Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/5A333C84D9B311EBB18B3E4AC4F9AE02.roa
File: 5A333C84D9B311EBB18B3E4AC4F9AE02.roa (raw, json)
Hash identifier: 4C8nolxcvrvVatMnJmH1Enyga/697bHQDhhI2zU5eic=
Subject key identifier: 04:B0:0C:F8:8A:2C:C6:1F:21:67:EA:61:08:88:5D:21:7E:CB:B4:4D
Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial: 0CBF
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/5A333C84D9B311EBB18B3E4AC4F9AE02.roa
Signing time: Wed 25 May 2022 18:47:32 +0000
ROA not before: Wed 25 May 2022 18:47:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137810
IP address blocks: 103.138.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3263 (0xcbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Validity
Not Before: May 25 18:47:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=628e79c4-4ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:21:2e:d8:e3:3f:eb:d8:94:4c:65:91:af:
46:8a:b6:d5:7c:b4:a8:f5:77:5c:fd:b9:8b:7a:50:
bf:c9:55:de:bd:53:20:bb:b6:48:df:43:da:9c:7d:
d9:af:88:42:a9:61:78:5a:a9:cc:b1:02:e5:67:8c:
d0:ee:52:b9:4d:d6:a8:9d:96:64:0a:b0:fd:c3:82:
71:2b:91:96:7f:a1:16:25:cf:12:da:21:63:c4:eb:
cb:f3:8b:7d:0d:56:b2:22:03:f7:06:d8:98:34:61:
d5:fc:95:1d:36:99:98:14:5c:8c:42:fa:67:ef:45:
f5:7d:25:1e:74:1a:6e:30:27:32:42:00:0c:26:04:
8b:d1:ac:dc:3a:cd:1e:68:9d:85:c8:b2:82:f6:bb:
82:60:53:d8:a8:a0:c3:7b:eb:96:95:c3:c7:48:a9:
27:a4:8f:43:bb:76:78:9f:6a:72:84:a3:9e:dc:02:
0a:0a:87:91:09:0a:52:4d:a1:a3:c6:e0:9c:80:19:
25:84:97:71:63:19:85:05:7e:b9:fa:c4:07:f5:be:
6e:d9:1d:f3:9a:f9:90:fe:b6:65:70:40:e2:90:82:
85:b9:f2:4d:84:fe:96:9d:26:ae:0d:d7:75:d1:2f:
fe:48:40:0d:ce:8f:f9:69:d2:e8:30:7e:fd:4d:00:
c1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B0:0C:F8:8A:2C:C6:1F:21:67:EA:61:08:88:5D:21:7E:CB:B4:4D
X509v3 Authority Key Identifier:
keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/5A333C84D9B311EBB18B3E4AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.24.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:0b:31:59:23:b3:12:d0:00:3c:56:97:75:ce:32:9f:9f:93:
37:18:08:30:06:be:ab:57:22:a9:82:89:6e:c2:8f:b0:9c:2d:
0e:9d:71:b5:eb:ec:86:f9:12:67:03:47:77:35:6f:a7:5b:98:
04:46:5a:a1:bd:fa:06:a0:90:bf:77:3d:2c:2c:f0:d4:49:b7:
5d:0c:39:30:59:25:2d:c8:24:dc:da:6d:93:c5:40:83:84:05:
cf:a8:9f:c5:d2:af:59:02:6e:a7:ba:26:a2:ae:2c:4d:49:ea:
5e:00:e8:ae:2d:b1:be:4a:82:db:95:09:2c:49:5d:c2:09:53:
0e:2a:39:fe:bf:06:2d:e8:a0:a9:45:28:37:e0:21:7e:f1:57:
6a:69:6e:a1:b5:79:96:ac:a4:cd:4a:ec:02:29:68:ee:1b:cc:
a8:d1:d6:7d:b4:01:55:f3:54:4f:2d:fa:6e:72:84:b9:1a:db:
de:56:72:dc:30:2c:49:c4:89:42:d5:9e:86:77:d6:6e:b6:69:
4c:76:5a:61:d0:e1:a2:0c:df:32:60:3c:97:2a:c9:59:d7:a4:
1d:f2:6a:91:00:a9:7a:4c:88:07:0a:84:50:c3:f4:43:23:75:
9b:28:6a:2b:fa:aa:6b:16:20:f4:0d:9e:fc:74:dd:82:b0:c1:
9b:ba:c5:33
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M0MzIxMTAvBgNVBAUTKDMyOURBMDNEQjk5NDQ3NTE0OThBNUZDQTUzQzg1REFB
NjBDQjlBMzIwHhcNMjIwNTI1MTg0NzMyWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjhlNzljNC00ZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArG8hLtjjP+vYlExlka9GirbVfLSo9Xdc/bmLelC/yVXevVMgu7ZI30PanH3Z
r4hCqWF4WqnMsQLlZ4zQ7lK5TdaonZZkCrD9w4JxK5GWf6EWJc8S2iFjxOvL84t9
DVayIgP3BtiYNGHV/JUdNpmYFFyMQvpn70X1fSUedBpuMCcyQgAMJgSL0azcOs0e
aJ2FyLKC9ruCYFPYqKDDe+uWlcPHSKknpI9Du3Z4n2pyhKOe3AIKCoeRCQpSTaGj
xuCcgBklhJdxYxmFBX65+sQH9b5u2R3zmvmQ/rZlcEDikIKFufJNhP6WnSauDdd1
0S/+SEANzo/5adLoMH79TQDB+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFASwDPiK
LMYfIWfqYQiIXSF+y7RNMB8GA1UdIwQYMBaAFDKdoD25lEdRSYpfylPIXapgy5oy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzMi8yRENBQkE2ODVD
RjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIxRkppbF9LVThoZHFtRExt
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01wMmdQYm1VUjFGSmlsX0tVOGhkcW1ETG1qSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0M0MzIvMkRDQUJBNjg1Q0YyMTFFOTg0OTM5MjI0QzRGOUFFMDIvNUEzMzNDODRE
OUIzMTFFQkIxOEIzRTRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnihgwDQYJKoZIhvcNAQELBQADggEBAGwLMVkjsxLQADxW
l3XOMp+fkzcYCDAGvqtXIqmCiW7Cj7CcLQ6dcbXr7Ib5EmcDR3c1b6dbmARGWqG9
+gagkL93PSws8NRJt10MOTBZJS3IJNzabZPFQIOEBc+on8XSr1kCbqe6JqKuLE1J
6l4A6K4tsb5KgtuVCSxJXcIJUw4qOf6/Bi3ooKlFKDfgIX7xV2ppbqG1eZaspM1K
7AIpaO4bzKjR1n20AVXzVE8t+m5yhLka295WctwwLEnEiULVnoZ31m62aUx2WmHQ
4aIM3zJgPJcqyVnXpB3yapEAqXpMiAcKhFDD9EMjdZsoaiv6qmsWIPQNnvx03YKw
wZu6xTM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org