Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/DA58144A813111EC988D1151C4F9AE02.roa
File: DA58144A813111EC988D1151C4F9AE02.roa (raw, json)
Hash identifier: O0X3Zb9vQRO7wrnhCl5v4hwW7a4AIcKxUgjJtwbZNco=
Subject key identifier: 7D:63:F8:3E:80:20:0F:80:D5:49:89:25:D4:A8:CF:7E:94:FC:D7:DA
Certificate issuer: /CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Certificate serial: 0D
Authority key identifier: 89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/DA58144A813111EC988D1151C4F9AE02.roa
Signing time: Sat 29 Jan 2022 18:32:46 +0000
ROA not before: Sat 29 Jan 2022 18:32:46 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 149419
IP address blocks: 103.178.216.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13 (0xd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911EA62/serialNumber=89F596110030BDC9B3BAD76CFD05C3124617C952
Validity
Not Before: Jan 29 18:32:46 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61f5884e-6dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e5:e5:f2:74:31:0f:26:2f:59:28:bc:92:f2:
11:80:5d:56:26:c1:c3:57:18:d5:6e:30:da:02:19:
23:41:0a:34:27:40:4c:41:cd:16:53:c1:cb:f2:86:
fc:1c:78:d5:3c:f3:66:a4:79:ce:83:74:4b:d7:b6:
18:57:13:bc:e7:53:6a:4f:e4:1f:59:73:bb:99:bc:
27:f5:93:da:f0:1a:b1:d4:7b:f1:e6:ac:8d:b2:4d:
e0:6a:ef:17:ca:01:74:c4:97:48:56:87:9f:9e:c8:
66:35:46:a9:69:78:32:7d:52:28:33:96:68:e3:8a:
80:29:70:c6:9f:c5:55:a0:c1:2b:8c:63:90:70:15:
76:84:bf:76:f6:99:44:6c:e8:96:bc:f8:34:f0:d2:
62:0d:05:42:c9:dd:af:8a:e6:60:d8:e6:ea:03:1a:
f7:6d:e8:ea:f0:b2:7b:76:6a:93:c6:2b:ed:5d:07:
f1:26:ec:07:a4:74:1d:08:ca:60:6e:29:d2:18:7f:
d7:4e:0d:54:cb:2f:f7:4c:3d:cb:cd:19:e0:e8:d4:
ad:74:8a:b6:4b:4e:b3:28:83:10:bf:6e:88:73:29:
01:d4:a0:19:01:4a:6e:0c:ec:c1:d6:1d:11:82:17:
54:11:1f:e8:83:11:12:49:ef:96:48:46:90:c5:f7:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:63:F8:3E:80:20:0F:80:D5:49:89:25:D4:A8:CF:7E:94:FC:D7:DA
X509v3 Authority Key Identifier:
keyid:89:F5:96:11:00:30:BD:C9:B3:BA:D7:6C:FD:05:C3:12:46:17:C9:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/ifWWEQAwvcmzutds_QXDEkYXyVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ifWWEQAwvcmzutds_QXDEkYXyVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA62/1168211C806C11EC92B51C5AC4F9AE02/DA58144A813111EC988D1151C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.178.216.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:56:64:a2:9d:d4:20:a0:96:9c:48:0f:21:cc:01:35:6b:10:
85:eb:c1:c6:b3:61:30:07:19:fe:bc:4d:fe:df:c5:58:59:75:
a1:36:76:8d:76:c5:48:a1:91:ac:b1:21:f8:85:f2:5b:c8:7f:
a2:1a:2e:66:3a:82:b9:e0:51:47:26:d5:b8:dd:2d:0f:0b:46:
38:dc:0b:8e:fa:20:25:ab:33:0e:88:7f:ea:9d:6e:05:54:01:
c6:1c:60:b5:14:0f:75:6c:84:da:46:a6:71:cf:4f:45:7e:5c:
65:05:15:fe:36:a0:06:35:26:9f:5e:d7:e6:21:d8:a2:a2:d2:
bf:b7:69:6b:7b:22:a2:e0:41:4e:dc:ce:b7:ba:cf:55:53:5d:
7c:67:df:e2:d6:36:7b:96:90:2d:67:2f:07:2b:bb:e3:60:a8:
3b:16:82:95:d4:47:3c:a1:1a:6a:25:27:9b:1f:25:57:fe:1c:
65:87:74:43:7f:f8:1a:78:f4:7b:40:e6:4a:a7:42:eb:03:06:
a8:66:6a:7b:2f:e7:1d:c2:34:52:53:61:45:93:c4:58:2f:64:
42:90:29:30:57:85:a2:43:57:b1:9e:d4:5c:6e:94:f8:51:b7:
b7:14:ed:31:fa:f6:91:e6:c8:4d:51:8b:e6:c2:ea:51:d7:f4:
86:67:6a:e6
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
RUE2MjExMC8GA1UEBRMoODlGNTk2MTEwMDMwQkRDOUIzQkFENzZDRkQwNUMzMTI0
NjE3Qzk1MjAeFw0yMjAxMjkxODMyNDZaFw0yMzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYxZjU4ODRlLTZkZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQ5eXydDEPJi9ZKLyS8hGAXVYmwcNXGNVuMNoCGSNBCjQnQExBzRZTwcvyhvwc
eNU882akec6DdEvXthhXE7znU2pP5B9Zc7uZvCf1k9rwGrHUe/HmrI2yTeBq7xfK
AXTEl0hWh5+eyGY1RqlpeDJ9UigzlmjjioApcMafxVWgwSuMY5BwFXaEv3b2mURs
6Ja8+DTw0mINBULJ3a+K5mDY5uoDGvdt6Orwsnt2apPGK+1dB/Em7AekdB0IymBu
KdIYf9dODVTLL/dMPcvNGeDo1K10irZLTrMogxC/bohzKQHUoBkBSm4M7MHWHRGC
F1QRH+iDERJJ75ZIRpDF98iRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUfWP4PoAg
D4DVSYkl1KjPfpT819owHwYDVR0jBBgwFoAUifWWEQAwvcmzutds/QXDEkYXyVIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFQTYyLzExNjgyMTFDODA2
QzExRUM5MkI1MUM1QUM0RjlBRTAyL2lmV1dFUUF3dmNtenV0ZHNfUVhERWtZWHlW
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaWZXV0VRQXd2Y216dXRkc19RWERFa1lYeVZJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RUE2Mi8xMTY4MjExQzgwNkMxMUVDOTJCNTFDNUFDNEY5QUUwMi9EQTU4MTQ0QTgx
MzExMUVDOTg4RDExNTFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWey2DANBgkqhkiG9w0BAQsFAAOCAQEADVZkop3UIKCWnEgP
IcwBNWsQhevBxrNhMAcZ/rxN/t/FWFl1oTZ2jXbFSKGRrLEh+IXyW8h/ohouZjqC
ueBRRybVuN0tDwtGONwLjvogJaszDoh/6p1uBVQBxhxgtRQPdWyE2kamcc9PRX5c
ZQUV/jagBjUmn17X5iHYoqLSv7dpa3siouBBTtzOt7rPVVNdfGff4tY2e5aQLWcv
Byu742CoOxaCldRHPKEaaiUnmx8lV/4cZYd0Q3/4Gnj0e0DmSqdC6wMGqGZqey/n
HcI0UlNhRZPEWC9kQpApMFeFokNXsZ7UXG6U+FG3txTtMfr2kebITVGL5sLqUdf0
hmdq5g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:47 2024 by rpki-client on console-ams.rpki-client.org