Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/7B9CFDC2985611EB99D52A4CC4F9AE02.roa
File: 7B9CFDC2985611EB99D52A4CC4F9AE02.roa (raw, json)
Hash identifier: LxRR2FSryEvdP9bcXnlwyYcm6AKzsQgiS1XYS+mxN+E=
Subject key identifier: D5:42:71:A2:82:23:E5:FA:1B:A4:55:CE:D3:99:9A:7F:0D:4D:33:12
Certificate issuer: /CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C
Certificate serial: 02
Authority key identifier: 38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/7B9CFDC2985611EB99D52A4CC4F9AE02.roa
Signing time: Thu 08 Apr 2021 10:37:57 +0000
ROA not before: Thu 08 Apr 2021 10:37:57 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 136275
IP address blocks: 103.165.162.0/23 maxlen: 23
103.165.162.0/24 maxlen: 24
103.165.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917FEF3/serialNumber=3840522E056D33751FE796A4395B8D4DFDE58F8C
Validity
Not Before: Apr 8 10:37:57 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=606edd05-12ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c6:57:ed:73:d8:d5:49:57:f2:cf:47:de:64:
31:7b:58:09:1f:90:12:bb:ce:17:d1:f3:14:26:b7:
de:92:06:04:53:51:e7:0a:db:b7:0c:28:a2:2a:df:
79:13:df:dd:91:b1:a2:89:c0:ff:90:6b:31:ff:2b:
65:8d:a2:17:61:6e:4c:44:30:ef:b5:70:0e:99:7f:
9f:47:c0:1e:db:b9:8b:e3:4e:87:a9:81:0a:f3:42:
4c:57:aa:32:87:55:12:8c:8b:12:20:a2:02:4d:10:
5a:e6:f5:b8:4e:f1:71:a6:b0:ce:a4:50:33:e4:9c:
d9:a5:33:e2:e4:b7:a0:65:70:09:d0:da:0b:d8:41:
33:1f:48:cf:e6:f8:a6:2f:97:02:cd:6c:f9:ab:43:
66:22:eb:a8:c2:46:5c:bd:46:00:07:32:1c:d1:7f:
6a:df:a7:d8:93:aa:50:f1:88:68:32:01:0c:dd:96:
82:b4:e2:ab:d5:56:d7:8a:c6:3f:0d:5e:6c:34:30:
cd:04:7f:46:47:7b:b8:e6:8a:c2:50:f5:9e:39:5b:
01:8c:cc:bd:68:2b:ad:a3:9a:86:bf:2c:3e:22:db:
ef:7c:d7:6b:62:ec:6c:44:e7:da:e8:ed:ba:d0:1f:
71:c6:e0:4a:9d:0a:b3:3a:fa:d2:00:1f:22:d4:b5:
aa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:42:71:A2:82:23:E5:FA:1B:A4:55:CE:D3:99:9A:7F:0D:4D:33:12
X509v3 Authority Key Identifier:
keyid:38:40:52:2E:05:6D:33:75:1F:E7:96:A4:39:5B:8D:4D:FD:E5:8F:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/OEBSLgVtM3Uf55akOVuNTf3lj4w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OEBSLgVtM3Uf55akOVuNTf3lj4w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FEF3/DDDC01EC985411EBBB47964AC4F9AE02/7B9CFDC2985611EB99D52A4CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.165.162.0/23
Signature Algorithm: sha256WithRSAEncryption
90:31:68:d5:30:76:f2:30:d5:62:85:78:27:ff:5e:54:4f:05:
3f:5e:f9:c8:23:0c:ef:af:97:bd:34:60:c7:1a:26:14:9a:60:
e4:c9:82:b8:cb:74:73:9f:7c:97:b5:c3:6c:96:9d:84:90:ef:
fe:48:27:91:e3:30:f1:5a:66:0a:8c:d7:0f:49:d5:8a:39:fa:
29:8b:ee:21:7e:c6:3f:2e:9f:07:57:bf:81:2a:9f:34:60:23:
3e:c9:13:31:bc:9b:64:b8:fc:54:98:5c:4a:a0:72:54:3e:17:
17:b9:be:74:41:1f:16:65:0d:67:11:72:3a:7c:cb:eb:d6:4f:
64:6d:7d:e5:21:51:6b:24:af:64:ec:d7:71:7d:5e:cd:a1:eb:
35:6b:22:e8:1b:8e:4f:d5:71:72:4d:60:bd:fa:6a:a2:e9:4f:
d1:7c:db:2e:ef:f0:4d:e6:16:5f:e2:ac:93:ac:c5:5d:1d:25:
49:08:a2:8f:cf:a3:26:95:6d:aa:e5:7f:3c:c4:1c:6c:4b:8e:
2e:ab:ec:11:18:97:90:09:fa:16:7c:ee:ec:35:d9:b6:11:5a:
6b:97:aa:07:13:f6:c9:ce:fd:09:7f:3b:6b:23:70:0f:9a:21:
55:23:7f:37:8d:18:b1:78:63:51:40:1f:79:11:d1:fc:d7:2f:
25:3f:5e:22
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RkVGMzExMC8GA1UEBRMoMzg0MDUyMkUwNTZEMzM3NTFGRTc5NkE0Mzk1QjhENERG
REU1OEY4QzAeFw0yMTA0MDgxMDM3NTdaFw0yMjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYwNmVkZDA1LTEyZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDzxlftc9jVSVfyz0feZDF7WAkfkBK7zhfR8xQmt96SBgRTUecK27cMKKIq33kT
392RsaKJwP+QazH/K2WNohdhbkxEMO+1cA6Zf59HwB7buYvjToepgQrzQkxXqjKH
VRKMixIgogJNEFrm9bhO8XGmsM6kUDPknNmlM+Lkt6BlcAnQ2gvYQTMfSM/m+KYv
lwLNbPmrQ2Yi66jCRly9RgAHMhzRf2rfp9iTqlDxiGgyAQzdloK04qvVVteKxj8N
Xmw0MM0Ef0ZHe7jmisJQ9Z45WwGMzL1oK62jmoa/LD4i2+9812ti7GxE59ro7brQ
H3HG4EqdCrM6+tIAHyLUtaobAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU1UJxooIj
5fobpFXO05mafw1NMxIwHwYDVR0jBBgwFoAUOEBSLgVtM3Uf55akOVuNTf3lj4ww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGRUYzL0REREMwMUVDOTg1
NDExRUJCQjQ3OTY0QUM0RjlBRTAyL09FQlNMZ1Z0TTNVZjU1YWtPVnVOVGYzbGo0
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvT0VCU0xnVnRNM1VmNTVha09WdU5UZjNsajR3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RkVGMy9ERERDMDFFQzk4NTQxMUVCQkI0Nzk2NEFDNEY5QUUwMi83QjlDRkRDMjk4
NTYxMUVCOTlENTJBNENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWelojANBgkqhkiG9w0BAQsFAAOCAQEAkDFo1TB28jDVYoV4
J/9eVE8FP175yCMM76+XvTRgxxomFJpg5MmCuMt0c598l7XDbJadhJDv/kgnkeMw
8VpmCozXD0nVijn6KYvuIX7GPy6fB1e/gSqfNGAjPskTMbybZLj8VJhcSqByVD4X
F7m+dEEfFmUNZxFyOnzL69ZPZG195SFRaySvZOzXcX1ezaHrNWsi6BuOT9Vxck1g
vfpqoulP0XzbLu/wTeYWX+Ksk6zFXR0lSQiij8+jJpVtquV/PMQcbEuOLqvsERiX
kAn6Fnzu7DXZthFaa5eqBxP2yc79CX87ayNwD5ohVSN/N40YsXhjUUAfeRHR/Ncv
JT9eIg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org