 21 22:15:58 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60a8311e-5e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:49:a5:05:5d:c4:bf:e0:68:ed:82:1d:39:63:
7f:83:95:bf:63:74:8d:57:11:c7:9e:a3:10:6a:e8:
de:ac:a1:e1:7d:f2:35:a3:47:d9:4e:20:a8:cf:9f:
ab:84:d9:e7:86:94:e3:cb:c4:68:20:0d:69:2a:fa:
a2:19:b6:a2:93:9c:62:22:9c:c4:f8:60:e2:f5:7a:
d9:25:3f:b7:1c:1f:a0:06:a8:f9:0f:38:e0:88:eb:
77:39:bf:07:d7:e9:ca:d2:3e:22:8e:3f:34:bc:45:
c2:f2:d9:9f:87:13:d3:68:ce:c6:4f:0c:e8:04:3d:
e8:dc:b3:53:6b:6c:b4:61:70:a7:92:0d:ac:b3:9d:
52:7e:c8:ef:74:e6:3e:49:f8:25:62:33:02:d8:5d:
3f:60:80:f8:f4:cc:cc:c0:76:f0:dd:c7:4a:a9:e7:
ab:9d:e1:6e:69:a7:7f:78:4f:7b:72:94:76:ea:51:
6f:61:08:68:ac:76:2b:2e:d5:52:7b:ca:3e:f4:7f:
ab:21:10:c0:4c:d6:3e:25:28:f5:66:54:a8:fc:0e:
95:40:3a:7d:01:0d:9b:e1:cb:15:b1:48:b0:f9:72:
01:ac:4b:d3:6b:38:49:64:3f:f4:72:c6:86:61:f3:
a7:9b:94:23:a1:08:82:89:ba:5c:2e:bf:6e:0f:6c:
55:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:41:26:40:C8:E0:1F:F3:55:AA:33:2F:31:A0:E0:DA:A2:91:C6:AB
X509v3 Authority Key Identifier:
keyid:8C:F6:F2:62:83:E0:94:3E:17:D4:12:B1:9C:A2:AF:2C:D6:0D:45:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/jPbyYoPglD4X1BKxnKKvLNYNRYc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jPbyYoPglD4X1BKxnKKvLNYNRYc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B7EB/791F4E7673E311EABA7A886EC4F9AE02/D5C64638770411EAB2697F2EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.150.6.0/23
IPv6:
2001:df3:4c80::/48
Signature Algorithm: sha256WithRSAEncryption
38:5e:e4:fd:29:77:21:08:fc:c5:f5:7f:0a:9e:56:e7:4a:94:
7b:ca:62:be:5d:0d:02:83:bb:9b:28:81:a6:ac:7a:26:24:80:
42:b3:ac:9c:7a:c7:01:33:c9:fe:19:0c:6e:89:3c:c0:7e:4b:
4b:81:3d:8e:79:29:e1:58:b0:6c:cf:70:bb:6c:40:33:80:5d:
44:2f:11:ed:0f:cd:07:5d:87:b9:ba:09:f1:a9:f0:29:c1:de:
e0:64:45:71:a7:9e:9c:e1:ba:7a:0f:56:80:c4:bc:c9:c1:1d:
ff:99:db:31:a4:2e:50:75:c9:11:3d:bb:dc:c9:8b:02:6a:82:
8f:73:86:9a:a6:46:f7:40:ea:5d:0e:88:84:96:5f:f5:e9:5a:
15:b9:97:36:c2:8f:a9:d6:e6:45:ea:6e:70:3c:0a:40:8a:05:
9f:d3:b5:5d:0d:41:18:06:92:1c:1c:df:b5:0d:fc:4d:5f:f0:
b3:b2:fd:38:e1:3d:49:ac:dd:32:9a:a1:85:6b:ab:30:77:eb:
23:4f:86:bf:3e:bb:54:48:9f:8b:3a:e9:f8:d3:c8:3f:f6:da:
ea:81:90:e2:d8:59:f6:de:76:d0:35:70:cd:99:55:51:dc:ad:
6d:42:e0:7e:7f:08:a0:e4:5d:01:6a:5b:6e:e7:7d:8b:0e:23:
2b:b4:49:da
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI3RUIxMTAvBgNVBAUTKDhDRjZGMjYyODNFMDk0M0UxN0Q0MTJCMTlDQTJBRjJD
RDYwRDQ1ODcwHhcNMjEwNTIxMjIxNTU4WhcNMjIwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MGE4MzExZS01ZTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlEmlBV3Ev+Bo7YIdOWN/g5W/Y3SNVxHHnqMQaujerKHhffI1o0fZTiCoz5+r
hNnnhpTjy8RoIA1pKvqiGbaik5xiIpzE+GDi9XrZJT+3HB+gBqj5DzjgiOt3Ob8H
1+nK0j4ijj80vEXC8tmfhxPTaM7GTwzoBD3o3LNTa2y0YXCnkg2ss51SfsjvdOY+
SfglYjMC2F0/YID49MzMwHbw3cdKqeerneFuaad/eE97cpR26lFvYQhorHYrLtVS
e8o+9H+rIRDATNY+JSj1ZlSo/A6VQDp9AQ2b4csVsUiw+XIBrEvTazhJZD/0csaG
YfOnm5QjoQiCibpcLr9uD2xV1QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEhBJkDI
4B/zVaozLzGg4NqikcarMB8GA1UdIwQYMBaAFIz28mKD4JQ+F9QSsZyiryzWDUWH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjdFQi83OTFGNEU3Njcz
RTMxMUVBQkE3QTg4NkVDNEY5QUUwMi9qUGJ5WW9QZ2xENFgxQkt4bktLdkxOWU5S
WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pQYnlZb1BnbEQ0WDFCS3huS0t2TE5ZTlJZYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUI3RUIvNzkxRjRFNzY3M0UzMTFFQUJBN0E4ODZFQzRGOUFFMDIvRDVDNjQ2Mzg3
NzA0MTFFQUIyNjk3RjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBAFnlgYwDwQCAAIwCQMHACABDfNMgDANBgkqhkiG9w0BAQsF
AAOCAQEAOF7k/Sl3IQj8xfV/Cp5W50qUe8pivl0NAoO7myiBpqx6JiSAQrOsnHrH
ATPJ/hkMbok8wH5LS4E9jnkp4ViwbM9wu2xAM4BdRC8R7Q/NB12HuboJ8anwKcHe
4GRFcaeenOG6eg9WgMS8ycEd/5nbMaQuUHXJET273MmLAmqCj3OGmqZG90DqXQ6I
hJZf9elaFbmXNsKPqdbmRepucDwKQIoFn9O1XQ1BGAaSHBzftQ38TV/ws7L9OOE9
SazdMpqhhWurMHfrI0+Gvz67VEifizrp+NPIP/ba6oGQ4thZ9t520DVwzZlVUdyt
bULgfn8IoORdAWpbbud9iw4jK7RJ2g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-ams.rpki-client.org