Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/5172573E2BC711EEB1DC1E6EC4F9AE02.roa
File: 5172573E2BC711EEB1DC1E6EC4F9AE02.roa (raw, json)
Hash identifier: IFINRZEQKQfFQuvwI2tM70qFu5apIbw9Eh48Z92JzPY=
Subject key identifier: 5A:AC:65:16:F2:B8:29:B3:ED:2C:CE:55:BD:6F:4F:E3:C7:EC:46:D6
Certificate issuer: /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Certificate serial: 02
Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/5172573E2BC711EEB1DC1E6EC4F9AE02.roa
Signing time: Wed 26 Jul 2023 15:15:56 +0000
ROA not before: Wed 26 Jul 2023 15:15:56 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 135615
IP address blocks: 103.175.56.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Validity
Not Before: Jul 26 15:15:56 2023 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=64c138ac-f32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:10:49:7e:33:56:d0:1f:11:f9:47:61:88:ca:
72:34:f3:d7:2e:3a:51:a7:16:40:66:b0:d4:1c:21:
f8:68:44:8f:9b:50:80:19:23:43:53:b5:2a:fb:82:
cf:4f:cf:c2:c3:3a:b7:10:f8:db:22:f7:73:93:da:
40:61:15:be:f9:75:bd:4f:30:0c:e1:fd:f5:88:94:
d4:66:db:3c:e2:f5:c3:a9:0b:03:6a:ba:08:85:01:
e4:10:39:85:bb:48:89:8c:83:7e:20:72:b8:0c:9a:
ed:1e:77:91:00:8f:22:23:06:42:c3:86:21:b8:82:
5b:fb:63:4b:2a:7c:c2:bc:2e:d1:1f:f1:f6:b6:c6:
3f:9c:15:52:15:c9:25:a6:d9:1f:69:49:98:c4:d9:
97:49:a3:26:ef:1f:f7:ac:56:d9:c4:3a:71:0e:04:
5a:a7:cf:02:37:ba:0e:10:11:cf:6f:31:c7:82:18:
63:67:9a:6d:6e:20:cf:33:08:cf:38:79:e0:d4:db:
1f:f1:1b:54:96:ca:76:9e:c3:85:7b:ef:2e:7d:46:
44:95:1d:05:c3:e5:9c:07:32:27:4f:0e:10:6d:b6:
8b:b6:ed:18:66:17:64:05:ab:d7:b1:be:a6:c2:45:
56:d4:84:77:21:83:86:99:6f:35:e0:5f:0d:77:c7:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:AC:65:16:F2:B8:29:B3:ED:2C:CE:55:BD:6F:4F:E3:C7:EC:46:D6
X509v3 Authority Key Identifier:
keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/5172573E2BC711EEB1DC1E6EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.175.56.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:30:43:41:a2:f4:2f:94:df:81:33:7c:c0:72:90:68:00:cf:
4a:d9:1d:c5:ed:e3:bb:c1:72:48:33:af:f9:2f:f4:b7:c3:1a:
98:9d:24:79:3e:9d:67:96:ed:5e:4f:d8:b3:47:47:af:70:12:
61:65:e8:42:71:19:1e:42:5b:15:29:e8:a6:3f:21:83:e9:da:
99:94:d4:2f:5f:cb:3d:6b:20:87:8d:4f:72:f9:14:4c:74:a6:
20:73:98:e8:89:49:4d:02:f0:b4:6d:1f:23:f9:c3:28:50:b7:
df:f4:cc:33:8f:09:ee:bf:b7:45:db:28:c7:6f:39:51:64:47:
d1:f8:a6:88:42:39:2c:0c:cf:8b:47:c3:8f:a2:d4:9f:71:fc:
82:ef:f5:94:a8:ae:39:a5:db:a6:f3:1d:1f:76:ea:80:8e:4b:
c7:57:6b:bc:98:17:e5:04:8c:11:ad:dd:e0:15:45:e3:1c:92:
c8:ad:86:54:ba:76:a9:08:58:30:7f:4d:98:1a:5b:48:1a:d3:
8a:dd:ab:94:6d:16:bd:7e:64:4c:20:61:e6:78:0d:9d:64:92:
4c:e5:ef:5c:6f:ba:23:38:ad:73:a6:3a:e8:a5:c7:3e:fa:6e:
28:52:12:81:5f:63:6c:0b:92:91:dd:bf:72:dc:9e:dd:2c:21:
b3:55:18:26
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
Mzg0ODExMC8GA1UEBRMoNDgyRDNFNzAwRUU1RjFBNEFEQTc1MTZGMkU1Njc4MzRF
NzEwRDEzNTAeFw0yMzA3MjYxNTE1NTZaFw0yNDAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0YzEzOGFjLWYzMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCvEEl+M1bQHxH5R2GIynI089cuOlGnFkBmsNQcIfhoRI+bUIAZI0NTtSr7gs9P
z8LDOrcQ+Nsi93OT2kBhFb75db1PMAzh/fWIlNRm2zzi9cOpCwNqugiFAeQQOYW7
SImMg34gcrgMmu0ed5EAjyIjBkLDhiG4glv7Y0sqfMK8LtEf8fa2xj+cFVIVySWm
2R9pSZjE2ZdJoybvH/esVtnEOnEOBFqnzwI3ug4QEc9vMceCGGNnmm1uIM8zCM84
eeDU2x/xG1SWynaew4V77y59RkSVHQXD5ZwHMidPDhBttou27RhmF2QFq9exvqbC
RVbUhHchg4aZbzXgXw13x1L9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUWqxlFvK4
KbPtLM5VvW9P48fsRtYwHwYDVR0jBBgwFoAUSC0+cA7l8aStp1FvLlZ4NOcQ0TUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQzODQ4LzE2MThEQjc0MkJC
NjExRUVCQjdENTI2QUM0RjlBRTAyL1NDMC1jQTdsOGFTdHAxRnZMbFo0Tk9jUTBU
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvU0MwLWNBN2w4YVN0cDFGdkxsWjROT2NRMFRVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Mzg0OC8xNjE4REI3NDJCQjYxMUVFQkI3RDUyNkFDNEY5QUUwMi81MTcyNTczRTJC
QzcxMUVFQjFEQzFFNkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGevODANBgkqhkiG9w0BAQsFAAOCAQEALzBDQaL0L5TfgTN8
wHKQaADPStkdxe3ju8FySDOv+S/0t8MamJ0keT6dZ5btXk/Ys0dHr3ASYWXoQnEZ
HkJbFSnopj8hg+namZTUL1/LPWsgh41PcvkUTHSmIHOY6IlJTQLwtG0fI/nDKFC3
3/TMM48J7r+3Rdsox285UWRH0fimiEI5LAzPi0fDj6LUn3H8gu/1lKiuOaXbpvMd
H3bqgI5Lx1drvJgX5QSMEa3d4BVF4xySyK2GVLp2qQhYMH9NmBpbSBrTit2rlG0W
vX5kTCBh5ngNnWSSTOXvXG+6Izitc6Y66KXHPvpuKFISgV9jbAuSkd2/ctye3Swh
s1UYJg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:56 2024 by rpki-client on console-ams.rpki-client.org