Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/8F947E3A699E11EC9B77C421C4F9AE02.roa
File: 8F947E3A699E11EC9B77C421C4F9AE02.roa (raw, json)
Hash identifier: E4MvzbkKPEPvyItyMB4T4dJM42KX+LFqWbSfFO5efpY=
Subject key identifier: 4C:80:DF:A3:03:6F:52:EF:8E:95:A9:38:C5:F7:49:BA:0A:24:2A:34
Certificate issuer: /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial: 312D
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/8F947E3A699E11EC9B77C421C4F9AE02.roa
Signing time: Thu 30 Dec 2021 18:30:28 +0000
ROA not before: Thu 30 Dec 2021 18:30:28 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 139088
IP address blocks: 115.186.44.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12589 (0x312d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Validity
Not Before: Dec 30 18:30:28 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61cdfac3-e2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:5e:69:24:d3:47:29:02:fc:d3:86:8c:c2:
12:ec:db:6f:de:f5:8e:c1:81:66:cc:bd:de:a8:1c:
d4:e0:1c:31:4f:e1:85:37:61:b6:8e:43:22:26:cf:
78:63:49:74:c9:65:c1:15:4e:e4:01:01:74:b4:9d:
84:82:5c:36:81:24:78:02:59:a3:cb:f3:ed:74:ee:
bb:26:1a:6b:d9:7d:4f:4d:1e:56:51:6f:13:2a:99:
e5:f5:e3:35:47:23:00:31:cd:d7:0a:89:94:0c:c7:
9b:db:6d:79:a8:29:c3:50:db:7c:52:6a:e0:e4:cd:
7b:b5:fd:4c:83:45:e1:af:41:03:bc:8e:ac:3e:3e:
81:8d:6a:c3:f7:3f:9c:1a:01:9a:b4:d6:fe:d0:c0:
1f:2f:51:15:22:4f:e6:72:58:e9:f1:c2:8f:2d:c3:
60:7f:29:85:77:4e:c3:05:ba:52:57:b0:dd:95:02:
96:78:11:1a:f8:ad:17:93:a5:08:f6:64:a1:e0:8a:
74:7a:b4:1e:73:6f:fa:bf:7e:ef:a1:c4:5f:9b:ea:
f8:79:eb:44:5e:91:f1:ae:50:5f:c3:7f:33:99:bb:
2d:27:ce:cc:d0:87:f4:39:3e:f3:43:68:e4:13:61:
cd:aa:1b:16:77:60:d9:de:3e:ad:da:56:dc:c5:8f:
0b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:80:DF:A3:03:6F:52:EF:8E:95:A9:38:C5:F7:49:BA:0A:24:2A:34
X509v3 Authority Key Identifier:
keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/8F947E3A699E11EC9B77C421C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
115.186.44.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:d2:69:0b:c4:1a:a8:19:4f:0c:ac:ba:fa:5e:da:ac:20:ff:
d0:d6:6b:24:0c:ac:21:97:d3:be:7e:33:84:c9:69:70:5b:24:
21:08:2e:db:66:13:86:1d:d2:59:f0:f0:76:3a:94:0f:f6:33:
66:07:aa:a2:44:53:0d:e7:99:b6:65:5c:23:0f:85:e4:d6:ca:
ee:34:74:9e:6a:6e:04:25:13:3c:a0:25:9a:e3:4c:a1:c3:22:
51:f4:68:4c:ba:c6:74:41:bd:d8:46:ba:ea:5c:a2:89:72:dd:
c4:3f:2d:cd:33:fe:9f:6f:86:97:6f:f1:58:2c:e4:3a:d5:c6:
e1:e7:93:1a:90:72:1b:e3:cd:75:76:15:99:90:48:3e:71:c1:
a3:8b:8b:2e:cb:b6:28:0c:63:7c:3c:52:dc:8e:67:56:3d:f9:
08:e3:76:b8:d2:56:fb:7f:53:45:b9:e2:0b:40:06:f7:8d:43:
71:18:9d:eb:90:77:de:c2:de:60:ad:c3:bf:86:51:6c:08:3f:
6d:89:d5:a3:e1:1e:a0:f6:d7:67:b7:07:2d:c3:39:f3:f8:8b:
e5:aa:c2:d1:9b:d1:14:ea:84:96:85:0a:b0:95:7c:bd:31:d9:
db:d3:09:30:88:c0:85:20:8a:be:a5:f2:ec:6f:7d:df:3f:d6:
70:48:b6:1f
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICMS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjExMjMwMTgzMDI4WhcNMjIwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWNkZmFjMy1lMmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxdxeaSTTRykC/NOGjMIS7Ntv3vWOwYFmzL3eqBzU4BwxT+GFN2G2jkMiJs94
Y0l0yWXBFU7kAQF0tJ2Eglw2gSR4Almjy/PtdO67Jhpr2X1PTR5WUW8TKpnl9eM1
RyMAMc3XComUDMeb2215qCnDUNt8Umrg5M17tf1Mg0Xhr0EDvI6sPj6BjWrD9z+c
GgGatNb+0MAfL1EVIk/mcljp8cKPLcNgfymFd07DBbpSV7DdlQKWeBEa+K0Xk6UI
9mSh4Ip0erQec2/6v37vocRfm+r4eetEXpHxrlBfw38zmbstJ87M0If0OT7zQ2jk
E2HNqhsWd2DZ3j6t2lbcxY8LgQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEyA36MD
b1LvjpWpOMX3SboKJCo0MB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4M0IvRTRFMTBCNEExRDg4MTFFMkEwMTJDQkUxMDhCMDJDRDIvOEY5NDdFM0E2
OTlFMTFFQzlCNzdDNDIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJzuiwwDQYJKoZIhvcNAQELBQADggEBADvSaQvEGqgZTwys
uvpe2qwg/9DWayQMrCGX075+M4TJaXBbJCEILttmE4Yd0lnw8HY6lA/2M2YHqqJE
Uw3nmbZlXCMPheTWyu40dJ5qbgQlEzygJZrjTKHDIlH0aEy6xnRBvdhGuupcooly
3cQ/Lc0z/p9vhpdv8Vgs5DrVxuHnkxqQchvjzXV2FZmQSD5xwaOLiy7LtigMY3w8
UtyOZ1Y9+QjjdrjSVvt/U0W54gtABveNQ3EYneuQd97C3mCtw7+GUWwIP22J1aPh
HqD212e3By3DOfP4i+WqwtGb0RTqhJaFCrCVfL0x2dvTCTCIwIUgir6l8uxvfd8/
1nBIth8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org