Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/97A95FFABEDB11EBA6D1DF74C4F9AE02.roa
File: 97A95FFABEDB11EBA6D1DF74C4F9AE02.roa (raw, json)
Hash identifier: OnoiO+RrfYtCt+gTWNd453SsjiTZmHjErJ1vw8YyQeA=
Subject key identifier: 88:51:7C:3A:97:73:69:EA:D8:B3:DE:2F:0C:AD:42:66:7C:E9:2C:EA
Certificate issuer: /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Certificate serial: 0F49
Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/97A95FFABEDB11EBA6D1DF74C4F9AE02.roa
Signing time: Sat 26 Jun 2021 05:54:43 +0000
ROA not before: Sat 26 Jun 2021 05:54:43 +0000
ROA not after: Wed 31 Aug 2022 00:00:00 +0000
asID: 139780
IP address blocks: 103.115.254.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3913 (0xf49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Validity
Not Before: Jun 26 05:54:43 2021 GMT
Not After : Aug 31 00:00:00 2022 GMT
Subject: CN=60d6c122-52c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:f8:8f:3d:04:59:74:8d:8f:b4:0b:fe:c8:
d8:97:57:f7:ec:76:a0:9c:c7:a4:99:35:0d:ac:24:
70:a0:3f:33:01:ae:cb:57:6a:6c:bf:c0:60:08:d2:
af:89:11:2a:02:ec:93:3e:37:71:6b:97:72:97:fd:
a1:79:88:7c:9f:1d:02:e7:1b:6c:71:26:b1:79:d1:
72:9e:8a:f8:bd:c0:a0:25:29:20:41:6d:97:c8:c9:
b3:67:e9:09:fd:b4:3a:fb:b4:bf:ce:4c:67:f2:a5:
ef:9f:46:30:ca:2f:ee:08:22:b5:32:2d:bd:23:9e:
41:b0:77:f6:0f:a6:cf:39:d7:db:74:f7:e9:a1:64:
6c:85:57:37:d4:40:1f:98:1b:d6:8b:7a:10:9d:ba:
fb:91:04:68:27:23:7f:c2:7a:26:fb:2f:bd:f0:75:
3d:d7:12:5f:4e:54:8a:e2:f7:69:46:fb:b0:33:c4:
48:f0:42:f3:cf:18:99:48:5d:43:c4:42:3f:c8:1f:
48:a4:61:cb:4b:c3:23:0d:d4:0f:92:46:53:e4:db:
18:92:05:ee:14:ab:f9:0a:e3:ee:90:c7:a2:73:73:
fe:84:61:59:80:39:7d:67:fa:c7:fb:e5:be:a5:63:
04:e2:2c:7d:e3:80:d3:a2:d2:e4:c8:94:89:8b:d1:
ab:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:51:7C:3A:97:73:69:EA:D8:B3:DE:2F:0C:AD:42:66:7C:E9:2C:EA
X509v3 Authority Key Identifier:
keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/97A95FFABEDB11EBA6D1DF74C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.115.254.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f4:04:31:80:03:05:3c:f2:25:d9:06:04:be:50:37:3c:47:
32:ac:cc:85:92:6a:94:b8:da:6e:30:75:72:68:f5:f1:37:7a:
62:4f:3c:af:21:c0:86:0f:c6:7d:29:72:6c:24:ea:d3:66:19:
24:65:f7:fe:2a:22:1d:c7:4e:2f:3f:6b:65:ff:8f:0d:2e:ff:
9b:52:55:f0:61:db:31:a5:56:2b:01:be:eb:ac:70:9a:d2:0e:
b9:e1:47:82:bb:6b:da:10:15:1c:15:cf:c6:4d:38:ba:a6:da:
14:08:34:4e:ef:f2:e0:c6:5f:8c:09:d0:2a:6c:72:87:2e:42:
0d:4e:95:82:d5:98:97:8a:42:7f:3f:57:f4:09:e2:c0:f3:51:
b2:e0:61:0e:5b:6e:7f:68:67:df:56:48:e2:4f:4a:b8:4d:44:
06:56:15:d6:e7:e6:fa:60:a8:53:16:83:eb:11:3b:e2:f0:bc:
d8:08:37:67:ce:01:7e:e9:6b:8d:fb:f8:46:f3:ee:19:18:5e:
c1:cc:3b:d8:9e:b5:26:79:8b:d2:33:57:bd:31:8b:2b:13:ba:
cf:26:ee:9e:8c:88:80:76:0f:58:17:bf:0b:66:5c:d7:02:e6:
7c:ee:7f:e2:2d:b0:a0:81:da:31:de:6e:52:8a:89:fd:8e:75:
bd:65:25:4a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICD0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ5RTAxMTAvBgNVBAUTKEI2QzI0M0M2MzlCMzExRTk4NzhFQzA2QkYyNDdGN0FE
RTU0QjA5M0UwHhcNMjEwNjI2MDU1NDQzWhcNMjIwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MGQ2YzEyMi01MmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArkD4jz0EWXSNj7QL/sjYl1f37HagnMekmTUNrCRwoD8zAa7LV2psv8BgCNKv
iREqAuyTPjdxa5dyl/2heYh8nx0C5xtscSaxedFynor4vcCgJSkgQW2XyMmzZ+kJ
/bQ6+7S/zkxn8qXvn0Ywyi/uCCK1Mi29I55BsHf2D6bPOdfbdPfpoWRshVc31EAf
mBvWi3oQnbr7kQRoJyN/wnom+y+98HU91xJfTlSK4vdpRvuwM8RI8ELzzxiZSF1D
xEI/yB9IpGHLS8MjDdQPkkZT5NsYkgXuFKv5CuPukMeic3P+hGFZgDl9Z/rH++W+
pWME4ix944DTotLkyJSJi9GrRQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIhRfDqX
c2nq2LPeLwytQmZ86SzqMB8GA1UdIwQYMBaAFLbCQ8Y5sxHph47Aa/JH963lSwk+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDlFMC81MTU0QTExMDVG
RkExMUU4ODdCNTY5NDJDNEY5QUUwMi90c0pEeGptekVlbUhqc0JyOGtmM3JlVkxD
VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RzSkR4am16RWVtSGpzQnI4a2YzcmVWTENUNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTQ5RTAvNTE1NEExMTA1RkZBMTFFODg3QjU2OTQyQzRGOUFFMDIvOTdBOTVGRkFC
RURCMTFFQkE2RDFERjc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnc/4wDQYJKoZIhvcNAQELBQADggEBAID0BDGAAwU88iXZ
BgS+UDc8RzKszIWSapS42m4wdXJo9fE3emJPPK8hwIYPxn0pcmwk6tNmGSRl9/4q
Ih3HTi8/a2X/jw0u/5tSVfBh2zGlVisBvuuscJrSDrnhR4K7a9oQFRwVz8ZNOLqm
2hQINE7v8uDGX4wJ0CpscocuQg1OlYLVmJeKQn8/V/QJ4sDzUbLgYQ5bbn9oZ99W
SOJPSrhNRAZWFdbn5vpgqFMWg+sRO+LwvNgIN2fOAX7pa437+Ebz7hkYXsHMO9ie
tSZ5i9IzV70xiysTus8m7p6MiIB2D1gXvwtmXNcC5nzuf+ItsKCB2jHeblKKif2O
db1lJUo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:06 2024 by rpki-client on console-ams.rpki-client.org