Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/393C9EA0892111EAADC3277FC4F9AE02.roa
File: 393C9EA0892111EAADC3277FC4F9AE02.roa (raw, json)
Hash identifier: yKnobtZ89ROO6yTM8G4yyuRDbr02eixbLO7Ofe1fg5g=
Subject key identifier: DE:72:51:22:A3:C2:44:AD:52:56:D3:C1:7F:96:5B:6D:4B:D6:C1:14
Certificate issuer: /CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
Certificate serial: 07B9
Authority key identifier: FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/393C9EA0892111EAADC3277FC4F9AE02.roa
Signing time: Tue 18 Oct 2022 22:08:17 +0000
ROA not before: Tue 18 Oct 2022 22:08:17 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 138350
IP address blocks: 103.130.207.0/24 maxlen: 24
103.156.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1977 (0x7b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91221EF/serialNumber=FF900F24BF9A8982D95F8447AA7B9BB4F7AC4639
Validity
Not Before: Oct 18 22:08:17 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=634f23d1-e7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:09:d1:11:58:33:4e:fb:66:56:89:f4:1b:e8:
9c:f0:05:1e:4c:f6:b6:6c:a6:bd:ba:d2:53:da:1b:
81:68:e7:e3:f8:3f:85:fd:53:08:b7:3a:7d:fb:32:
c0:93:b6:84:d5:5f:4d:dd:70:69:09:25:c7:39:cc:
91:b9:bb:a7:e3:0b:97:6e:c4:36:ae:8e:4a:d3:ef:
c7:1a:2b:93:10:de:ae:9b:42:19:a4:be:ad:48:55:
56:0c:e6:0c:75:80:57:97:18:eb:5a:38:b0:5b:7b:
d3:2d:4c:15:f2:98:97:c9:17:8b:14:b5:c7:c9:be:
e3:fd:47:f6:ba:72:5f:d2:55:2d:e6:2f:2b:30:83:
fc:21:a8:6e:65:d7:f6:1d:8d:98:47:6b:8b:96:75:
a6:91:18:e2:25:e7:9a:53:45:c6:a1:ad:5c:1b:77:
c9:e0:09:f4:72:c5:fd:43:11:3f:e6:e0:8f:13:05:
ab:ed:db:83:2b:40:68:af:dd:49:1f:9c:c1:6d:8d:
bd:bc:3f:7e:24:31:78:a1:c7:2e:48:15:9c:32:e6:
ae:f7:30:30:d5:b3:52:8d:c5:b1:d2:ea:64:49:a2:
cf:79:8b:61:9d:5f:b5:4e:b5:65:96:2a:e3:e4:cf:
e2:4e:4d:a0:9a:6f:39:c6:10:5e:20:00:e0:59:8f:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:72:51:22:A3:C2:44:AD:52:56:D3:C1:7F:96:5B:6D:4B:D6:C1:14
X509v3 Authority Key Identifier:
keyid:FF:90:0F:24:BF:9A:89:82:D9:5F:84:47:AA:7B:9B:B4:F7:AC:46:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/_5APJL-aiYLZX4RHqnubtPesRjk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_5APJL-aiYLZX4RHqnubtPesRjk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91221EF/6F2FEBD6891F11EA89B6277CC4F9AE02/393C9EA0892111EAADC3277FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.130.207.0/24
103.156.97.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:93:7c:2c:40:f1:97:cb:71:c1:cb:a7:fb:7c:5c:7a:d7:2d:
f8:f5:d1:21:6e:c7:11:fb:4c:45:29:39:77:58:47:80:a7:d9:
7d:ac:99:f8:71:c1:ba:b7:5b:19:c3:3b:a3:ac:40:d1:d6:05:
d9:8b:e5:f2:1d:7d:78:85:85:2e:b6:f4:b4:2b:22:80:82:c8:
84:f9:66:b3:b4:bc:d8:08:a4:de:99:da:21:99:8f:79:ca:74:
21:9d:8f:d9:ba:42:a2:b2:68:64:32:5c:a9:a2:7e:bd:a8:76:
2d:27:e8:00:7a:db:1e:ed:6c:89:b1:c8:7a:8f:66:a7:48:74:
9c:86:a2:fb:ac:98:2b:15:ae:20:1d:63:64:ec:f2:69:4f:0c:
32:e6:be:3d:0d:5b:cb:36:17:31:88:b7:e0:eb:59:3d:57:22:
b2:bc:67:41:e5:b2:4c:33:76:58:05:01:74:ee:2a:60:48:56:
ad:74:3b:d8:32:51:2c:4c:f1:1d:9f:37:23:bc:01:7b:6f:a7:
f6:27:7c:94:6d:c9:d7:2f:87:58:62:31:f3:23:0e:62:14:09:
d3:87:c7:b2:99:02:8c:5b:7f:17:16:eb:14:0e:9c:ca:98:72:
f4:6b:65:fd:bd:29:07:21:1f:04:96:12:85:78:0f:96:17:8e:
0a:1a:47:50
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjIxRUYxMTAvBgNVBAUTKEZGOTAwRjI0QkY5QTg5ODJEOTVGODQ0N0FBN0I5QkI0
RjdBQzQ2MzkwHhcNMjIxMDE4MjIwODE3WhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzRmMjNkMS1lN2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuAnREVgzTvtmVon0G+ic8AUeTPa2bKa9utJT2huBaOfj+D+F/VMItzp9+zLA
k7aE1V9N3XBpCSXHOcyRubun4wuXbsQ2ro5K0+/HGiuTEN6um0IZpL6tSFVWDOYM
dYBXlxjrWjiwW3vTLUwV8piXyReLFLXHyb7j/Uf2unJf0lUt5i8rMIP8IahuZdf2
HY2YR2uLlnWmkRjiJeeaU0XGoa1cG3fJ4An0csX9QxE/5uCPEwWr7duDK0Bor91J
H5zBbY29vD9+JDF4occuSBWcMuau9zAw1bNSjcWx0upkSaLPeYthnV+1TrVllirj
5M/iTk2gmm85xhBeIADgWY/pVQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFN5yUSKj
wkStUlbTwX+WW21L1sEUMB8GA1UdIwQYMBaAFP+QDyS/momC2V+ER6p7m7T3rEY5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjFFRi82RjJGRUJENjg5
MUYxMUVBODlCNjI3N0NDNEY5QUUwMi9fNUFQSkwtYWlZTFpYNFJIcW51YnRQZXNS
amsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL181QVBKTC1haVlMWlg0UkhxbnVidFBlc1Jqay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjIxRUYvNkYyRkVCRDY4OTFGMTFFQTg5QjYyNzdDQzRGOUFFMDIvMzkzQzlFQTA4
OTIxMTFFQUFEQzMyNzdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABngs8DBABnnGEwDQYJKoZIhvcNAQELBQADggEBAM6TfCxA
8ZfLccHLp/t8XHrXLfj10SFuxxH7TEUpOXdYR4Cn2X2smfhxwbq3WxnDO6OsQNHW
BdmL5fIdfXiFhS629LQrIoCCyIT5ZrO0vNgIpN6Z2iGZj3nKdCGdj9m6QqKyaGQy
XKmifr2odi0n6AB62x7tbImxyHqPZqdIdJyGovusmCsVriAdY2Ts8mlPDDLmvj0N
W8s2FzGIt+DrWT1XIrK8Z0HlskwzdlgFAXTuKmBIVq10O9gyUSxM8R2fNyO8AXtv
p/YnfJRtydcvh1hiMfMjDmIUCdOHx7KZAoxbfxcW6xQOnMqYcvRrZf29KQchHwSW
EoV4D5YXjgoaR1A=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-ams.rpki-client.org