Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/EAED6DA85CC511ED9870AF10C4F9AE02.roa
File: EAED6DA85CC511ED9870AF10C4F9AE02.roa (raw, json)
Hash identifier: Dr5f2Lu965/eAc6eMtbg+jxi7Vr7xk+mIHJBmPrxKv0=
Subject key identifier: CB:95:99:EF:A1:15:BB:B4:A7:67:B5:ED:FA:87:7F:D3:1F:41:C8:86
Certificate issuer: /CN=A9121AB0/serialNumber=C5E9BE932C0D4E071FB1882CAE25281047732950
Certificate serial: 05
Authority key identifier: C5:E9:BE:93:2C:0D:4E:07:1F:B1:88:2C:AE:25:28:10:47:73:29:50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/EAED6DA85CC511ED9870AF10C4F9AE02.roa
Signing time: Sat 05 Nov 2022 04:54:24 +0000
ROA not before: Sat 05 Nov 2022 04:54:24 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 142032
IP address blocks: 103.158.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9121AB0/serialNumber=C5E9BE932C0D4E071FB1882CAE25281047732950
Validity
Not Before: Nov 5 04:54:24 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=6365ec80-41db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f5:d3:07:b5:85:a4:71:77:84:2f:22:83:e3:
b6:cc:71:34:1a:19:4b:67:95:64:a5:29:dc:c6:24:
cc:c7:3a:94:62:1d:e7:98:76:a8:01:8a:23:56:6b:
36:13:db:6c:9f:02:b1:57:74:d0:b0:69:51:4d:b8:
0a:c7:5d:71:56:bf:d8:3c:7e:bc:70:9b:82:b5:ef:
75:25:7c:63:cf:53:e8:46:b6:11:d0:c2:64:96:d6:
f2:ff:aa:d9:96:e3:0e:59:e7:fb:d5:fa:10:01:7d:
e5:b6:b2:4f:d3:77:eb:65:86:52:b5:56:d5:a5:11:
30:e8:79:a8:33:8f:d3:04:97:e4:46:e2:57:4f:57:
be:fa:e7:58:b5:d8:c9:a5:7c:9b:30:bd:f5:c5:96:
ca:bb:4d:4f:9c:a4:26:12:0c:27:57:63:87:37:21:
15:df:14:ff:48:a2:0b:90:fe:d7:07:0d:b8:2a:bc:
c3:f2:e6:4c:3f:6d:54:49:84:02:8b:ba:57:78:56:
1c:97:58:72:45:98:b3:a8:75:c8:54:5a:d3:cc:be:
06:a5:04:b6:47:9f:af:a1:ca:82:76:91:70:06:9f:
7d:fc:c4:73:d6:e7:7e:56:7a:10:0c:fb:75:d4:be:
97:a0:6b:75:2b:5c:97:bb:cb:a4:9a:3e:b4:ce:d2:
11:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:95:99:EF:A1:15:BB:B4:A7:67:B5:ED:FA:87:7F:D3:1F:41:C8:86
X509v3 Authority Key Identifier:
keyid:C5:E9:BE:93:2C:0D:4E:07:1F:B1:88:2C:AE:25:28:10:47:73:29:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/xem-kywNTgcfsYgsriUoEEdzKVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xem-kywNTgcfsYgsriUoEEdzKVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121AB0/1FF888325CBE11EDB1F0C04CC4F9AE02/EAED6DA85CC511ED9870AF10C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.158.36.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c4:0e:96:6b:b8:5b:60:86:a4:a7:d8:d3:e8:86:24:2e:f6:
b8:ab:b3:fd:c6:5e:b2:7a:53:c1:7c:44:15:5f:ad:af:28:0e:
09:c6:91:e9:82:7a:66:e6:5f:e0:57:5d:6c:0b:7d:15:27:90:
80:6c:90:da:3d:f2:51:51:c8:fd:d9:ec:86:f5:a0:ae:b1:d0:
c2:5b:73:c9:1f:8c:00:a3:7a:3b:26:a1:28:6d:b8:7d:97:ef:
c1:5d:96:14:af:6c:c1:5b:8b:30:0a:96:42:1d:35:04:07:21:
42:4c:f8:ec:43:13:d8:d5:98:0f:2f:e8:09:45:0c:6d:30:e6:
50:7b:0a:2f:0a:69:69:ad:85:1a:74:5e:e2:eb:1b:4d:3b:ef:
8a:56:06:95:5f:8b:61:9f:b6:d9:64:12:5c:85:55:0d:19:92:
56:19:19:91:8f:63:7a:7c:03:9f:0c:c1:02:2a:4a:6e:69:10:
ec:5c:93:23:42:91:fa:d4:8a:f2:cc:d9:fa:8b:4b:34:c2:9a:
69:ba:00:09:31:49:a2:15:88:07:a9:f9:f6:fd:75:89:54:31:
f8:ac:bc:29:61:45:14:2f:84:f1:77:84:e2:42:f9:12:ae:b2:
d3:fe:67:ed:2b:8a:13:0c:d9:98:07:6b:dc:53:8f:85:4e:84:
8c:d9:e9:4b
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
MUFCMDExMC8GA1UEBRMoQzVFOUJFOTMyQzBENEUwNzFGQjE4ODJDQUUyNTI4MTA0
NzczMjk1MDAeFw0yMjExMDUwNDU0MjRaFw0yMzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTYzNjVlYzgwLTQxZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDc9dMHtYWkcXeELyKD47bMcTQaGUtnlWSlKdzGJMzHOpRiHeeYdqgBiiNWazYT
22yfArFXdNCwaVFNuArHXXFWv9g8frxwm4K173UlfGPPU+hGthHQwmSW1vL/qtmW
4w5Z5/vV+hABfeW2sk/Td+tlhlK1VtWlETDoeagzj9MEl+RG4ldPV77651i12Mml
fJswvfXFlsq7TU+cpCYSDCdXY4c3IRXfFP9IoguQ/tcHDbgqvMPy5kw/bVRJhAKL
uld4VhyXWHJFmLOodchUWtPMvgalBLZHn6+hyoJ2kXAGn338xHPW535WehAM+3XU
vpega3UrXJe7y6SaPrTO0hFZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUy5WZ76EV
u7SnZ7Xt+od/0x9ByIYwHwYDVR0jBBgwFoAUxem+kywNTgcfsYgsriUoEEdzKVAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIxQUIwLzFGRjg4ODMyNUNC
RTExRURCMUYwQzA0Q0M0RjlBRTAyL3hlbS1reXdOVGdjZnNZZ3NyaVVvRUVkektW
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveGVtLWt5d05UZ2Nmc1lnc3JpVW9FRWR6S1ZBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MUFCMC8xRkY4ODgzMjVDQkUxMUVEQjFGMEMwNENDNEY5QUUwMi9FQUVENkRBODVD
QzUxMUVEOTg3MEFGMTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGeeJDANBgkqhkiG9w0BAQsFAAOCAQEAkMQOlmu4W2CGpKfY
0+iGJC72uKuz/cZesnpTwXxEFV+trygOCcaR6YJ6ZuZf4FddbAt9FSeQgGyQ2j3y
UVHI/dnshvWgrrHQwltzyR+MAKN6OyahKG24fZfvwV2WFK9swVuLMAqWQh01BAch
Qkz47EMT2NWYDy/oCUUMbTDmUHsKLwppaa2FGnRe4usbTTvvilYGlV+LYZ+22WQS
XIVVDRmSVhkZkY9jenwDnwzBAipKbmkQ7FyTI0KR+tSK8szZ+otLNMKaaboACTFJ
ohWIB6n59v11iVQx+Ky8KWFFFC+E8XeE4kL5Eq6y0/5n7SuKEwzZmAdr3FOPhU6E
jNnpSw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:56 2024 by rpki-client on console-fra.rpki-client.org