Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/C23F5B247D6311ECB6056D82C4F9AE02.roa
File: C23F5B247D6311ECB6056D82C4F9AE02.roa (raw, json)
Hash identifier: d3/dWrzkwqH5Yg5A+tO2eD9lQD9cjYwLJ3a0L8rDqIE=
Subject key identifier: 91:16:7E:AA:C6:B0:7F:C9:C2:FA:11:B2:20:D2:DE:51:84:42:19:60
Certificate issuer: /CN=A9167278/serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39
Certificate serial: 0331
Authority key identifier: 2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/C23F5B247D6311ECB6056D82C4F9AE02.roa
Signing time: Mon 24 Jan 2022 22:19:56 +0000
ROA not before: Mon 24 Jan 2022 22:19:56 +0000
ROA not after: Sun 01 May 2022 00:00:00 +0000
asID: 38201
IP address blocks: 103.245.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 817 (0x331)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9167278/serialNumber=2D3EF3960D28A53FCF60E98D017032E928EA7B39
Validity
Not Before: Jan 24 22:19:56 2022 GMT
Not After : May 1 00:00:00 2022 GMT
Subject: CN=61ef260b-983f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0e:75:cb:b0:53:ce:15:7b:74:7e:04:54:36:
00:99:a5:fd:3c:71:74:02:d0:01:a9:9e:8c:cd:29:
19:84:f5:9f:b5:e7:3e:01:06:ca:cf:1e:6a:bb:ec:
6e:d6:d1:80:bd:03:f0:73:c2:5b:f9:79:ab:f1:66:
77:ee:f5:98:30:c6:21:67:15:7f:56:cf:0b:90:f3:
1c:89:bd:9d:1c:5c:d0:a2:ad:52:19:b7:f1:bb:e6:
a9:29:82:58:c6:9b:83:c3:63:80:35:75:45:b3:bd:
9c:89:30:3a:21:1a:af:75:53:cf:bc:dc:9a:39:e8:
74:ba:b3:ca:e6:dd:43:d7:b9:0e:b8:4f:b0:d1:2b:
b5:b9:17:ca:d6:49:6a:5c:0a:81:9a:9d:e4:72:86:
9e:27:3a:1f:54:0c:f1:4a:25:c4:bf:fd:07:0f:2b:
35:5c:35:23:90:cc:e9:ca:16:e7:94:02:e9:15:aa:
2b:8d:de:f3:3b:eb:d0:53:ff:7e:15:bc:5b:c1:12:
a4:51:8c:93:5a:df:8e:79:55:92:bf:0d:fc:23:dc:
42:1d:38:ad:e2:a7:4f:b7:28:10:85:71:70:12:4d:
eb:44:3b:2e:43:e6:63:8f:0b:57:90:26:66:c8:e7:
dc:9c:78:c4:d6:63:31:dd:83:50:f5:ce:c1:e8:6d:
64:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:16:7E:AA:C6:B0:7F:C9:C2:FA:11:B2:20:D2:DE:51:84:42:19:60
X509v3 Authority Key Identifier:
keyid:2D:3E:F3:96:0D:28:A5:3F:CF:60:E9:8D:01:70:32:E9:28:EA:7B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/LT7zlg0opT_PYOmNAXAy6Sjqezk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LT7zlg0opT_PYOmNAXAy6Sjqezk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167278/2AE0AD603B3711EBA75B4D77C4F9AE02/C23F5B247D6311ECB6056D82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.245.160.0/24
Signature Algorithm: sha256WithRSAEncryption
28:9e:61:67:97:8b:6e:7d:55:9c:9e:65:aa:22:54:35:2f:fb:
f7:f8:5b:d5:d4:66:81:bf:bd:1b:e6:a0:8d:14:31:74:fb:9b:
a9:96:50:16:40:56:7e:25:6e:56:93:2e:15:b9:56:b9:16:79:
30:a3:b4:0e:9c:15:45:08:4d:2c:e3:5d:98:60:56:8a:c6:37:
80:a3:18:fe:64:e6:a3:e6:6d:bb:fb:6a:2c:b8:1c:a9:24:c7:
11:f5:dd:99:24:3a:f6:d2:45:70:b1:6b:87:e0:55:ca:33:28:
a1:50:e6:40:1c:92:80:ef:37:9b:b8:d0:c3:6a:10:25:2d:57:
6b:c3:35:96:3c:da:db:4c:a4:2e:ed:2b:49:81:47:af:e8:12:
b1:64:92:d8:fd:0d:75:12:40:a3:c7:cd:05:23:2e:73:d5:3c:
8b:9e:c4:fb:df:4b:7d:33:55:19:b8:cb:ca:56:5a:66:cf:ba:
af:e7:dc:62:91:d3:74:8a:68:39:ef:31:41:0b:cb:a2:b3:06:
7a:70:d9:b6:49:11:93:54:68:2b:7c:74:57:e7:ee:77:9a:e2:
25:e2:56:0c:73:7e:3e:db:d6:5b:65:a1:3d:4c:2c:82:13:06:
a3:02:c1:a3:6c:5b:0b:e9:1f:54:05:f3:7f:30:79:e2:ac:bf:
27:a4:34:e2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjcyNzgxMTAvBgNVBAUTKDJEM0VGMzk2MEQyOEE1M0ZDRjYwRTk4RDAxNzAzMkU5
MjhFQTdCMzkwHhcNMjIwMTI0MjIxOTU2WhcNMjIwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWVmMjYwYi05ODNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApA51y7BTzhV7dH4EVDYAmaX9PHF0AtABqZ6MzSkZhPWftec+AQbKzx5qu+xu
1tGAvQPwc8Jb+Xmr8WZ37vWYMMYhZxV/Vs8LkPMcib2dHFzQoq1SGbfxu+apKYJY
xpuDw2OANXVFs72ciTA6IRqvdVPPvNyaOeh0urPK5t1D17kOuE+w0Su1uRfK1klq
XAqBmp3kcoaeJzofVAzxSiXEv/0HDys1XDUjkMzpyhbnlALpFaorjd7zO+vQU/9+
FbxbwRKkUYyTWt+OeVWSvw38I9xCHTit4qdPtygQhXFwEk3rRDsuQ+ZjjwtXkCZm
yOfcnHjE1mMx3YNQ9c7B6G1k6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFJEWfqrG
sH/JwvoRsiDS3lGEQhlgMB8GA1UdIwQYMBaAFC0+85YNKKU/z2DpjQFwMuko6ns5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzI3OC8yQUUwQUQ2MDNC
MzcxMUVCQTc1QjRENzdDNEY5QUUwMi9MVDd6bGcwb3BUX1BZT21OQVhBeTZTanFl
emsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xUN3psZzBvcFRfUFlPbU5BWEF5NlNqcWV6ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjcyNzgvMkFFMEFENjAzQjM3MTFFQkE3NUI0RDc3QzRGOUFFMDIvQzIzRjVCMjQ3
RDYzMTFFQ0I2MDU2RDgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn9aAwDQYJKoZIhvcNAQELBQADggEBACieYWeXi259VZye
ZaoiVDUv+/f4W9XUZoG/vRvmoI0UMXT7m6mWUBZAVn4lblaTLhW5VrkWeTCjtA6c
FUUITSzjXZhgVorGN4CjGP5k5qPmbbv7aiy4HKkkxxH13ZkkOvbSRXCxa4fgVcoz
KKFQ5kAckoDvN5u40MNqECUtV2vDNZY82ttMpC7tK0mBR6/oErFkktj9DXUSQKPH
zQUjLnPVPIuexPvfS30zVRm4y8pWWmbPuq/n3GKR03SKaDnvMUELy6KzBnpw2bZJ
EZNUaCt8dFfn7nea4iXiVgxzfj7b1ltloT1MLIITBqMCwaNsWwvpH1QF838weeKs
vyekNOI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-ams.rpki-client.org