Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/6FF34C786BFB11EC8C5F1C14C4F9AE02.roa
File: 6FF34C786BFB11EC8C5F1C14C4F9AE02.roa (raw, json)
Hash identifier: 24rnkLj51LNwZ5Qoo4HiXEOQLQB9ObKQlNVslPkkDX0=
Subject key identifier: DF:4C:E6:E8:39:59:42:4F:C2:E7:44:FE:7C:B0:CF:9F:10:A7:0F:5F
Certificate issuer: /CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Certificate serial: 0417
Authority key identifier: 83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/6FF34C786BFB11EC8C5F1C14C4F9AE02.roa
Signing time: Thu 30 Jun 2022 13:47:13 +0000
ROA not before: Thu 30 Jun 2022 13:47:13 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 135000
IP address blocks: 103.165.158.0/24 maxlen: 24
2407:4ac0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1047 (0x417)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91756B7/serialNumber=83D96F1DEA72A99D234B4456D6F6675DC7E6061E
Validity
Not Before: Jun 30 13:47:13 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=62bda961-998d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:5c:38:8b:46:e7:17:bf:fd:5a:c1:aa:f6:
49:dc:35:28:fe:48:97:4a:0a:e0:76:1a:70:9b:48:
6c:7c:c7:7f:71:cd:fa:6e:05:8f:03:3b:78:12:dd:
8c:a7:62:70:cc:3c:11:53:12:86:9f:a9:d6:b4:89:
ff:6a:13:56:7f:92:1b:1a:f4:c1:d5:ba:76:b8:ad:
6f:96:91:c9:5b:25:95:51:4f:43:0f:a0:85:29:f7:
f2:db:3d:3e:02:e5:bc:97:98:ba:59:13:05:f6:57:
d9:b3:48:15:b2:7a:74:32:35:b8:02:0c:d2:a7:4e:
1e:bb:ab:cd:57:05:0f:5d:74:c2:9a:34:13:76:0b:
ff:84:47:60:79:ec:4a:dd:94:3d:5a:62:26:b6:33:
60:a9:43:81:49:3f:b8:8e:ed:9c:31:5d:7f:2b:41:
c1:2e:d9:55:0a:6a:f1:12:28:32:81:a6:df:14:55:
46:11:3b:f2:78:7d:12:3a:55:9d:9a:23:63:29:3c:
f6:96:43:aa:6e:7b:ee:30:1b:de:c9:04:02:ed:08:
11:c1:a8:e7:0f:e5:a9:68:c2:2d:08:de:3f:f0:b0:
82:8b:45:3a:f9:c8:eb:7e:fa:90:74:7b:0e:7e:32:
04:89:46:7c:1f:fb:a1:7a:8d:a7:b9:12:46:4a:27:
22:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4C:E6:E8:39:59:42:4F:C2:E7:44:FE:7C:B0:CF:9F:10:A7:0F:5F
X509v3 Authority Key Identifier:
keyid:83:D9:6F:1D:EA:72:A9:9D:23:4B:44:56:D6:F6:67:5D:C7:E6:06:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/g9lvHepyqZ0jS0RW1vZnXcfmBh4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g9lvHepyqZ0jS0RW1vZnXcfmBh4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91756B7/95EF7DBA967D11EBADD50D2CC4F9AE02/6FF34C786BFB11EC8C5F1C14C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.158.0/24
IPv6:
2407:4ac0::/48
Signature Algorithm: sha256WithRSAEncryption
95:27:c8:a8:f4:c0:f3:ff:3e:68:0b:05:8d:63:6f:48:22:db:
82:1c:c3:34:e1:f8:ea:e4:80:8f:60:6b:f0:fe:1d:ab:c9:88:
4c:8d:de:6d:43:60:1e:d8:f7:e8:e2:5a:93:eb:32:b5:6e:0a:
b6:ca:3c:7a:d3:f6:3e:3f:2b:2c:54:39:fd:5a:b7:b3:78:65:
58:3d:1d:63:26:6a:47:8c:68:41:62:a8:2a:08:b3:98:75:ca:
c8:36:06:6a:16:7a:19:af:bf:4b:09:0e:22:d8:56:79:7a:ea:
98:35:94:43:d6:16:5f:29:f7:1b:9d:66:3b:3e:a5:9d:42:93:
f4:55:ed:64:0b:0b:78:b9:33:d3:20:29:50:2b:e6:7f:92:72:
06:9b:f2:d3:d7:2c:c8:77:c9:bf:e6:09:4d:de:d0:30:2e:c7:
33:70:1a:b1:e8:7f:f6:0f:90:bf:e3:f9:df:02:d9:21:a7:61:
ff:b7:26:69:b1:94:68:2d:8a:33:e3:b8:80:18:99:b8:3e:e2:
be:48:e5:4c:16:e8:48:13:cf:81:4a:8f:d7:1b:08:a1:64:43:
01:e8:c4:1e:17:a6:75:b7:ed:80:67:c0:c1:4e:8e:20:c8:8b:
17:98:73:46:93:b3:04:5c:00:0f:c4:53:ca:6c:d8:6e:3d:53:
42:5c:05:9b
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU2QjcxMTAvBgNVBAUTKDgzRDk2RjFERUE3MkE5OUQyMzRCNDQ1NkQ2RjY2NzVE
QzdFNjA2MUUwHhcNMjIwNjMwMTM0NzEzWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmJkYTk2MS05OThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnP1cOItG5xe//VrBqvZJ3DUo/kiXSgrgdhpwm0hsfMd/cc36bgWPAzt4Et2M
p2JwzDwRUxKGn6nWtIn/ahNWf5IbGvTB1bp2uK1vlpHJWyWVUU9DD6CFKffy2z0+
AuW8l5i6WRMF9lfZs0gVsnp0MjW4AgzSp04eu6vNVwUPXXTCmjQTdgv/hEdgeexK
3ZQ9WmImtjNgqUOBST+4ju2cMV1/K0HBLtlVCmrxEigygabfFFVGETvyeH0SOlWd
miNjKTz2lkOqbnvuMBveyQQC7QgRwajnD+WpaMItCN4/8LCCi0U6+cjrfvqQdHsO
fjIEiUZ8H/uheo2nuRJGSicixQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFN9M5ug5
WUJPwudE/nywz58Qpw9fMB8GA1UdIwQYMBaAFIPZbx3qcqmdI0tEVtb2Z13H5gYe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTZCNy85NUVGN0RCQTk2
N0QxMUVCQURENTBEMkNDNEY5QUUwMi9nOWx2SGVweXFaMGpTMFJXMXZablhjZm1C
aDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c5bHZIZXB5cVowalMwUlcxdlpuWGNmbUJoNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzU2QjcvOTVFRjdEQkE5NjdEMTFFQkFERDUwRDJDQzRGOUFFMDIvNkZGMzRDNzg2
QkZCMTFFQzhDNUYxQzE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnpZ4wDwQCAAIwCQMHACQHSsAAADANBgkqhkiG9w0BAQsF
AAOCAQEAlSfIqPTA8/8+aAsFjWNvSCLbghzDNOH46uSAj2Br8P4dq8mITI3ebUNg
Htj36OJak+sytW4Ktso8etP2Pj8rLFQ5/Vq3s3hlWD0dYyZqR4xoQWKoKgizmHXK
yDYGahZ6Ga+/SwkOIthWeXrqmDWUQ9YWXyn3G51mOz6lnUKT9FXtZAsLeLkz0yAp
UCvmf5JyBpvy09csyHfJv+YJTd7QMC7HM3Aaseh/9g+Qv+P53wLZIadh/7cmabGU
aC2KM+O4gBiZuD7ivkjlTBboSBPPgUqP1xsIoWRDAejEHhemdbftgGfAwU6OIMiL
F5hzRpOzBFwAD8RTymzYbj1TQlwFmw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org