Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/4B2E57C606A511ED9C973B2FC4F9AE02.roa
File: 4B2E57C606A511ED9C973B2FC4F9AE02.roa (raw, json)
Hash identifier: 7vHko/mEK6iajfmFnIAkV189uOuBBWNQbFdxBiHe484=
Subject key identifier: C6:9B:5E:18:EE:6B:7C:94:B0:18:89:F3:41:67:A9:73:C0:6D:C2:DF
Certificate issuer: /CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
Certificate serial: 12BD
Authority key identifier: CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/4B2E57C606A511ED9C973B2FC4F9AE02.roa
Signing time: Thu 28 Jul 2022 09:06:01 +0000
ROA not before: Thu 28 Jul 2022 09:06:01 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 141452
IP address blocks: 103.114.92.0/24 maxlen: 24
103.114.93.0/24 maxlen: 24
103.114.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4797 (0x12bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912D99E/serialNumber=CAF0B784B13E1400EEB4225BA22D6F9838824EC3
Validity
Not Before: Jul 28 09:06:01 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62e25179-5829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c2:9b:21:c5:b0:c5:18:eb:49:29:9f:f7:f5:
ef:51:b8:c8:93:59:56:d1:a1:6e:47:fa:5e:2f:e5:
9a:3d:3e:e4:21:35:8f:aa:1d:98:64:e8:60:92:7e:
8f:ff:f8:23:61:e2:14:d7:cf:e3:85:8c:e8:d9:f1:
94:88:ce:f3:00:0a:a5:c3:a9:77:9b:08:62:40:47:
f1:1b:ae:1a:37:7c:e1:f4:f2:43:64:e2:de:af:4f:
15:0a:46:db:3a:78:f0:ef:d1:26:ca:65:28:f1:db:
7d:4f:10:b8:af:10:dd:02:42:8b:7e:c5:c6:5a:bf:
1b:8a:4c:de:55:ae:da:06:67:81:e4:8c:6b:15:56:
6d:2a:ed:7b:e1:5f:16:9a:d8:90:64:37:d1:8c:33:
ca:7f:c8:f8:94:61:7d:73:ca:34:d6:2d:5d:9d:eb:
f9:e5:ab:1e:9f:6b:2a:54:e4:eb:a9:3d:f8:bd:30:
a0:9c:ea:02:ac:bd:25:73:9d:63:c3:14:0b:c9:fc:
d1:e5:d4:c0:f7:9c:72:b6:87:a3:61:9e:60:01:93:
fe:03:5b:d6:9f:2c:a1:4c:78:34:af:28:66:1b:d2:
32:5d:44:71:7f:07:d3:7d:a2:c0:f7:7a:da:5f:14:
19:22:b3:5d:11:95:43:63:1a:4d:9e:09:3f:46:bc:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9B:5E:18:EE:6B:7C:94:B0:18:89:F3:41:67:A9:73:C0:6D:C2:DF
X509v3 Authority Key Identifier:
keyid:CA:F0:B7:84:B1:3E:14:00:EE:B4:22:5B:A2:2D:6F:98:38:82:4E:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/yvC3hLE-FADutCJboi1vmDiCTsM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yvC3hLE-FADutCJboi1vmDiCTsM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D99E/46048C70497111E8A7F9A672C4F9AE02/4B2E57C606A511ED9C973B2FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.114.92.0-103.114.94.255
Signature Algorithm: sha256WithRSAEncryption
26:1b:0a:b5:a4:c1:ae:f9:57:7b:b3:55:7a:0c:ab:f3:28:da:
30:94:61:cb:53:1c:3e:d5:ce:87:51:6b:be:4e:41:0a:49:b2:
f4:46:96:29:4f:a6:09:ce:8a:8d:ee:db:3c:4e:9e:73:be:52:
49:55:68:c6:5d:5a:f4:0a:01:1c:76:e9:a2:5c:57:7e:30:6f:
8d:20:82:02:c3:45:78:0e:c3:73:fa:c2:86:f5:91:bd:1c:3a:
fa:58:3b:9b:8f:38:ed:7d:61:11:36:ec:91:a3:ff:b9:9a:2a:
e4:b7:1b:22:54:e8:36:41:00:ff:2c:6d:f3:7b:53:84:89:6d:
f8:fe:96:f9:41:a7:50:31:f0:53:85:5b:ff:0c:48:cb:f7:f8:
0e:20:f5:a0:cc:f7:ed:33:67:23:31:64:c7:01:c3:65:21:c8:
55:2f:54:9e:0f:77:18:d4:ff:4b:4f:b2:ce:30:8a:26:4b:b6:
5b:72:0e:69:1b:fe:bd:20:24:93:1c:d7:e6:8c:28:47:c6:50:
57:1d:d0:f7:fc:70:28:df:f0:44:64:a8:f8:b2:38:8b:4c:90:
b7:f1:9a:ea:de:77:ca:ed:35:bc:22:6c:cd:11:a1:03:b5:98:
0a:ab:1c:5d:38:bb:9a:86:ca:21:91:b4:9c:67:02:68:ea:f0:
4a:78:b9:ef
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICEr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ5OUUxMTAvBgNVBAUTKENBRjBCNzg0QjEzRTE0MDBFRUI0MjI1QkEyMkQ2Rjk4
Mzg4MjRFQzMwHhcNMjIwNzI4MDkwNjAxWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmUyNTE3OS01ODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0sKbIcWwxRjrSSmf9/XvUbjIk1lW0aFuR/peL+WaPT7kITWPqh2YZOhgkn6P
//gjYeIU18/jhYzo2fGUiM7zAAqlw6l3mwhiQEfxG64aN3zh9PJDZOLer08VCkbb
Onjw79EmymUo8dt9TxC4rxDdAkKLfsXGWr8bikzeVa7aBmeB5IxrFVZtKu174V8W
mtiQZDfRjDPKf8j4lGF9c8o01i1dnev55asen2sqVOTrqT34vTCgnOoCrL0lc51j
wxQLyfzR5dTA95xytoejYZ5gAZP+A1vWnyyhTHg0ryhmG9IyXURxfwfTfaLA93ra
XxQZIrNdEZVDYxpNngk/RrxZUQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFMabXhju
a3yUsBiJ80FnqXPAbcLfMB8GA1UdIwQYMBaAFMrwt4SxPhQA7rQiW6Itb5g4gk7D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDk5RS80NjA0OEM3MDQ5
NzExMUU4QTdGOUE2NzJDNEY5QUUwMi95dkMzaExFLUZBRHV0Q0pib2kxdm1EaUNU
c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3l2QzNoTEUtRkFEdXRDSmJvaTF2bURpQ1RzTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkQ5OUUvNDYwNDhDNzA0OTcxMTFFOEE3RjlBNjcyQzRGOUFFMDIvNEIyRTU3QzYw
NkE1MTFFRDlDOTczQjJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEAmdyXAMEAGdyXjANBgkqhkiG9w0BAQsFAAOCAQEAJhsK
taTBrvlXe7NVegyr8yjaMJRhy1McPtXOh1Frvk5BCkmy9EaWKU+mCc6Kje7bPE6e
c75SSVVoxl1a9AoBHHbpolxXfjBvjSCCAsNFeA7Dc/rChvWRvRw6+lg7m4847X1h
ETbskaP/uZoq5LcbIlToNkEA/yxt83tThIlt+P6W+UGnUDHwU4Vb/wxIy/f4DiD1
oMz37TNnIzFkxwHDZSHIVS9Ung93GNT/S0+yzjCKJku2W3IOaRv+vSAkkxzX5owo
R8ZQVx3Q9/xwKN/wRGSo+LI4i0yQt/Ga6t53yu01vCJszRGhA7WYCqscXTi7mobK
IZG0nGcCaOrwSni57w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:52 2024 by rpki-client on console-ams.rpki-client.org