Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/75CC142ABF9E11ED8B75ED5DC4F9AE02.roa
File: 75CC142ABF9E11ED8B75ED5DC4F9AE02.roa (raw, json)
Hash identifier: zsvjFqV730uznbeTvAhgYxX8HbOQFDfXTQh8ulBrq4M=
Subject key identifier: D1:11:71:F1:98:6B:DD:0D:A0:AE:BB:69:BE:28:1A:8A:3F:DB:90:55
Certificate issuer: /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
Certificate serial: 04C8
Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/75CC142ABF9E11ED8B75ED5DC4F9AE02.roa
Signing time: Fri 10 Mar 2023 23:51:22 +0000
ROA not before: Fri 10 Mar 2023 23:51:22 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 133441
IP address blocks: 103.151.4.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1224 (0x4c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
Validity
Not Before: Mar 10 23:51:22 2023 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=640bc27a-fde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:b3:bf:ce:52:9e:23:57:d0:5a:a5:e4:93:11:
d1:81:4e:fb:01:b6:d2:42:30:74:a1:17:66:cb:3a:
a9:01:1f:17:42:4c:ac:f6:02:73:a0:12:f6:fc:db:
bf:59:68:c3:4a:14:2d:a2:57:86:69:d0:30:28:c3:
3b:e5:5d:6e:71:34:bc:b4:e5:2f:60:3e:04:4a:b9:
a3:99:c7:ff:43:ea:32:85:cd:b0:00:ac:42:23:cd:
4f:ea:79:2c:81:4b:6c:a0:54:d1:59:27:c7:20:e5:
55:8f:76:2e:95:98:5a:ed:e4:95:05:5a:ee:8c:f6:
50:00:ba:d1:b2:8e:34:f8:e8:4b:54:06:08:aa:69:
18:40:6b:0b:8b:fe:20:9e:bf:62:05:65:7d:85:c4:
7d:79:35:5e:75:da:bd:f0:01:f0:cc:57:96:fc:a2:
34:32:f2:e0:e2:e3:22:9f:17:91:88:a2:ea:b9:30:
7e:0b:08:97:dd:2e:7f:84:90:3c:ed:62:bf:35:66:
8d:bc:62:61:c2:54:47:0f:bc:0d:ef:31:bd:5b:0a:
ad:ba:23:76:f5:7b:af:c3:d3:e7:91:0f:0c:e2:65:
8e:99:e5:37:5a:f9:25:ac:81:dc:f0:72:9d:98:d2:
45:09:62:ad:f8:3c:50:b4:ac:c3:35:5a:e9:7d:87:
22:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:11:71:F1:98:6B:DD:0D:A0:AE:BB:69:BE:28:1A:8A:3F:DB:90:55
X509v3 Authority Key Identifier:
keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/75CC142ABF9E11ED8B75ED5DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.151.4.0/24
Signature Algorithm: sha256WithRSAEncryption
36:4f:05:29:9a:b7:be:84:7b:60:0a:6a:7e:15:6a:da:bb:b9:
df:2c:5b:74:59:33:8e:b1:04:3b:78:03:e7:9c:5d:da:d2:e9:
94:de:11:92:d3:85:3d:69:42:fa:ce:52:ea:1b:40:8e:ca:bf:
33:28:c6:84:e9:1e:06:79:70:00:81:78:84:d5:1f:ff:cc:1b:
46:59:d3:dc:c4:a4:b1:c5:82:89:47:d5:11:c3:9e:d8:27:5d:
21:45:7e:de:58:54:0f:c2:6d:f5:2d:47:55:a3:ca:c9:15:71:
ae:e0:59:40:1b:dc:0a:ff:ee:08:4b:d6:dd:15:36:62:70:51:
63:08:03:f6:2c:12:d8:c8:94:67:c5:fc:87:30:91:b5:0b:9e:
6d:d2:27:50:30:67:bb:68:2c:93:99:8b:58:53:73:23:c1:e6:
76:cc:23:50:8c:34:5a:70:a4:82:bd:43:b5:47:c5:6e:d9:f4:
51:0b:92:68:ea:e2:62:4d:84:c2:b2:49:5b:29:e0:4f:15:06:
e9:5f:39:bf:1a:b3:91:02:10:b7:4b:a0:78:e7:60:54:b2:21:
91:71:a1:97:39:fc:98:6f:e6:c2:64:c9:9c:de:08:cf:28:f9:
ff:2b:e6:a1:42:7a:81:35:4d:1d:2b:88:49:59:20:30:d7:9b:
dc:1d:8d:cd
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTYzNTMxMTAvBgNVBAUTKEFBQUVDNzFDQTM0REVGMDhEODhFRTc3QkQ5MUMxNTcx
NzVDQzNDMDkwHhcNMjMwMzEwMjM1MTIyWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDBiYzI3YS1mZGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7bO/zlKeI1fQWqXkkxHRgU77AbbSQjB0oRdmyzqpAR8XQkys9gJzoBL2/Nu/
WWjDShQtoleGadAwKMM75V1ucTS8tOUvYD4ESrmjmcf/Q+oyhc2wAKxCI81P6nks
gUtsoFTRWSfHIOVVj3YulZha7eSVBVrujPZQALrRso40+OhLVAYIqmkYQGsLi/4g
nr9iBWV9hcR9eTVeddq98AHwzFeW/KI0MvLg4uMinxeRiKLquTB+CwiX3S5/hJA8
7WK/NWaNvGJhwlRHD7wN7zG9WwqtuiN29Xuvw9PnkQ8M4mWOmeU3WvklrIHc8HKd
mNJFCWKt+DxQtKzDNVrpfYciZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNERcfGY
a90NoK67ab4oGoo/25BVMB8GA1UdIwQYMBaAFKquxxyjTe8I2I7ne9kcFXF1zDwJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjM1My8zQkZERUQ2NDg2
QkExMUVCQkNDMzk4NzVDNEY5QUUwMi9xcTdISEtOTjd3allqdWQ3MlJ3VmNYWE1Q
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FxN0hIS05ON3dqWWp1ZDcyUndWY1hYTVBBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTYzNTMvM0JGREVENjQ4NkJBMTFFQkJDQzM5ODc1QzRGOUFFMDIvNzVDQzE0MkFC
RjlFMTFFRDhCNzVFRDVEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnlwQwDQYJKoZIhvcNAQELBQADggEBADZPBSmat76Ee2AK
an4Vatq7ud8sW3RZM46xBDt4A+ecXdrS6ZTeEZLThT1pQvrOUuobQI7KvzMoxoTp
HgZ5cACBeITVH//MG0ZZ09zEpLHFgolH1RHDntgnXSFFft5YVA/CbfUtR1WjyskV
ca7gWUAb3Ar/7ghL1t0VNmJwUWMIA/YsEtjIlGfF/IcwkbULnm3SJ1AwZ7toLJOZ
i1hTcyPB5nbMI1CMNFpwpIK9Q7VHxW7Z9FELkmjq4mJNhMKySVsp4E8VBulfOb8a
s5ECELdLoHjnYFSyIZFxoZc5/Jhv5sJkyZzeCM8o+f8r5qFCeoE1TR0riElZIDDX
m9wdjc0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:36 2024 by rpki-client on console-fra.rpki-client.org