Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/98B85094A11811EB896FE30DC4F9AE02.roa
File: 98B85094A11811EB896FE30DC4F9AE02.roa (raw, json)
Hash identifier: zglIUtIQPAfQuFSy0QUr/wzAPPQpWqCyUEB6oIJ8UZ4=
Subject key identifier: E1:C7:75:CB:B4:64:EA:AB:77:C4:A5:8E:D6:3E:13:36:01:6B:BC:D7
Certificate issuer: /CN=A91529FC/serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0
Certificate serial: 6C
Authority key identifier: E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/98B85094A11811EB896FE30DC4F9AE02.roa
Signing time: Mon 19 Apr 2021 14:07:38 +0000
ROA not before: Mon 19 Apr 2021 14:07:38 +0000
ROA not after: Sat 28 May 2022 00:00:00 +0000
asID: 58280
IP address blocks: 103.162.143.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108 (0x6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91529FC/serialNumber=E458EA304009873C8884AF89AA931D48BA859CD0
Validity
Not Before: Apr 19 14:07:38 2021 GMT
Not After : May 28 00:00:00 2022 GMT
Subject: CN=607d8eaa-25fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:17:c4:4d:d5:95:71:ab:46:91:7a:da:e8:15:
2e:fa:42:6f:90:e3:84:8d:16:23:36:94:45:7c:10:
8c:05:be:74:41:27:85:5c:07:7f:96:ce:b7:db:1e:
ad:89:9c:dd:3f:6d:82:a2:45:0a:44:b0:d7:e2:e7:
56:c8:81:22:a7:58:72:28:52:6d:3d:57:bd:2d:41:
68:03:e4:26:17:8f:f0:61:22:cc:93:ab:ce:0a:43:
35:87:7d:d5:18:76:84:bf:6a:89:73:eb:0a:ff:d5:
f7:b5:c3:90:53:d3:04:92:c8:dd:c9:57:79:c6:b4:
82:d4:bd:9f:09:84:51:a0:25:cf:b7:90:f3:6f:1e:
37:b1:58:f2:ef:9b:be:b6:6c:db:22:1a:39:fa:00:
00:a0:21:6d:c2:5b:e7:fd:76:3c:d1:17:60:7f:9e:
c1:dd:0a:83:92:4b:da:3c:70:44:5e:f9:01:0c:f5:
8a:af:f6:7f:ec:86:ca:91:53:f0:37:46:88:69:8d:
a0:62:61:b9:3a:db:7a:ca:2e:23:9e:47:74:6b:41:
b3:25:f1:d2:0a:e9:ba:5f:75:bd:3d:b5:06:9e:1d:
04:a8:3c:0c:9c:91:37:8d:fe:4a:39:2e:d1:b1:61:
a4:bf:9d:5b:df:21:64:25:98:1f:ce:18:34:de:e4:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C7:75:CB:B4:64:EA:AB:77:C4:A5:8E:D6:3E:13:36:01:6B:BC:D7
X509v3 Authority Key Identifier:
keyid:E4:58:EA:30:40:09:87:3C:88:84:AF:89:AA:93:1D:48:BA:85:9C:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/5FjqMEAJhzyIhK-JqpMdSLqFnNA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5FjqMEAJhzyIhK-JqpMdSLqFnNA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91529FC/D69F74B877E811EBB7F99A40C4F9AE02/98B85094A11811EB896FE30DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.162.143.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:17:56:76:dd:65:e4:01:62:fb:50:85:a6:78:4c:96:31:f5:
c5:c8:e0:25:ef:d9:4d:84:4c:03:03:15:fc:4e:0a:ab:59:ed:
2b:65:e1:61:ca:c4:8c:a8:b3:a7:57:7c:d4:fc:d4:84:96:52:
70:4e:fd:8a:b6:9e:e6:0b:9a:44:a1:5b:5a:9b:0a:5a:fe:1a:
8c:95:53:03:a9:dd:01:b0:73:0c:56:4a:66:98:f0:aa:3b:8e:
bf:a3:69:84:75:a6:8e:c4:c2:96:cd:71:32:f3:2e:0b:9e:30:
4a:c6:9e:e9:a5:f0:df:00:81:48:5c:1d:38:3c:2e:d8:e5:1e:
9f:d3:f9:2e:ab:fc:65:ff:07:6c:90:80:96:69:59:46:b9:5f:
ef:7f:f3:45:e1:ba:ec:53:bb:41:50:f5:68:26:9e:fd:85:24:
4c:55:b6:95:e5:1c:cf:b2:da:43:76:4f:f5:5d:4b:4e:46:e6:
70:6c:57:84:55:05:b3:a4:05:7e:0e:c1:59:76:11:5f:c3:9c:
8e:a7:16:42:f1:46:18:62:27:24:86:0e:6c:b3:07:f1:27:5c:
a6:d5:5f:29:fc:34:b8:e4:eb:d9:ca:29:5d:16:d5:27:8d:e3:
4c:40:40:e6:40:f3:c2:02:fc:5f:02:16:b3:e2:8a:ad:a7:3a:
d2:4d:a0:4a
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MjlGQzExMC8GA1UEBRMoRTQ1OEVBMzA0MDA5ODczQzg4ODRBRjg5QUE5MzFENDhC
QTg1OUNEMDAeFw0yMTA0MTkxNDA3MzhaFw0yMjA1MjgwMDAwMDBaMBgxFjAUBgNV
BAMTDTYwN2Q4ZWFhLTI1ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0F8RN1ZVxq0aRetroFS76Qm+Q44SNFiM2lEV8EIwFvnRBJ4VcB3+WzrfbHq2J
nN0/bYKiRQpEsNfi51bIgSKnWHIoUm09V70tQWgD5CYXj/BhIsyTq84KQzWHfdUY
doS/aolz6wr/1fe1w5BT0wSSyN3JV3nGtILUvZ8JhFGgJc+3kPNvHjexWPLvm762
bNsiGjn6AACgIW3CW+f9djzRF2B/nsHdCoOSS9o8cERe+QEM9Yqv9n/shsqRU/A3
RohpjaBiYbk623rKLiOeR3RrQbMl8dIK6bpfdb09tQaeHQSoPAyckTeN/ko5LtGx
YaS/nVvfIWQlmB/OGDTe5NCTAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU4cd1y7Rk
6qt3xKWO1j4TNgFrvNcwHwYDVR0jBBgwFoAU5FjqMEAJhzyIhK+JqpMdSLqFnNAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyOUZDL0Q2OUY3NEI4NzdF
ODExRUJCN0Y5OUE0MEM0RjlBRTAyLzVGanFNRUFKaHp5SWhLLUpxcE1kU0xxRm5O
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNUZqcU1FQUpoenlJaEstSnFwTWRTTHFGbk5BLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjlGQy9ENjlGNzRCODc3RTgxMUVCQjdGOTlBNDBDNEY5QUUwMi85OEI4NTA5NEEx
MTgxMUVCODk2RkUzMERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGeijzANBgkqhkiG9w0BAQsFAAOCAQEAXxdWdt1l5AFi+1CF
pnhMljH1xcjgJe/ZTYRMAwMV/E4Kq1ntK2XhYcrEjKizp1d81PzUhJZScE79irae
5guaRKFbWpsKWv4ajJVTA6ndAbBzDFZKZpjwqjuOv6NphHWmjsTCls1xMvMuC54w
Ssae6aXw3wCBSFwdODwu2OUen9P5Lqv8Zf8HbJCAlmlZRrlf73/zReG67FO7QVD1
aCae/YUkTFW2leUcz7LaQ3ZP9V1LTkbmcGxXhFUFs6QFfg7BWXYRX8OcjqcWQvFG
GGInJIYObLMH8SdcptVfKfw0uOTr2copXRbVJ43jTEBA5kDzwgL8XwIWs+KKrac6
0k2gSg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:06 2024 by rpki-client on console-fra.rpki-client.org