Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/EDB684DA6ED611EC989AA031C4F9AE02.roa
File: EDB684DA6ED611EC989AA031C4F9AE02.roa (raw, json)
Hash identifier: e12vTp4isG9esWx9vD0qHYQFkUJYsdgfTuHmIpmdmFU=
Subject key identifier: 98:30:34:8F:79:A3:7E:60:22:B8:46:D2:7C:36:5D:6D:79:9A:E7:5D
Certificate issuer: /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial: 0BE7
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/EDB684DA6ED611EC989AA031C4F9AE02.roa
Signing time: Thu 06 Jan 2022 09:56:34 +0000
ROA not before: Thu 06 Jan 2022 09:56:34 +0000
ROA not after: Fri 30 Sep 2022 00:00:00 +0000
asID: 398493
IP address blocks: 103.140.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3047 (0xbe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Validity
Not Before: Jan 6 09:56:34 2022 GMT
Not After : Sep 30 00:00:00 2022 GMT
Subject: CN=61d6bcd1-8bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:90:67:5c:0b:38:5f:95:a9:20:34:61:45:e9:
5b:9b:44:c1:18:dd:23:7c:32:83:68:06:33:33:e5:
19:35:57:a3:55:03:ac:f8:46:85:ee:00:f8:4f:a5:
83:a1:4d:db:0b:2b:9e:19:7d:35:47:84:e9:3e:13:
39:11:5d:cd:ce:33:e0:7b:c0:d5:72:23:2a:28:cc:
d1:37:5f:12:ab:78:67:18:f4:11:8f:23:37:32:2f:
7e:ac:63:76:a3:29:29:c0:bf:55:16:21:49:72:f9:
4a:45:09:27:b5:11:19:0a:89:36:a0:32:bd:6f:a6:
d7:0b:78:d5:b2:3f:c9:16:57:8b:c4:ca:63:ae:22:
d0:7b:0d:9d:f8:39:d4:aa:4f:5c:a3:b3:ec:14:50:
2b:f0:48:1d:1d:18:b5:c6:bb:b8:ef:af:d3:5b:f1:
92:90:c7:0f:4a:05:d9:ff:df:4e:02:d4:6a:64:b8:
cf:17:c8:31:3d:6a:d3:c9:e9:a5:72:04:46:fb:b6:
4c:d1:dc:d1:ad:a8:e6:f2:bc:fb:16:22:dd:74:bc:
9a:81:1f:5c:6f:ce:d7:c6:4a:b1:34:15:a2:c2:20:
28:8e:e5:3a:82:2b:97:f8:c0:35:49:3a:15:d7:11:
91:47:30:5e:78:ff:d7:0e:67:70:b2:88:7e:65:56:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:30:34:8F:79:A3:7E:60:22:B8:46:D2:7C:36:5D:6D:79:9A:E7:5D
X509v3 Authority Key Identifier:
keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/EDB684DA6ED611EC989AA031C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.140.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:77:8f:7d:e5:1c:3e:fe:b7:e3:ce:75:3d:68:bd:e4:1c:c8:
e3:21:6d:16:42:30:0c:71:dd:93:a6:e9:70:1a:90:a3:43:17:
d7:f1:5f:76:82:bf:aa:03:bd:dc:4c:5d:bc:4e:82:10:4d:2d:
90:9a:98:69:79:33:18:e9:13:ee:53:0f:2e:85:c4:f5:b5:2e:
0d:7d:91:54:c8:93:c9:03:30:35:30:cf:35:00:2f:a7:4c:6f:
44:72:66:ce:85:50:a5:73:5e:8f:c0:ee:df:e9:d3:da:84:98:
40:74:51:06:1e:bb:a9:50:3e:fe:b4:f6:d7:ac:95:fb:72:6c:
77:12:1f:d1:8a:9b:fe:98:4d:53:6c:b4:73:b6:75:84:d3:64:
77:ae:b8:45:e3:35:87:6c:f7:15:9e:e4:08:25:6d:90:4f:47:
2f:36:b7:78:22:74:2a:fb:70:d8:29:e4:6c:84:1d:ff:8b:47:
da:23:b3:ac:00:a4:c8:89:f2:08:32:84:b8:bb:5e:cd:1b:ca:
b4:6f:0d:d2:d8:e1:f6:41:d4:33:8f:a9:f3:a7:fb:00:5b:71:
06:de:ba:52:ed:34:e5:c3:c4:87:c5:dc:92:a1:93:88:27:51:
c3:50:25:d2:ac:b8:18:56:1a:3d:32:ff:63:64:f4:1c:cf:33:
d6:db:80:36
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODAzREIxMTAvBgNVBAUTKDM2RUQ4QjY3NUVBNzIzODA4NUFGQTA2QzA5M0U1NEE5
RDNGRDdCNjAwHhcNMjIwMTA2MDk1NjM0WhcNMjIwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWQ2YmNkMS04YmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkZBnXAs4X5WpIDRhRelbm0TBGN0jfDKDaAYzM+UZNVejVQOs+EaF7gD4T6WD
oU3bCyueGX01R4TpPhM5EV3NzjPge8DVciMqKMzRN18Sq3hnGPQRjyM3Mi9+rGN2
oykpwL9VFiFJcvlKRQkntREZCok2oDK9b6bXC3jVsj/JFleLxMpjriLQew2d+DnU
qk9co7PsFFAr8EgdHRi1xru476/TW/GSkMcPSgXZ/99OAtRqZLjPF8gxPWrTyeml
cgRG+7ZM0dzRrajm8rz7FiLddLyagR9cb87XxkqxNBWiwiAojuU6giuX+MA1SToV
1xGRRzBeeP/XDmdwsoh+ZVZRKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJgwNI95
o35gIrhG0nw2XW15muddMB8GA1UdIwQYMBaAFDbti2depyOAha+gbAk+VKnT/Xtg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNEQi8wREMzNUQzRThE
RDQxMUU5QkZFMkM1NTZDNEY5QUUwMi9OdTJMWjE2bkk0Q0ZyNkJzQ1Q1VXFkUDll
MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL051MkxaMTZuSTRDRnI2QnNDVDVVcWRQOWUyQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODAzREIvMERDMzVEM0U4REQ0MTFFOUJGRTJDNTU2QzRGOUFFMDIvRURCNjg0REE2
RUQ2MTFFQzk4OUFBMDMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnjAkwDQYJKoZIhvcNAQELBQADggEBAKB3j33lHD7+t+PO
dT1oveQcyOMhbRZCMAxx3ZOm6XAakKNDF9fxX3aCv6oDvdxMXbxOghBNLZCamGl5
MxjpE+5TDy6FxPW1Lg19kVTIk8kDMDUwzzUAL6dMb0RyZs6FUKVzXo/A7t/p09qE
mEB0UQYeu6lQPv609teslftybHcSH9GKm/6YTVNstHO2dYTTZHeuuEXjNYds9xWe
5AglbZBPRy82t3gidCr7cNgp5GyEHf+LR9ojs6wApMiJ8ggyhLi7Xs0byrRvDdLY
4fZB1DOPqfOn+wBbcQbeulLtNOXDxIfF3JKhk4gnUcNQJdKsuBhWGj0y/2Nk9BzP
M9bbgDY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org