Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/CBC13C761B8F11EBAF5C0D65C4F9AE02.roa
File: CBC13C761B8F11EBAF5C0D65C4F9AE02.roa (raw, json)
Hash identifier: wP+pjYeItBhfGFZUT/8e/QPYthCM3bbZ4NeE5/TBhvw=
Subject key identifier: 77:3B:5D:81:9A:51:F1:CB:2E:5C:63:71:33:CA:E1:A8:29:9E:AF:45
Certificate issuer: /CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Certificate serial: 05DF
Authority key identifier: 1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/CBC13C761B8F11EBAF5C0D65C4F9AE02.roa
Signing time: Tue 19 Apr 2022 19:05:54 +0000
ROA not before: Tue 19 Apr 2022 19:05:54 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 132298
IP address blocks: 103.135.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1503 (0x5df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912611F/serialNumber=1BE8D07AAD0EB809643D0E8DD8A4235703D4F745
Validity
Not Before: Apr 19 19:05:54 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=625f0811-c691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:95:8b:9d:1d:16:73:10:09:3d:06:ee:f9:
d0:55:d4:82:00:60:d3:19:b7:ac:46:3a:be:0d:33:
cd:5a:64:77:f2:2d:cb:61:43:84:19:9e:56:77:9f:
6b:75:bb:92:17:a2:87:c7:bb:ac:b6:bf:8e:6c:a7:
71:92:9a:32:63:74:6b:45:a6:24:c2:c1:33:70:3a:
59:7e:2a:88:ea:ab:14:38:62:2c:a2:1e:98:23:3a:
1f:7b:64:48:20:4e:51:e2:3f:f9:6e:3f:ba:94:65:
65:26:23:71:5d:80:75:c1:86:7e:95:30:b8:f2:10:
77:95:8e:36:c4:88:fa:87:5a:31:d1:d0:1d:f5:75:
bd:c1:06:84:e3:a4:1b:29:83:e8:0b:a4:98:54:f2:
60:7a:76:70:a5:e5:0b:c7:61:e1:c4:d7:84:f6:a2:
d4:06:c6:9c:af:2e:b2:60:ee:77:06:b1:0b:0b:d0:
8c:79:16:c2:bb:3f:54:4c:e6:2a:34:02:ce:3b:3c:
5e:b2:87:3a:3b:fc:c8:20:c8:0e:64:5e:3a:60:81:
e1:9e:fb:14:8a:59:74:29:ff:f9:dc:01:18:fc:b6:
23:f6:7b:ff:31:86:64:b7:e5:cc:c3:8a:22:1f:1c:
24:2e:d6:80:9e:f6:be:ff:ab:4a:e3:b5:67:19:8c:
af:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3B:5D:81:9A:51:F1:CB:2E:5C:63:71:33:CA:E1:A8:29:9E:AF:45
X509v3 Authority Key Identifier:
keyid:1B:E8:D0:7A:AD:0E:B8:09:64:3D:0E:8D:D8:A4:23:57:03:D4:F7:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/G-jQeq0OuAlkPQ6N2KQjVwPU90U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G-jQeq0OuAlkPQ6N2KQjVwPU90U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/CBC13C761B8F11EBAF5C0D65C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.135.252.0/22
Signature Algorithm: sha256WithRSAEncryption
72:39:13:ee:fb:64:68:2b:44:a1:52:f0:78:43:05:25:20:a9:
8f:87:9c:b6:32:a0:5e:f6:74:10:7b:86:75:ae:78:72:70:bc:
6e:14:d6:36:9c:0d:bd:e7:a2:67:13:ba:dd:f2:a8:54:ef:43:
80:cd:3d:f9:c2:8a:b0:fa:b5:b4:06:0d:03:59:cd:76:9b:41:
b5:df:59:7d:74:fd:95:50:43:96:72:97:b8:db:97:8b:9a:a8:
ce:fc:17:70:53:ef:eb:14:6c:93:af:8e:d0:a0:58:4b:73:8e:
a3:fb:df:39:d2:b0:0e:2e:25:b9:d9:11:0c:b3:f6:ba:50:bc:
6f:c7:a5:1f:5a:f7:48:31:f0:ce:44:b2:cd:38:64:63:ba:29:
49:47:2a:fa:c0:ef:85:f3:dc:4d:ed:b4:ca:dc:21:95:ec:9a:
7a:5f:5e:a8:4f:cf:63:9b:33:e4:e2:80:d2:91:50:21:4b:1c:
42:25:76:d9:b5:f8:4f:95:1d:82:fe:fa:01:97:2e:0c:89:9c:
fd:96:8f:20:11:a9:e8:ac:c2:0d:33:99:1e:59:fb:87:27:8d:
ee:1e:cf:47:ed:2b:ad:95:99:d9:6e:5b:0a:63:04:c0:93:83:
99:9e:db:92:b4:45:00:e7:5f:67:7c:3f:c0:9f:55:92:47:79:
49:f3:5f:da
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYxMUYxMTAvBgNVBAUTKDFCRThEMDdBQUQwRUI4MDk2NDNEMEU4REQ4QTQyMzU3
MDNENEY3NDUwHhcNMjIwNDE5MTkwNTU0WhcNMjMwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02MjVmMDgxMS1jNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtGyVi50dFnMQCT0G7vnQVdSCAGDTGbesRjq+DTPNWmR38i3LYUOEGZ5Wd59r
dbuSF6KHx7ustr+ObKdxkpoyY3RrRaYkwsEzcDpZfiqI6qsUOGIsoh6YIzofe2RI
IE5R4j/5bj+6lGVlJiNxXYB1wYZ+lTC48hB3lY42xIj6h1ox0dAd9XW9wQaE46Qb
KYPoC6SYVPJgenZwpeULx2HhxNeE9qLUBsacry6yYO53BrELC9CMeRbCuz9UTOYq
NALOOzxesoc6O/zIIMgOZF46YIHhnvsUill0Kf/53AEY/LYj9nv/MYZkt+XMw4oi
HxwkLtaAnva+/6tK47VnGYyvdwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHc7XYGa
UfHLLlxjcTPK4agpnq9FMB8GA1UdIwQYMBaAFBvo0HqtDrgJZD0OjdikI1cD1PdF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD
N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi9HLWpRZXEwT3VBbGtQUTZOMktRalZ3UFU5
MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ctalFlcTBPdUFsa1BRNk4yS1FqVndQVTkwVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjYxMUYvNEE4QjA0RUE0QzdDMTFFOTgxQTQzOTY5QzRGOUFFMDIvQ0JDMTNDNzYx
QjhGMTFFQkFGNUMwRDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnh/wwDQYJKoZIhvcNAQELBQADggEBAHI5E+77ZGgrRKFS
8HhDBSUgqY+HnLYyoF72dBB7hnWueHJwvG4U1jacDb3nomcTut3yqFTvQ4DNPfnC
irD6tbQGDQNZzXabQbXfWX10/ZVQQ5Zyl7jbl4uaqM78F3BT7+sUbJOvjtCgWEtz
jqP73znSsA4uJbnZEQyz9rpQvG/HpR9a90gx8M5Ess04ZGO6KUlHKvrA74Xz3E3t
tMrcIZXsmnpfXqhPz2ObM+TigNKRUCFLHEIldtm1+E+VHYL++gGXLgyJnP2WjyAR
qeiswg0zmR5Z+4cnje4ez0ftK62VmdluWwpjBMCTg5me25K0RQDnX2d8P8CfVZJH
eUnzX9o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:48 2024 by rpki-client on console-ams.rpki-client.org