Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/868014F2750D11EBAFCBD663C4F9AE02.roa
File: 868014F2750D11EBAFCBD663C4F9AE02.roa (raw, json)
Hash identifier: 8b3J36Hf26PwyEw86pD5eLUPsk1zGFC7idUtryhV59o=
Subject key identifier: B5:F7:66:11:0A:9C:53:30:07:F9:43:FC:43:56:92:3B:17:A6:44:79
Certificate issuer: /CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Certificate serial: 03ED
Authority key identifier: A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/868014F2750D11EBAFCBD663C4F9AE02.roa
Signing time: Fri 13 May 2022 13:12:44 +0000
ROA not before: Fri 13 May 2022 13:12:44 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 30058
IP address blocks: 103.110.104.0/24 maxlen: 24
103.110.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1005 (0x3ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917C1DC/serialNumber=A8D576D4AFBB64045BB0295641B99427D7F878F2
Validity
Not Before: May 13 13:12:44 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=627e594c-d9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:02:93:90:d9:9a:0c:f8:b6:6a:5c:a6:47:f4:
70:0a:7b:90:f5:42:ad:8f:9a:b4:28:b3:15:cc:ca:
d2:08:64:23:23:b1:a5:a2:8b:3f:a6:08:fb:64:f6:
3f:1f:75:fa:b4:a5:c7:9f:ee:0d:56:97:c9:b5:e8:
cb:ea:6a:ff:6f:0e:11:07:6a:06:18:cc:da:50:d6:
f9:d3:eb:05:9d:2c:22:5e:6e:1e:fb:01:b8:4f:d8:
03:b1:9b:2d:1d:b0:e5:cd:d7:f7:05:1d:bc:a3:bf:
e4:62:82:32:e6:62:6f:8f:6f:2e:89:a5:95:ee:72:
e6:c8:b8:6e:7d:aa:21:aa:f9:b5:b5:74:10:a2:f8:
78:5e:2a:ff:33:fe:83:b7:5f:f9:a1:44:3e:16:7e:
da:e6:0e:4e:03:a1:7c:de:d3:04:61:7c:e0:72:aa:
72:5a:bb:58:bc:fa:63:17:f9:4b:ae:c1:31:27:8b:
1c:ef:83:07:a6:df:ac:34:87:ee:31:b7:6f:bd:8c:
6b:55:d5:21:91:33:42:40:dd:fb:eb:9c:4e:24:99:
dc:81:34:1c:69:11:f1:f5:40:58:15:32:08:29:99:
02:40:94:9b:77:89:d0:d1:3e:fc:e2:bc:b5:c3:b2:
cd:d3:47:51:e2:f9:51:db:d5:60:b5:71:12:5b:aa:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F7:66:11:0A:9C:53:30:07:F9:43:FC:43:56:92:3B:17:A6:44:79
X509v3 Authority Key Identifier:
keyid:A8:D5:76:D4:AF:BB:64:04:5B:B0:29:56:41:B9:94:27:D7:F8:78:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/qNV21K-7ZARbsClWQbmUJ9f4ePI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qNV21K-7ZARbsClWQbmUJ9f4ePI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C1DC/B2D1DE20594F11EB88F7A73EC4F9AE02/868014F2750D11EBAFCBD663C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.110.104.0/24
103.110.107.0/24
Signature Algorithm: sha256WithRSAEncryption
13:bf:71:70:c3:83:b5:6e:fd:53:1f:9b:d6:9b:c8:ad:69:62:
1e:28:6b:74:c4:96:e1:30:c5:44:4c:1e:a9:a6:dc:d4:a0:73:
c0:17:ae:9c:ff:1b:89:93:eb:34:0d:f1:d3:21:76:cd:07:6a:
6c:df:c5:02:34:5e:04:5a:61:46:83:2c:38:48:5f:c1:80:d3:
6b:f9:25:21:14:b0:42:70:8c:ad:f6:14:0c:28:d9:8e:3a:fa:
79:07:73:64:57:0b:2c:87:c1:bd:c9:fa:2d:21:0d:30:33:dd:
19:42:61:f4:0b:62:0f:f4:41:56:2d:31:08:f7:81:ac:3a:55:
e7:e4:6d:03:50:c2:b4:56:8c:90:15:79:b5:d2:16:13:39:e9:
2a:de:1c:67:7f:d4:a8:a0:28:dc:b1:54:44:ff:c0:c5:3a:a1:
10:eb:30:0c:d3:97:54:0c:79:18:d1:7e:d6:d2:c4:fc:f9:2d:
73:e7:81:41:70:fe:f4:11:53:12:67:64:ba:66:f8:ef:55:fc:
72:da:9a:48:3c:46:19:ab:4b:c5:17:d5:6d:44:07:5b:57:69:
8e:6c:18:96:a8:72:af:cb:f5:3e:f3:d1:fe:c1:78:ef:8c:8b:
40:35:f4:70:bd:e4:f7:a5:fe:9f:66:3a:05:12:97:99:bb:93:
dc:2c:68:db
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0MxREMxMTAvBgNVBAUTKEE4RDU3NkQ0QUZCQjY0MDQ1QkIwMjk1NjQxQjk5NDI3
RDdGODc4RjIwHhcNMjIwNTEzMTMxMjQ0WhcNMjMwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02MjdlNTk0Yy1kOWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2AKTkNmaDPi2alymR/RwCnuQ9UKtj5q0KLMVzMrSCGQjI7Gloos/pgj7ZPY/
H3X6tKXHn+4NVpfJtejL6mr/bw4RB2oGGMzaUNb50+sFnSwiXm4e+wG4T9gDsZst
HbDlzdf3BR28o7/kYoIy5mJvj28uiaWV7nLmyLhufaohqvm1tXQQovh4Xir/M/6D
t1/5oUQ+Fn7a5g5OA6F83tMEYXzgcqpyWrtYvPpjF/lLrsExJ4sc74MHpt+sNIfu
MbdvvYxrVdUhkTNCQN3765xOJJncgTQcaRHx9UBYFTIIKZkCQJSbd4nQ0T784ry1
w7LN00dR4vlR29VgtXESW6rAuQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLX3ZhEK
nFMwB/lD/ENWkjsXpkR5MB8GA1UdIwQYMBaAFKjVdtSvu2QEW7ApVkG5lCfX+Hjy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzFEQy9CMkQxREUyMDU5
NEYxMUVCODhGN0E3M0VDNEY5QUUwMi9xTlYyMUstN1pBUmJzQ2xXUWJtVUo5ZjRl
UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FOVjIxSy03WkFSYnNDbFdRYm1VSjlmNGVQSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0MxREMvQjJEMURFMjA1OTRGMTFFQjg4RjdBNzNFQzRGOUFFMDIvODY4MDE0RjI3
NTBEMTFFQkFGQ0JENjYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnbmgDBABnbmswDQYJKoZIhvcNAQELBQADggEBABO/cXDD
g7Vu/VMfm9abyK1pYh4oa3TEluEwxURMHqmm3NSgc8AXrpz/G4mT6zQN8dMhds0H
amzfxQI0XgRaYUaDLDhIX8GA02v5JSEUsEJwjK32FAwo2Y46+nkHc2RXCyyHwb3J
+i0hDTAz3RlCYfQLYg/0QVYtMQj3gaw6VefkbQNQwrRWjJAVebXSFhM56SreHGd/
1KigKNyxVET/wMU6oRDrMAzTl1QMeRjRftbSxPz5LXPngUFw/vQRUxJnZLpm+O9V
/HLamkg8RhmrS8UX1W1EB1tXaY5sGJaocq/L9T7z0f7BeO+Mi0A19HC95Pel/p9m
OgUSl5m7k9wsaNs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:12 2024 by rpki-client on console-fra.rpki-client.org