Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/240070D4B20611EB9937B64AC4F9AE02.roa
File: 240070D4B20611EB9937B64AC4F9AE02.roa (raw, json)
Hash identifier: e3Ug1aYTLJRjq4ls4kvhU4QHBR2icRkTA/Rdf6QfKvU=
Subject key identifier: 31:21:41:FC:19:84:B7:B5:4E:63:98:DD:C4:80:9F:F7:D4:5A:FE:FE
Certificate issuer: /CN=A9196977/serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
Certificate serial: 041B
Authority key identifier: B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/240070D4B20611EB9937B64AC4F9AE02.roa
Signing time: Wed 30 Nov 2022 05:31:06 +0000
ROA not before: Wed 30 Nov 2022 05:31:06 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 138685
IP address blocks: 103.44.44.0/24 maxlen: 24
2001:df1:6c00::/47 maxlen: 47
2001:df1:6c00::/48 maxlen: 48
2001:df1:6c01::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1051 (0x41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9196977/serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
Validity
Not Before: Nov 30 05:31:06 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=6386ea9a-ed54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d1:7b:31:31:86:a2:92:ed:9c:7d:25:dd:61:
6f:1b:bc:2c:c1:36:05:7d:1c:67:a2:ae:0d:19:2f:
17:02:14:7e:9b:09:39:f3:e8:0e:ff:69:28:57:21:
31:56:39:25:6e:7a:c3:3e:b7:5b:53:9c:a1:2b:22:
c1:b8:45:c7:90:80:32:23:19:cf:5f:56:b9:e1:db:
ed:87:4a:62:53:9b:a6:e4:cd:7b:2d:13:85:1c:2e:
00:3f:24:1e:e1:8a:f2:59:91:4f:50:f6:63:8c:eb:
47:22:b4:79:00:24:79:73:d2:58:ac:68:35:15:97:
df:48:26:19:76:81:5c:51:dd:d4:92:46:0b:e0:66:
b8:7d:cf:d3:f4:d6:2a:c1:08:db:bc:c6:bc:56:e3:
ca:8a:73:3a:ed:f0:aa:d4:61:fe:6d:fc:94:20:f5:
cb:97:6f:98:fe:fd:92:36:58:ab:b5:bf:fd:ad:2c:
91:14:62:ee:f2:80:e0:3c:82:39:20:1c:bd:b0:ba:
d2:56:6c:b0:64:1b:c4:d9:a0:d9:0d:d8:3c:67:ce:
2e:5e:dd:65:9a:74:1c:69:e6:5b:a7:a4:c7:ad:b5:
2b:8c:d3:b7:be:3b:62:7a:f2:68:07:7f:9d:fa:71:
d9:64:7d:bd:46:37:db:f7:42:4b:dc:77:e1:a7:43:
31:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:21:41:FC:19:84:B7:B5:4E:63:98:DD:C4:80:9F:F7:D4:5A:FE:FE
X509v3 Authority Key Identifier:
keyid:B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/240070D4B20611EB9937B64AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.44.44.0/24
IPv6:
2001:df1:6c00::/47
Signature Algorithm: sha256WithRSAEncryption
80:d2:7a:b9:da:07:24:82:30:e2:e2:3c:f5:35:85:05:6c:a7:
9c:5c:f1:2b:45:00:37:75:48:d6:d5:24:26:9d:f2:2a:42:6c:
ff:76:e6:12:2c:ea:14:b2:cb:a9:1f:bc:72:59:81:7d:0d:c8:
59:63:12:7f:22:e4:56:25:87:fb:93:87:c9:4e:df:8f:ac:47:
3a:0b:91:0c:05:d7:49:f3:7e:b7:e3:e3:98:88:44:3e:e7:49:
26:10:0b:41:89:a5:26:5c:79:2a:78:4b:5d:0b:7b:17:02:f9:
b1:87:b1:7d:9f:5a:94:d0:df:12:6e:50:84:b6:1b:dc:f6:2b:
ff:99:ed:58:ac:94:ff:fe:fd:c5:d6:47:31:ec:a7:12:cb:4c:
b7:28:f5:cd:3f:33:00:57:93:ba:08:46:e1:f9:ac:62:cd:e0:
be:01:30:95:91:24:bd:10:a6:74:da:fa:b1:77:44:35:e0:80:
c2:c6:a3:95:2b:1b:ad:44:3c:86:df:dc:97:31:b9:1f:78:a7:
28:2c:7d:45:c4:87:fd:a1:8e:6c:0c:cc:2c:71:b6:57:9c:bc:
97:6f:fd:9a:a8:85:4a:b2:ae:c3:c9:84:23:df:ba:59:7e:20:
8a:b7:f2:6c:a4:06:c6:8c:47:dc:03:8c:8f:54:3a:d3:07:b2:
d2:31:d4:77
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICBBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTY5NzcxMTAvBgNVBAUTKEI4MDcwREZDNTdFQUUwRUJFOEFFRTRCQjVDOTFEMDZB
QkQxQ0E3MUEwHhcNMjIxMTMwMDUzMTA2WhcNMjQwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mzg2ZWE5YS1lZDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA39F7MTGGopLtnH0l3WFvG7wswTYFfRxnoq4NGS8XAhR+mwk58+gO/2koVyEx
VjklbnrDPrdbU5yhKyLBuEXHkIAyIxnPX1a54dvth0piU5um5M17LROFHC4APyQe
4YryWZFPUPZjjOtHIrR5ACR5c9JYrGg1FZffSCYZdoFcUd3UkkYL4Ga4fc/T9NYq
wQjbvMa8VuPKinM67fCq1GH+bfyUIPXLl2+Y/v2SNlirtb/9rSyRFGLu8oDgPII5
IBy9sLrSVmywZBvE2aDZDdg8Z84uXt1lmnQcaeZbp6THrbUrjNO3vjtievJoB3+d
+nHZZH29Rjfb90JL3Hfhp0MxuwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFDEhQfwZ
hLe1TmOY3cSAn/fUWv7+MB8GA1UdIwQYMBaAFLgHDfxX6uDr6K7ku1yR0Gq9HKca
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Njk3Ny9COTRCOEM5OEIy
MDQxMUVCOUNDN0Y0NDlDNEY5QUUwMi91QWNOX0ZmcTRPdm9ydVM3WEpIUWFyMGNw
eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VBY05fRmZxNE92b3J1UzdYSkhRYXIwY3B4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTY5NzcvQjk0QjhDOThCMjA0MTFFQjlDQzdGNDQ5QzRGOUFFMDIvMjQwMDcwRDRC
MjA2MTFFQjk5MzdCNjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABnLCwwDwQCAAIwCQMHASABDfFsADANBgkqhkiG9w0BAQsF
AAOCAQEAgNJ6udoHJIIw4uI89TWFBWynnFzxK0UAN3VI1tUkJp3yKkJs/3bmEizq
FLLLqR+8clmBfQ3IWWMSfyLkViWH+5OHyU7fj6xHOguRDAXXSfN+t+PjmIhEPudJ
JhALQYmlJlx5KnhLXQt7FwL5sYexfZ9alNDfEm5QhLYb3PYr/5ntWKyU//79xdZH
MeynEstMtyj1zT8zAFeTughG4fmsYs3gvgEwlZEkvRCmdNr6sXdENeCAwsajlSsb
rUQ8ht/clzG5H3inKCx9RcSH/aGObAzMLHG2V5y8l2/9mqiFSrKuw8mEI9+6WX4g
irfybKQGxoxH3AOMj1Q60wey0jHUdw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:34 2024 by rpki-client on console-fra.rpki-client.org