Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/A88398E425AA11EEB8321620C4F9AE02.roa
File: A88398E425AA11EEB8321620C4F9AE02.roa (raw, json)
Hash identifier: M6ws+sEM+PqZedHv3cvabDM8dNZSaZEnh2rQP9rAoAY=
Subject key identifier: E5:0C:59:DA:CA:9B:7B:87:19:92:A2:10:E7:13:CD:C1:DF:46:79:BD
Certificate issuer: /CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
Certificate serial: 0859
Authority key identifier: BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/A88398E425AA11EEB8321620C4F9AE02.roa
Signing time: Tue 18 Jul 2023 20:35:40 +0000
ROA not before: Tue 18 Jul 2023 20:35:40 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 132285
IP address blocks: 103.82.252.0/24 maxlen: 24
103.82.253.0/24 maxlen: 24
103.82.254.0/24 maxlen: 24
103.82.255.0/24 maxlen: 24
125.62.88.0/24 maxlen: 24
125.62.89.0/24 maxlen: 24
125.62.90.0/24 maxlen: 24
125.62.91.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2137 (0x859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913DE7A/serialNumber=BFD41FCFD2561B53AC4CD2F83D11B0470A66A055
Validity
Not Before: Jul 18 20:35:40 2023 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=64b6f79b-f69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:91:13:29:c6:54:8c:3a:4b:1b:28:22:76:
cb:d4:b1:da:a2:56:ec:7f:37:de:df:99:26:d2:3d:
a8:14:38:c8:e2:c2:c1:4f:c8:e2:c1:08:9a:2c:a9:
28:95:73:7a:35:ad:3d:ca:4b:69:0e:d7:46:46:bd:
0b:6a:42:08:0a:7d:5b:9f:4b:bb:6f:d8:10:7a:56:
e7:10:95:39:d4:71:ba:5e:99:d4:4b:8c:2c:89:22:
d3:1d:c7:dc:1e:60:25:81:85:c7:7f:3c:fd:74:67:
94:bb:82:67:b0:52:a1:ad:74:68:e4:9a:49:2d:ec:
00:d9:81:f3:dc:42:5f:c9:d2:ed:d0:0b:06:db:e8:
93:af:08:70:d9:af:41:13:f0:c4:c1:6a:6e:25:75:
36:6e:c6:88:8c:77:2a:7d:f4:f6:2b:07:56:92:15:
68:cf:2e:ce:03:4e:cb:95:e5:c7:46:36:98:43:aa:
bf:64:f5:5a:fa:7f:d6:03:8f:d1:5f:d3:59:c3:6c:
49:04:32:4c:f8:40:9f:a0:f4:dc:af:a2:9e:81:76:
ec:f2:d6:8c:98:88:81:34:e1:76:55:53:e6:f9:83:
4d:6b:ef:3f:c6:23:9b:8c:fc:a9:73:6f:13:95:64:
07:46:e6:47:d1:b9:57:20:e6:6b:23:8f:51:9a:e7:
9a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0C:59:DA:CA:9B:7B:87:19:92:A2:10:E7:13:CD:C1:DF:46:79:BD
X509v3 Authority Key Identifier:
keyid:BF:D4:1F:CF:D2:56:1B:53:AC:4C:D2:F8:3D:11:B0:47:0A:66:A0:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v9Qfz9JWG1OsTNL4PRGwRwpmoFU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DE7A/BC71ECC68D4511EA87FAF858C4F9AE02/A88398E425AA11EEB8321620C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.82.252.0/22
125.62.88.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:6c:7b:9e:6b:68:b7:4f:94:d9:c8:55:b0:9e:9b:fa:04:62:
fb:7d:39:66:7a:8e:03:56:1f:1c:27:0c:8f:c1:2e:76:38:d2:
f4:ba:19:77:23:ad:74:47:70:d6:f1:8f:30:d0:07:3e:2e:e3:
d1:7e:f0:e2:69:89:a3:56:05:b7:01:80:0a:e0:93:04:1a:62:
6f:0f:49:7d:dd:12:b5:c3:c9:5b:42:84:96:18:68:75:0d:a5:
2a:45:dd:1d:93:ac:8b:d2:ca:cc:a9:9b:ef:2b:f8:00:04:6e:
f1:bb:57:6a:8f:a0:25:c7:8c:9d:ed:a8:57:78:7a:31:41:dd:
91:6d:5f:6a:b4:53:c2:25:bb:47:22:d2:a5:1f:87:70:5a:2e:
d2:01:74:61:3a:15:64:1b:c3:7d:b3:51:65:f7:ff:7f:a3:b8:
20:7f:bb:c8:28:db:f7:e0:4b:78:b3:44:5e:d4:d8:a3:3a:a3:
58:c3:c3:e7:7b:d3:fa:bb:45:34:07:67:7c:33:38:1c:34:ba:
be:5d:a8:ca:e0:d6:6e:82:77:92:c5:22:ea:12:c4:e5:c8:72:
1b:ca:43:68:df:7d:10:2a:6a:8f:ce:c2:fd:6f:a4:12:0d:cd:
cf:6e:10:15:e1:fa:75:ce:0b:8c:96:32:90:f3:d3:5b:ae:43:
ed:a5:79:39
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICCFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0RFN0ExMTAvBgNVBAUTKEJGRDQxRkNGRDI1NjFCNTNBQzRDRDJGODNEMTFCMDQ3
MEE2NkEwNTUwHhcNMjMwNzE4MjAzNTQwWhcNMjQwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGI2Zjc5Yi1mNjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx72REynGVIw6SxsoInbL1LHaolbsfzfe35km0j2oFDjI4sLBT8jiwQiaLKko
lXN6Na09yktpDtdGRr0LakIICn1bn0u7b9gQelbnEJU51HG6XpnUS4wsiSLTHcfc
HmAlgYXHfzz9dGeUu4JnsFKhrXRo5JpJLewA2YHz3EJfydLt0AsG2+iTrwhw2a9B
E/DEwWpuJXU2bsaIjHcqffT2KwdWkhVozy7OA07LleXHRjaYQ6q/ZPVa+n/WA4/R
X9NZw2xJBDJM+ECfoPTcr6KegXbs8taMmIiBNOF2VVPm+YNNa+8/xiObjPypc28T
lWQHRuZH0blXIOZrI49Rmuea5wIDAQABo4ICmzCCApcwHQYDVR0OBBYEFOUMWdrK
m3uHGZKiEOcTzcHfRnm9MB8GA1UdIwQYMBaAFL/UH8/SVhtTrEzS+D0RsEcKZqBV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREU3QS9CQzcxRUNDNjhE
NDUxMUVBODdGQUY4NThDNEY5QUUwMi92OVFmejlKV0cxT3NUTkw0UFJHd1J3cG1v
RlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Y5UWZ6OUpXRzFPc1ROTDRQUkd3UndwbW9GVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0RFN0EvQkM3MUVDQzY4RDQ1MTFFQTg3RkFGODU4QzRGOUFFMDIvQTg4Mzk4RTQy
NUFBMTFFRUI4MzIxNjIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAJnUvwDBAJ9PlgwDQYJKoZIhvcNAQELBQADggEBAGpse55r
aLdPlNnIVbCem/oEYvt9OWZ6jgNWHxwnDI/BLnY40vS6GXcjrXRHcNbxjzDQBz4u
49F+8OJpiaNWBbcBgArgkwQaYm8PSX3dErXDyVtChJYYaHUNpSpF3R2TrIvSysyp
m+8r+AAEbvG7V2qPoCXHjJ3tqFd4ejFB3ZFtX2q0U8Ilu0ci0qUfh3BaLtIBdGE6
FWQbw32zUWX3/3+juCB/u8go2/fgS3izRF7U2KM6o1jDw+d70/q7RTQHZ3wzOBw0
ur5dqMrg1m6Cd5LFIuoSxOXIchvKQ2jffRAqao/Owv1vpBINzc9uEBXh+nXOC4yW
MpDz01uuQ+2leTk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:55 2024 by rpki-client on console-ams.rpki-client.org