Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/150C54A6596A11ECB1394271C4F9AE02.roa
File: 150C54A6596A11ECB1394271C4F9AE02.roa (raw, json)
Hash identifier: NcJD8wO/KTqGEaBY06eXKABljkO1oqflJ7Tn2n7d/Wo=
Subject key identifier: 6C:DB:F9:74:73:CF:D3:39:19:D9:B2:82:5D:46:41:5D:61:DC:0C:6A
Certificate issuer: /CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D
Certificate serial: 03
Authority key identifier: 76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/150C54A6596A11ECB1394271C4F9AE02.roa
Signing time: Fri 10 Dec 2021 03:34:30 +0000
ROA not before: Fri 10 Dec 2021 03:34:30 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 395092
IP address blocks: 45.129.228.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9157DAE/serialNumber=760E6A7F08B72FF80EB56F6750323B164A70DA1D
Validity
Not Before: Dec 10 03:34:30 2021 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=61b2cac5-13de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:a3:a3:f8:49:8d:5e:77:1b:66:f7:84:74:
38:34:ca:50:7e:39:9d:5e:d8:cb:bf:be:d1:bc:d7:
41:e5:b6:50:57:d4:79:a7:9d:f9:c3:ec:37:8d:83:
8d:da:8d:4e:c7:e1:35:34:07:0b:14:4e:41:32:c3:
71:fc:14:00:96:7f:b5:80:d9:11:a3:43:8a:48:ef:
73:ff:8b:66:f0:95:31:15:8a:85:94:0c:7a:20:35:
2b:a7:2f:04:eb:f3:11:24:64:1b:09:6d:1b:8f:9a:
f4:4b:f5:35:72:e6:54:58:f2:e3:05:c0:fa:58:41:
fb:8f:94:c5:19:6e:41:6a:1b:c1:47:37:d0:70:7f:
a3:e9:de:b8:94:20:aa:9d:52:f5:c6:1e:50:e3:57:
91:cd:e9:6e:89:cb:4e:ec:e0:50:24:98:45:4a:02:
96:19:5a:e8:f5:6d:5f:97:4b:19:d8:0b:75:76:f8:
94:a0:9d:da:99:37:51:41:2c:a4:83:dd:21:57:57:
84:84:0d:d9:89:98:ed:50:28:65:a4:aa:92:bf:ac:
f5:68:c6:80:c5:56:92:c8:52:94:50:d2:b1:0d:d6:
7a:22:1f:4b:02:24:4e:9e:b9:09:1e:41:86:a8:41:
da:4c:1c:29:cd:c1:ba:c0:7e:77:29:04:16:20:4f:
72:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DB:F9:74:73:CF:D3:39:19:D9:B2:82:5D:46:41:5D:61:DC:0C:6A
X509v3 Authority Key Identifier:
keyid:76:0E:6A:7F:08:B7:2F:F8:0E:B5:6F:67:50:32:3B:16:4A:70:DA:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dg5qfwi3L_gOtW9nUDI7Fkpw2h0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/5B4C4E36596911EC94A3E770C4F9AE02/150C54A6596A11ECB1394271C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.129.228.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:3d:ac:19:33:da:aa:6e:44:7d:22:49:50:e7:8f:f2:40:50:
4e:37:af:2c:c3:ad:95:21:7c:47:0d:25:70:1f:0d:c0:f7:12:
af:25:32:b0:cf:20:0b:6a:77:4a:73:3c:80:f4:f6:53:00:3a:
91:08:ab:17:a1:2d:f9:e9:69:d6:9c:8b:f5:84:9c:51:e9:c0:
26:f7:29:0b:0d:3b:53:b9:2c:94:0f:43:8e:a4:c6:9e:9a:7d:
b6:51:b6:e5:a6:6d:ea:cd:da:d9:bc:0b:41:df:0d:fa:8b:23:
08:ff:57:5c:dc:6f:7a:94:8a:4b:57:5e:0c:a9:fe:89:0d:85:
1f:e0:50:82:36:4e:f9:de:1f:dd:92:6e:11:6b:1b:f5:67:6d:
9f:47:41:3b:71:71:6e:38:eb:71:4a:fb:98:57:2f:4f:4f:6b:
d9:76:99:78:35:a4:55:b1:24:04:6c:4a:e6:1d:47:ec:3c:58:
7c:31:49:6f:c4:78:b8:01:79:00:7e:05:99:25:96:c8:8b:f6:
0c:73:8b:34:0a:7e:2f:a9:36:ae:ce:32:d0:da:11:45:4b:84:
ff:27:dc:ca:15:14:32:2b:6a:2e:3d:30:d1:8f:ce:37:9c:8d:
7e:24:b4:7c:b2:e1:55:f9:93:eb:29:0e:ca:08:08:00:0c:e8:
9a:d5:35:d3
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
N0RBRTExMC8GA1UEBRMoNzYwRTZBN0YwOEI3MkZGODBFQjU2RjY3NTAzMjNCMTY0
QTcwREExRDAeFw0yMTEyMTAwMzM0MzBaFw0yMzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYxYjJjYWM1LTEzZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC+tKOj+EmNXncbZveEdDg0ylB+OZ1e2Mu/vtG810HltlBX1HmnnfnD7DeNg43a
jU7H4TU0BwsUTkEyw3H8FACWf7WA2RGjQ4pI73P/i2bwlTEVioWUDHogNSunLwTr
8xEkZBsJbRuPmvRL9TVy5lRY8uMFwPpYQfuPlMUZbkFqG8FHN9Bwf6Pp3riUIKqd
UvXGHlDjV5HN6W6Jy07s4FAkmEVKApYZWuj1bV+XSxnYC3V2+JSgndqZN1FBLKSD
3SFXV4SEDdmJmO1QKGWkqpK/rPVoxoDFVpLIUpRQ0rEN1noiH0sCJE6euQkeQYao
QdpMHCnNwbrAfncpBBYgT3JjAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUbNv5dHPP
0zkZ2bKCXUZBXWHcDGowHwYDVR0jBBgwFoAUdg5qfwi3L/gOtW9nUDI7Fkpw2h0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU3REFFLzVCNEM0RTM2NTk2
OTExRUM5NEEzRTc3MEM0RjlBRTAyL2RnNXFmd2kzTF9nT3RXOW5VREk3RmtwdzJo
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZGc1cWZ3aTNMX2dPdFc5blVESTdGa3B3MmgwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0RBRS81QjRDNEUzNjU5NjkxMUVDOTRBM0U3NzBDNEY5QUUwMi8xNTBDNTRBNjU5
NkExMUVDQjEzOTQyNzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC2B5DANBgkqhkiG9w0BAQsFAAOCAQEA1D2sGTPaqm5EfSJJ
UOeP8kBQTjevLMOtlSF8Rw0lcB8NwPcSryUysM8gC2p3SnM8gPT2UwA6kQirF6Et
+elp1pyL9YScUenAJvcpCw07U7kslA9DjqTGnpp9tlG25aZt6s3a2bwLQd8N+osj
CP9XXNxvepSKS1deDKn+iQ2FH+BQgjZO+d4f3ZJuEWsb9Wdtn0dBO3FxbjjrcUr7
mFcvT09r2XaZeDWkVbEkBGxK5h1H7DxYfDFJb8R4uAF5AH4FmSWWyIv2DHOLNAp+
L6k2rs4y0NoRRUuE/yfcyhUUMitqLj0w0Y/ON5yNfiS0fLLhVfmT6ykOyggIAAzo
mtU10w==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org