Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/8D9F1A0ADABC11EDBE298B22C4F9AE02.roa
File: 8D9F1A0ADABC11EDBE298B22C4F9AE02.roa (raw, json)
Hash identifier: eVyzcYYViZKXDZPO95ArFMAIf9/FIpv3IQLe9f2wmZk=
Subject key identifier: 3A:3F:B7:02:CF:BD:DA:86:A6:CD:ED:E5:16:3E:75:45:DD:CB:17:76
Certificate issuer: /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial: 01D0
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/8D9F1A0ADABC11EDBE298B22C4F9AE02.roa
Signing time: Fri 14 Apr 2023 12:04:49 +0000
ROA not before: Fri 14 Apr 2023 12:04:49 +0000
ROA not after: Thu 31 Aug 2023 00:00:00 +0000
asID: 9443
IP address blocks: 203.32.25.0/24 maxlen: 24
203.32.26.0/24 maxlen: 24
203.32.28.0/24 maxlen: 24
203.32.32.0/24 maxlen: 24
203.32.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 464 (0x1d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Validity
Not Before: Apr 14 12:04:49 2023 GMT
Not After : Aug 31 00:00:00 2023 GMT
Subject: CN=64394160-e218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a9:29:e8:9f:89:92:46:92:82:25:f6:7c:ac:
67:9e:b8:97:e8:fd:de:da:ca:1f:15:c0:31:d1:8d:
e0:ae:27:fe:91:38:78:a8:32:4a:17:8f:bf:cc:f0:
06:f0:01:b5:3d:5b:64:41:5c:62:cb:0f:65:fd:59:
05:1d:5d:8f:45:f6:32:7a:df:5b:7e:33:74:54:cd:
f8:89:18:ca:ce:4c:b2:5b:06:b8:70:72:5e:a0:e8:
b9:eb:27:13:6b:31:b1:ba:eb:da:c5:58:1c:f7:7d:
cc:81:c5:9a:49:51:06:cb:96:78:ae:36:b0:20:8a:
a3:fb:b7:de:b6:c9:6c:dd:70:e5:b3:1a:0a:79:05:
f9:34:5e:70:7d:65:17:61:49:39:a0:57:81:a5:8a:
25:b9:75:3b:10:1d:dc:88:9b:4d:b0:fe:a3:f4:8e:
6b:e7:4a:86:a7:05:91:4d:9b:79:ca:2d:b1:6b:86:
1c:29:7a:cf:42:23:dc:03:00:16:0a:7a:48:f0:3f:
bd:d6:50:4d:b3:55:c1:30:8e:34:2e:15:8b:e3:d7:
e6:02:ce:f6:af:52:d3:9c:33:cb:e8:d2:3a:35:0f:
d2:a4:09:80:34:38:8c:48:d7:67:50:9f:cd:06:fd:
c3:d1:db:fa:ff:e1:43:f3:c0:3f:f0:40:b1:11:83:
86:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:3F:B7:02:CF:BD:DA:86:A6:CD:ED:E5:16:3E:75:45:DD:CB:17:76
X509v3 Authority Key Identifier:
keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/8D9F1A0ADABC11EDBE298B22C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.32.25.0-203.32.26.255
203.32.28.0/24
203.32.32.0/24
203.32.38.0/24
Signature Algorithm: sha256WithRSAEncryption
27:30:22:ca:5b:5c:d8:08:4e:41:72:8f:6b:e9:c8:b7:05:45:
3a:79:87:bd:46:46:e1:85:c9:2c:f1:c6:30:5f:73:28:96:ed:
8b:5a:53:1d:51:c9:6e:14:69:1e:c3:63:a3:7f:b4:16:f5:75:
09:7b:5b:80:fd:6d:b9:04:c5:39:d4:e2:b3:f3:44:6c:4a:9f:
b0:92:89:80:cf:10:3f:8e:77:2d:34:47:40:92:77:3f:56:c3:
a9:1f:f4:85:16:e3:26:fc:35:f1:93:c4:27:2e:60:fa:ff:a8:
02:f3:ed:21:0e:19:ce:58:d0:48:7c:2c:1e:72:3d:b7:8c:04:
cb:0d:fa:22:5d:55:b7:d0:d6:c7:a5:75:f1:fd:97:af:07:03:
42:41:47:2f:da:3e:5c:44:40:77:8f:ef:3a:d6:b0:2a:08:c1:
d1:ce:ba:1a:6c:cf:21:cb:6d:eb:e5:d9:11:31:5d:1c:b2:49:
95:ad:e9:be:1f:45:95:eb:64:47:42:f3:7e:a2:de:08:aa:c5:
80:cc:ab:6e:2c:4b:f2:8d:93:92:ca:cf:1b:dd:08:36:38:c2:
a6:8e:fb:ad:1c:c2:41:63:a2:3d:17:8c:54:f7:ae:49:23:48:
3e:13:a9:18:a6:3d:52:60:2f:c9:49:ca:f6:39:32:cf:1b:f0:
cb:b0:ca:0e
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF
RDk4NDY0OUQwHhcNMjMwNDE0MTIwNDQ5WhcNMjMwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDM5NDE2MC1lMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1akp6J+JkkaSgiX2fKxnnriX6P3e2sofFcAx0Y3grif+kTh4qDJKF4+/zPAG
8AG1PVtkQVxiyw9l/VkFHV2PRfYyet9bfjN0VM34iRjKzkyyWwa4cHJeoOi56ycT
azGxuuvaxVgc933MgcWaSVEGy5Z4rjawIIqj+7fetsls3XDlsxoKeQX5NF5wfWUX
YUk5oFeBpYoluXU7EB3ciJtNsP6j9I5r50qGpwWRTZt5yi2xa4YcKXrPQiPcAwAW
CnpI8D+91lBNs1XBMI40LhWL49fmAs72r1LTnDPL6NI6NQ/SpAmANDiMSNdnUJ/N
Bv3D0dv6/+FD88A/8ECxEYOG4wIDAQABo4ICrzCCAqswHQYDVR0OBBYEFDo/twLP
vdqGps3t5RY+dUXdyxd2MB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE
NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEZDNzUvM0FBNURFRTBERDU4MTFFQzg3MEZDMjBEQzRGOUFFMDIvOEQ5RjFBMEFE
QUJDMTFFREJFMjk4QjIyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E
KjAoMCYEAgABMCAwDAMEAMsgGQMEAMsgGgMEAMsgHAMEAMsgIAMEAMsgJjANBgkq
hkiG9w0BAQsFAAOCAQEAJzAiyltc2AhOQXKPa+nItwVFOnmHvUZG4YXJLPHGMF9z
KJbti1pTHVHJbhRpHsNjo3+0FvV1CXtbgP1tuQTFOdTis/NEbEqfsJKJgM8QP453
LTRHQJJ3P1bDqR/0hRbjJvw18ZPEJy5g+v+oAvPtIQ4ZzljQSHwsHnI9t4wEyw36
Il1Vt9DWx6V18f2XrwcDQkFHL9o+XERAd4/vOtawKgjB0c66GmzPIctt6+XZETFd
HLJJla3pvh9FletkR0LzfqLeCKrFgMyrbixL8o2TksrPG90INjjCpo77rRzCQWOi
PReMVPeuSSNIPhOpGKY9UmAvyUnK9jkyzxvwy7DKDg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:46 2024 by rpki-client on console-ams.rpki-client.org