Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/0D7645D8185211EDADADD265C4F9AE02.roa
File: 0D7645D8185211EDADADD265C4F9AE02.roa (raw, json)
Hash identifier: XhRSm8tGPqfcZ+j6j6fA9r1j0u5OdPNaMh3/XNZhXyg=
Subject key identifier: AD:D5:43:9C:8E:D7:63:DB:5C:82:5E:56:6F:03:AB:3C:A5:5D:EC:A6
Certificate issuer: /CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Certificate serial: 02
Authority key identifier: CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/0D7645D8185211EDADADD265C4F9AE02.roa
Signing time: Wed 10 Aug 2022 02:13:41 +0000
ROA not before: Wed 10 Aug 2022 02:13:41 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 15731
IP address blocks: 103.102.124.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580D2/serialNumber=CA90D4D2125F0336B5398EE09977296F2E4092B4
Validity
Not Before: Aug 10 02:13:41 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=62f31455-5784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4f:2c:90:40:a6:5f:8a:8e:79:b3:d3:5a:c7:
e6:14:5a:39:ec:ec:a5:29:05:ba:2f:b4:01:1a:bc:
31:4c:82:62:66:fe:39:c0:19:f1:37:d0:a7:7f:24:
ea:a0:0e:3c:11:8b:06:14:10:fa:0c:29:09:30:3f:
ed:7e:25:ac:c5:2d:f0:27:ab:42:59:b0:6e:1b:c8:
78:81:57:48:33:21:8b:f7:ac:b4:1b:3a:58:a3:2c:
9c:bc:19:6e:63:ba:99:4c:a9:64:83:83:f6:fb:50:
07:1a:cd:d9:b3:f7:e7:7e:b0:31:f8:a3:cd:42:8d:
83:8b:b2:65:07:8f:b4:05:60:9a:a1:30:5b:e0:d0:
ef:5a:ea:81:65:0b:9e:4e:da:a6:6f:9e:d4:d4:0d:
47:fc:a2:a8:81:49:0e:a1:17:98:de:a3:94:5f:e5:
b7:30:19:91:dc:e6:5f:7a:04:bf:03:44:6d:5b:0a:
b6:78:0b:81:0f:2f:3c:fd:90:06:4f:80:a0:8c:b6:
76:db:13:60:e4:01:b1:b9:60:13:00:2e:28:06:9a:
22:ef:c1:c0:a8:d2:b7:c9:28:0c:12:2b:5c:f1:42:
f9:b5:0e:e2:7c:3b:fd:8e:2e:e3:0b:1d:5e:2f:22:
c9:2d:7e:9d:17:2c:ba:19:dd:dc:f7:7d:57:34:36:
01:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D5:43:9C:8E:D7:63:DB:5C:82:5E:56:6F:03:AB:3C:A5:5D:EC:A6
X509v3 Authority Key Identifier:
keyid:CA:90:D4:D2:12:5F:03:36:B5:39:8E:E0:99:77:29:6F:2E:40:92:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/ypDU0hJfAza1OY7gmXcpby5AkrQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ypDU0hJfAza1OY7gmXcpby5AkrQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580D2/EBC1AC2C184F11EDADBC3C65C4F9AE02/0D7645D8185211EDADADD265C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.124.0/22
Signature Algorithm: sha256WithRSAEncryption
02:a4:2d:9c:50:bd:a0:e3:04:8f:b2:7b:f7:8d:08:1d:f9:c6:
ef:6e:11:d5:5b:74:81:29:32:60:3c:6c:9a:08:40:0f:ec:d0:
6b:7f:50:a7:17:bb:2a:48:0f:51:7b:ab:72:3f:90:63:30:c5:
ba:fa:ed:3f:2f:0b:39:78:18:22:f2:65:c3:f9:cb:54:78:2b:
12:46:d7:c5:32:57:f0:c8:bf:aa:46:49:b6:77:21:6e:5b:c9:
36:bd:05:0f:6f:87:97:61:1e:cf:e0:1f:de:c1:3a:f0:c2:31:
19:d2:99:b2:8d:38:05:bf:fc:a6:a6:d8:7d:c8:60:14:74:2e:
48:19:11:b4:41:12:7a:fb:42:68:c9:ab:77:58:45:6d:2c:39:
b1:02:fb:8d:fd:c1:67:3d:14:c6:e0:f4:31:80:58:64:8d:bc:
69:0a:4a:e8:d4:c3:1e:a4:5c:75:c7:2a:50:84:81:21:41:3b:
c2:76:9c:04:f3:2f:64:b4:60:ba:ac:1e:d5:bd:bd:77:bf:1e:
03:bb:3b:5d:30:99:63:e8:21:47:30:39:ee:76:28:78:5e:5a:
11:e5:5e:1f:d0:d0:ed:49:85:13:55:d3:a7:df:25:a9:91:4d:
2d:99:9f:a8:7e:f6:07:04:95:68:a0:8e:f9:c3:ea:32:e2:6d:
62:28:99:21
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
ODBEMjExMC8GA1UEBRMoQ0E5MEQ0RDIxMjVGMDMzNkI1Mzk4RUUwOTk3NzI5NkYy
RTQwOTJCNDAeFw0yMjA4MTAwMjEzNDFaFw0yMzAxMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyZjMxNDU1LTU3ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUTyyQQKZfio55s9Nax+YUWjns7KUpBbovtAEavDFMgmJm/jnAGfE30Kd/JOqg
DjwRiwYUEPoMKQkwP+1+JazFLfAnq0JZsG4byHiBV0gzIYv3rLQbOlijLJy8GW5j
uplMqWSDg/b7UAcazdmz9+d+sDH4o81CjYOLsmUHj7QFYJqhMFvg0O9a6oFlC55O
2qZvntTUDUf8oqiBSQ6hF5jeo5Rf5bcwGZHc5l96BL8DRG1bCrZ4C4EPLzz9kAZP
gKCMtnbbE2DkAbG5YBMALigGmiLvwcCo0rfJKAwSK1zxQvm1DuJ8O/2OLuMLHV4v
Isktfp0XLLoZ3dz3fVc0NgH/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUrdVDnI7X
Y9tcgl5WbwOrPKVd7KYwHwYDVR0jBBgwFoAUypDU0hJfAza1OY7gmXcpby5AkrQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MEQyL0VCQzFBQzJDMTg0
RjExRURBREJDM0M2NUM0RjlBRTAyL3lwRFUwaEpmQXphMU9ZN2dtWGNwYnk1QWty
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveXBEVTBoSmZBemExT1k3Z21YY3BieTVBa3JRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
ODBEMi9FQkMxQUMyQzE4NEYxMUVEQURCQzNDNjVDNEY5QUUwMi8wRDc2NDVEODE4
NTIxMUVEQURBREQyNjVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAmdmfDANBgkqhkiG9w0BAQsFAAOCAQEAAqQtnFC9oOMEj7J7
940IHfnG724R1Vt0gSkyYDxsmghAD+zQa39Qpxe7KkgPUXurcj+QYzDFuvrtPy8L
OXgYIvJlw/nLVHgrEkbXxTJX8Mi/qkZJtnchblvJNr0FD2+Hl2Eez+Af3sE68MIx
GdKZso04Bb/8pqbYfchgFHQuSBkRtEESevtCaMmrd1hFbSw5sQL7jf3BZz0UxuD0
MYBYZI28aQpK6NTDHqRcdccqUISBIUE7wnacBPMvZLRguqwe1b29d78eA7s7XTCZ
Y+ghRzA57nYoeF5aEeVeH9DQ7UmFE1XTp98lqZFNLZmfqH72BwSVaKCO+cPqMuJt
YiiZIQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org