Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/F6605C0CC2C211EBB3EDE748C4F9AE02.roa
File: F6605C0CC2C211EBB3EDE748C4F9AE02.roa (raw, json)
Hash identifier: wmeSQXQZDCuHh0+KNwBrmk3JiZDGkuKOJkjdOvrEhew=
Subject key identifier: BD:F1:12:61:5A:E7:E4:20:AB:D6:DE:E1:67:CF:AD:51:FB:C8:11:5F
Certificate issuer: /CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
Certificate serial: 057B
Authority key identifier: B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/F6605C0CC2C211EBB3EDE748C4F9AE02.roa
Signing time: Wed 30 Jun 2021 09:00:38 +0000
ROA not before: Wed 30 Jun 2021 09:00:38 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 59353
IP address blocks: 103.230.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1403 (0x57b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9181259/serialNumber=B0B1A5D5592BCE5C81EB726D4640CA955104CE93
Validity
Not Before: Jun 30 09:00:38 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=60dc32b6-cd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ff:75:74:01:0f:63:18:35:96:ab:47:8c:a7:
32:48:72:c8:dc:b3:c5:26:c4:9d:9c:cc:e8:d5:3a:
1a:c5:f6:37:b4:d3:ca:6e:ba:0f:dc:17:bd:0d:13:
f3:88:7f:d4:f7:aa:8a:00:8a:a3:65:ee:5f:37:c2:
e0:a1:80:03:12:5f:37:1b:25:7d:fc:31:ef:ce:18:
a9:db:82:81:45:87:dd:95:8f:f0:fe:b4:81:97:67:
75:b2:50:55:51:44:fd:32:72:b8:8b:aa:44:44:db:
7f:07:ad:d8:49:63:1b:32:a6:fd:7b:10:b7:e5:a0:
0b:56:75:c5:64:37:5d:ef:40:36:67:3e:63:79:2f:
96:e3:96:26:8d:5f:d7:bc:d6:65:42:45:37:1a:41:
eb:1c:02:1c:36:8b:4a:c6:b2:29:c0:ec:c7:15:74:
8f:eb:62:cb:77:a9:11:90:6b:aa:b4:45:e3:4b:e1:
7a:ac:ee:a5:6f:34:e4:d3:41:86:34:5e:3b:be:d9:
e8:0f:46:88:51:f5:3e:92:85:f7:66:b1:1f:8a:bc:
a8:75:27:7d:d5:d8:33:f1:b8:cd:71:16:56:ef:19:
0b:11:01:84:fe:76:b8:2c:6d:01:3c:c1:f5:5f:0a:
0b:19:88:11:43:eb:df:79:5e:62:62:0d:d5:06:6b:
12:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F1:12:61:5A:E7:E4:20:AB:D6:DE:E1:67:CF:AD:51:FB:C8:11:5F
X509v3 Authority Key Identifier:
keyid:B0:B1:A5:D5:59:2B:CE:5C:81:EB:72:6D:46:40:CA:95:51:04:CE:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/sLGl1VkrzlyB63JtRkDKlVEEzpM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLGl1VkrzlyB63JtRkDKlVEEzpM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181259/D4F27582459611EAB0DBE42AC4F9AE02/F6605C0CC2C211EBB3EDE748C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.180.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:38:2a:ed:8f:06:43:3c:3b:df:5c:76:46:b1:55:f5:bb:51:
dd:30:f2:7f:34:3f:28:e5:f4:3a:c1:6b:20:07:0c:68:36:92:
d3:49:ae:6f:6a:0c:04:29:cf:b9:e6:4f:25:18:91:7f:c4:23:
b5:59:a0:e0:50:b8:01:db:32:6d:b7:76:2d:28:e4:50:0f:27:
71:11:bb:59:ee:41:21:cc:c5:f2:98:92:d8:3a:ed:7e:d0:13:
0a:bb:05:0d:d7:7f:66:92:ce:fa:eb:02:b5:32:80:66:08:24:
79:18:5e:6e:c2:8b:2a:26:30:03:46:23:ad:c3:1a:5e:c4:a7:
37:e5:57:42:f1:1d:c4:e0:e7:e5:e6:27:55:b9:c2:01:46:c5:
8a:da:9a:54:2c:04:0e:10:a3:91:e7:1f:e6:d6:4c:82:12:8a:
65:38:fa:ba:6f:94:0c:2b:dd:c3:49:26:b5:24:51:39:3d:81:
2b:d3:a5:92:04:28:86:01:d4:64:f8:bf:7b:42:1c:79:07:e7:
dc:92:77:a8:23:55:a5:24:c7:f1:96:44:6b:04:e2:c8:31:4a:
d9:95:e7:b6:f7:c5:03:82:64:da:d6:70:0b:85:c5:62:e2:fd:
4a:73:5f:4b:79:ad:b1:28:90:56:6c:e4:7d:71:d2:75:9f:d0:
20:06:c5:02
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODEyNTkxMTAvBgNVBAUTKEIwQjFBNUQ1NTkyQkNFNUM4MUVCNzI2RDQ2NDBDQTk1
NTEwNENFOTMwHhcNMjEwNjMwMDkwMDM4WhcNMjIwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MGRjMzJiNi1jZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsf91dAEPYxg1lqtHjKcySHLI3LPFJsSdnMzo1ToaxfY3tNPKbroP3Be9DRPz
iH/U96qKAIqjZe5fN8LgoYADEl83GyV9/DHvzhip24KBRYfdlY/w/rSBl2d1slBV
UUT9MnK4i6pERNt/B63YSWMbMqb9exC35aALVnXFZDdd70A2Zz5jeS+W45YmjV/X
vNZlQkU3GkHrHAIcNotKxrIpwOzHFXSP62LLd6kRkGuqtEXjS+F6rO6lbzTk00GG
NF47vtnoD0aIUfU+koX3ZrEfiryodSd91dgz8bjNcRZW7xkLEQGE/na4LG0BPMH1
XwoLGYgRQ+vfeV5iYg3VBmsSNQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL3xEmFa
5+Qgq9be4WfPrVH7yBFfMB8GA1UdIwQYMBaAFLCxpdVZK85cgetybUZAypVRBM6T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTI1OS9ENEYyNzU4MjQ1
OTYxMUVBQjBEQkU0MkFDNEY5QUUwMi9zTEdsMVZrcnpseUI2M0p0UmtES2xWRUV6
cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NMR2wxVmtyemx5QjYzSnRSa0RLbFZFRXpwTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODEyNTkvRDRGMjc1ODI0NTk2MTFFQUIwREJFNDJBQzRGOUFFMDIvRjY2MDVDMEND
MkMyMTFFQkIzRURFNzQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn5rQwDQYJKoZIhvcNAQELBQADggEBAC44Ku2PBkM8O99c
dkaxVfW7Ud0w8n80Pyjl9DrBayAHDGg2ktNJrm9qDAQpz7nmTyUYkX/EI7VZoOBQ
uAHbMm23di0o5FAPJ3ERu1nuQSHMxfKYktg67X7QEwq7BQ3Xf2aSzvrrArUygGYI
JHkYXm7CiyomMANGI63DGl7EpzflV0LxHcTg5+XmJ1W5wgFGxYramlQsBA4Qo5Hn
H+bWTIISimU4+rpvlAwr3cNJJrUkUTk9gSvTpZIEKIYB1GT4v3tCHHkH59ySd6gj
VaUkx/GWRGsE4sgxStmV57b3xQOCZNrWcAuFxWLi/UpzX0t5rbEokFZs5H1x0nWf
0CAGxQI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:24 2024 by rpki-client on console-ams.rpki-client.org