Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5C8A9D787B0711ED9D595969C4F9AE02.roa
File: 5C8A9D787B0711ED9D595969C4F9AE02.roa (raw, json)
Hash identifier: V3P/mUo/W/A2Ktx/KnJyR9gXgu62/VQX448Tnctneh4=
Subject key identifier: 9D:C0:E9:B9:3F:89:93:B2:DB:57:E2:E3:8C:F9:F6:15:1D:FB:9C:A6
Certificate issuer: /CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
Certificate serial: 06F0
Authority key identifier: B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5C8A9D787B0711ED9D595969C4F9AE02.roa
Signing time: Tue 13 Dec 2022 16:58:27 +0000
ROA not before: Tue 13 Dec 2022 16:58:27 +0000
ROA not after: Sat 30 Sep 2023 00:00:00 +0000
asID: 140847
IP address blocks: 103.152.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1776 (0x6f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917EDAC/serialNumber=B638B9A9BF7E308F1FBACF3B4C3A44571F29DF77
Validity
Not Before: Dec 13 16:58:27 2022 GMT
Not After : Sep 30 00:00:00 2023 GMT
Subject: CN=6398af32-8295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c1:98:4d:9a:b5:24:f4:50:4e:92:52:e8:d2:
b2:37:c3:05:85:bd:f5:fe:4f:ee:83:3b:57:76:a5:
db:24:f3:96:a2:2f:55:aa:1f:8d:79:87:ae:88:73:
83:33:8f:29:34:37:82:1f:e1:cc:2e:6c:d8:da:98:
29:22:40:8d:41:81:bf:9f:87:34:3e:e0:06:42:9e:
11:8e:0c:84:cc:ef:b7:4f:18:38:d1:a1:76:b7:15:
ea:f5:93:0b:00:33:0a:30:9f:1c:fd:9d:00:e9:de:
4d:a7:89:e3:39:a3:67:5b:99:dc:b6:d4:21:1e:af:
a5:50:6d:a0:ed:ef:a5:9a:ba:ff:6f:48:f0:8d:6e:
8d:bd:6c:05:db:2f:c1:8d:0c:57:17:19:6f:e9:be:
5e:82:6a:59:a5:09:18:f3:3d:9b:76:f4:f8:12:31:
2d:54:54:36:aa:57:c9:e2:56:65:ee:66:0f:c1:46:
b2:30:89:9f:c3:85:2f:a1:08:71:20:83:98:8f:f3:
18:94:52:ef:fa:d7:99:39:e1:49:f3:ff:a0:b9:31:
aa:68:50:da:1e:c4:5a:80:f2:00:46:f0:5a:f2:da:
1a:31:89:cf:15:d4:05:cc:9b:cd:32:a0:d5:fa:08:
58:d4:a1:55:dc:b1:73:7c:ec:4a:59:60:62:86:52:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C0:E9:B9:3F:89:93:B2:DB:57:E2:E3:8C:F9:F6:15:1D:FB:9C:A6
X509v3 Authority Key Identifier:
keyid:B6:38:B9:A9:BF:7E:30:8F:1F:BA:CF:3B:4C:3A:44:57:1F:29:DF:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/tji5qb9-MI8fus87TDpEVx8p33c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tji5qb9-MI8fus87TDpEVx8p33c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917EDAC/583AF204B50711EABCC8940DC4F9AE02/5C8A9D787B0711ED9D595969C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.152.106.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:df:b4:3b:47:dd:98:2b:9f:ad:18:9f:04:e0:64:fb:38:54:
7d:32:3a:ec:4a:7f:5b:b1:d9:9d:87:67:c9:ff:33:b7:bb:a1:
46:bf:3e:c0:98:26:2f:e1:40:22:a4:18:63:8f:b8:0e:41:a2:
43:66:a5:e9:54:5f:31:ab:1d:3a:5f:0f:88:04:7e:58:ae:c5:
72:17:cb:c8:1c:16:85:2b:a1:d0:4c:89:2f:a1:14:00:4b:00:
3f:8c:9b:d2:9b:67:4d:66:8a:ef:07:47:b2:8b:84:76:e9:0d:
37:5d:a4:a8:2d:ba:db:b0:a7:5e:b7:30:16:04:78:1c:76:a0:
ea:26:29:27:03:4c:31:a3:11:0a:89:c3:95:80:51:d3:ef:af:
42:68:a7:bc:1c:c9:eb:4e:4a:13:40:40:70:aa:28:ff:14:f1:
78:cf:82:0e:d6:40:d2:cc:16:ae:5a:00:4f:d4:5c:64:60:0d:
12:04:47:f1:77:f0:07:d8:bb:65:01:b5:90:cc:b2:b2:52:13:
a9:cb:d9:76:cb:0e:db:bd:68:ee:e8:cd:04:6a:a7:5b:ed:01:
50:6b:11:af:14:20:58:79:43:f6:0d:80:90:73:a8:f0:a8:93:
ac:08:0b:e8:3e:ac:89:de:d4:2d:7a:79:bd:af:e2:50:2a:6b:
95:e2:70:95
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBvAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VEQUMxMTAvBgNVBAUTKEI2MzhCOUE5QkY3RTMwOEYxRkJBQ0YzQjRDM0E0NDU3
MUYyOURGNzcwHhcNMjIxMjEzMTY1ODI3WhcNMjMwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mzk4YWYzMi04Mjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2sGYTZq1JPRQTpJS6NKyN8MFhb31/k/ugztXdqXbJPOWoi9Vqh+NeYeuiHOD
M48pNDeCH+HMLmzY2pgpIkCNQYG/n4c0PuAGQp4RjgyEzO+3Txg40aF2txXq9ZML
ADMKMJ8c/Z0A6d5Np4njOaNnW5ncttQhHq+lUG2g7e+lmrr/b0jwjW6NvWwF2y/B
jQxXFxlv6b5egmpZpQkY8z2bdvT4EjEtVFQ2qlfJ4lZl7mYPwUayMImfw4UvoQhx
IIOYj/MYlFLv+teZOeFJ8/+guTGqaFDaHsRagPIARvBa8toaMYnPFdQFzJvNMqDV
+ghY1KFV3LFzfOxKWWBihlKupwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJ3A6bk/
iZOy21fi44z59hUd+5ymMB8GA1UdIwQYMBaAFLY4uam/fjCPH7rPO0w6RFcfKd93
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RURBQy81ODNBRjIwNEI1
MDcxMUVBQkNDODk0MERDNEY5QUUwMi90amk1cWI5LU1JOGZ1czg3VERwRVZ4OHAz
M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RqaTVxYjktTUk4ZnVzODdURHBFVng4cDMzYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VEQUMvNTgzQUYyMDRCNTA3MTFFQUJDQzg5NDBEQzRGOUFFMDIvNUM4QTlENzg3
QjA3MTFFRDlENTk1OTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnmGowDQYJKoZIhvcNAQELBQADggEBAE/ftDtH3Zgrn60Y
nwTgZPs4VH0yOuxKf1ux2Z2HZ8n/M7e7oUa/PsCYJi/hQCKkGGOPuA5BokNmpelU
XzGrHTpfD4gEfliuxXIXy8gcFoUrodBMiS+hFABLAD+Mm9KbZ01miu8HR7KLhHbp
DTddpKgtutuwp163MBYEeBx2oOomKScDTDGjEQqJw5WAUdPvr0Jop7wcyetOShNA
QHCqKP8U8XjPgg7WQNLMFq5aAE/UXGRgDRIER/F38AfYu2UBtZDMsrJSE6nL2XbL
Dtu9aO7ozQRqp1vtAVBrEa8UIFh5Q/YNgJBzqPCok6wIC+g+rIne1C16eb2v4lAq
a5XicJU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:13 2024 by rpki-client on console-fra.rpki-client.org