Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/AA0B5146BF8E11EA99010B14C4F9AE02.roa
File: AA0B5146BF8E11EA99010B14C4F9AE02.roa (raw, json)
Hash identifier: oyj4AIyP7YzlpwsA+qC1c2UCTjLM0RNvYb0K1eH1vRA=
Subject key identifier: 3B:1D:74:11:13:73:73:9D:FC:52:22:C2:CB:0F:9D:F7:3B:98:6B:BD
Certificate issuer: /CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394
Certificate serial: 09AE
Authority key identifier: E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/AA0B5146BF8E11EA99010B14C4F9AE02.roa
Signing time: Thu 23 Jun 2022 19:58:43 +0000
ROA not before: Thu 23 Jun 2022 19:58:43 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 64074
IP address blocks: 103.138.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2478 (0x9ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394
Validity
Not Before: Jun 23 19:58:43 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62b4c5f3-98b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:25:25:0b:0e:29:5e:d0:63:9c:5b:6c:01:
9e:99:b3:ad:a3:1f:2b:78:9e:ba:f3:1f:6d:ed:e2:
80:50:2d:2c:3f:e3:61:94:70:48:d5:26:45:e7:51:
ad:31:3f:d8:09:ff:f7:ca:9d:65:ba:e3:82:b9:4e:
02:1d:72:8d:3e:85:a6:f2:f6:7d:aa:68:a4:6e:ae:
43:f5:d4:98:f5:e7:6f:f2:10:cb:42:b6:09:e7:8d:
8f:7f:32:7e:83:68:f0:b2:81:0d:0b:fb:ad:4c:7a:
3e:14:1a:35:bb:ae:66:51:8a:3b:b1:bd:82:30:9e:
7c:42:6a:80:a9:56:1f:ed:8c:7a:55:24:15:e0:61:
3d:d9:20:41:b9:44:30:49:5d:7d:15:fe:7c:35:9f:
3c:2a:4b:b3:c1:d2:96:2f:89:e2:cb:66:a1:34:b8:
59:45:05:65:bb:02:90:32:26:5a:3c:90:9a:31:da:
35:99:85:98:29:54:08:c8:ad:5a:1b:b6:4a:55:e7:
4b:54:9e:6f:21:bd:6e:bb:43:8a:a8:04:0a:87:4e:
57:71:3b:57:c3:b0:fd:75:2b:df:6d:d1:94:10:e2:
35:b6:e7:2d:4a:b6:c7:67:6f:02:b4:cc:aa:51:3f:
0a:ba:04:1d:45:e4:0f:bf:90:cb:fc:bc:3f:07:55:
89:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1D:74:11:13:73:73:9D:FC:52:22:C2:CB:0F:9D:F7:3B:98:6B:BD
X509v3 Authority Key Identifier:
keyid:E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/AA0B5146BF8E11EA99010B14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.183.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c5:6b:39:33:12:b6:16:c4:46:0b:bf:fe:d4:25:e5:fb:a7:
37:71:e2:cc:55:1c:25:e7:ae:bc:52:d1:0b:b4:df:52:ee:e0:
b7:df:a3:bd:da:ef:c1:b4:93:d8:1c:67:01:20:3a:18:50:d4:
dd:df:5c:d4:d7:67:32:19:a2:bf:ed:e5:fc:31:fe:d6:d9:66:
17:a7:1d:c2:58:85:b0:3e:c7:f0:7e:45:d5:83:bf:7f:7e:f0:
2f:65:f5:4b:94:a0:3c:eb:6f:6f:4f:86:dd:c6:c6:a3:5e:f7:
df:2d:52:d3:0a:47:54:15:66:26:31:6b:e4:ff:c5:d4:ce:fa:
a9:9d:f6:0b:eb:8d:cc:64:c0:d3:6a:50:a3:f8:6f:5f:23:b3:
db:a4:f8:5c:b0:c7:f0:32:f8:c6:99:54:6b:c9:cb:98:c4:25:
a2:bf:b4:4d:51:f1:c1:e2:21:38:2d:b9:8c:38:ec:9c:62:75:
9c:e7:9f:02:9a:83:2b:08:e5:c2:77:14:d1:09:46:78:26:99:
25:b2:47:b5:79:70:b6:c2:24:f9:98:fc:a1:06:36:0c:2b:8b:
27:4e:d4:ef:a6:21:cd:db:8f:f1:b4:35:af:cf:91:88:aa:e1:
cd:c0:0d:c5:ea:a7:58:ab:42:bc:8c:d8:20:e4:07:7e:bf:0e:
fc:73:54:2f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ1QzExMTAvBgNVBAUTKEU4MkQxMEQyREExQzk4QkY2OENBNEM2NDkxQjkwRkZE
MEZBQjMzOTQwHhcNMjIwNjIzMTk1ODQzWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmI0YzVmMy05OGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqt0lJQsOKV7QY5xbbAGembOtox8reJ668x9t7eKAUC0sP+NhlHBI1SZF51Gt
MT/YCf/3yp1luuOCuU4CHXKNPoWm8vZ9qmikbq5D9dSY9edv8hDLQrYJ542PfzJ+
g2jwsoENC/utTHo+FBo1u65mUYo7sb2CMJ58QmqAqVYf7Yx6VSQV4GE92SBBuUQw
SV19Ff58NZ88KkuzwdKWL4niy2ahNLhZRQVluwKQMiZaPJCaMdo1mYWYKVQIyK1a
G7ZKVedLVJ5vIb1uu0OKqAQKh05XcTtXw7D9dSvfbdGUEOI1tuctSrbHZ28CtMyq
UT8KugQdReQPv5DL/Lw/B1WJNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDsddBET
c3Od/FIiwssPnfc7mGu9MB8GA1UdIwQYMBaAFOgtENLaHJi/aMpMZJG5D/0PqzOU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDVDMS9CMDdEQ0I0NEZG
Q0MxMUU5QTVFNzk3ODRDNEY5QUUwMi82QzBRMHRvY21MOW95a3hra2JrUF9RLXJN
NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZDMFEwdG9jbUw5b3lreGtrYmtQX1Etck01US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkQ1QzEvQjA3RENCNDRGRkNDMTFFOUE1RTc5Nzg0QzRGOUFFMDIvQUEwQjUxNDZC
RjhFMTFFQTk5MDEwQjE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnircwDQYJKoZIhvcNAQELBQADggEBACnFazkzErYWxEYL
v/7UJeX7pzdx4sxVHCXnrrxS0Qu031Lu4Lffo73a78G0k9gcZwEgOhhQ1N3fXNTX
ZzIZor/t5fwx/tbZZhenHcJYhbA+x/B+RdWDv39+8C9l9UuUoDzrb29Pht3GxqNe
998tUtMKR1QVZiYxa+T/xdTO+qmd9gvrjcxkwNNqUKP4b18js9uk+Fywx/Ay+MaZ
VGvJy5jEJaK/tE1R8cHiITgtuYw47JxidZznnwKagysI5cJ3FNEJRngmmSWyR7V5
cLbCJPmY/KEGNgwriydO1O+mIc3bj/G0Na/PkYiq4c3ADcXqp1irQryM2CDkB36/
DvxzVC8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-ams.rpki-client.org