Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/EDD035766FD211ED969B8017C4F9AE02.roa
File: EDD035766FD211ED969B8017C4F9AE02.roa (raw, json)
Hash identifier: tFUoveQbVu+iDjHIn1n+RUke0SFrfB5RfaM6dUUCnec=
Subject key identifier: F5:12:70:70:51:AF:50:12:00:42:F2:60:6B:A3:0C:8C:35:35:47:EA
Certificate issuer: /CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Certificate serial: 0D4F
Authority key identifier: 88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/EDD035766FD211ED969B8017C4F9AE02.roa
Signing time: Tue 29 Nov 2022 10:45:24 +0000
ROA not before: Tue 29 Nov 2022 10:45:24 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 133866
IP address blocks: 103.133.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3407 (0xd4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9D0F/serialNumber=88E7B541F42298D6E9B5165D965246CC1CC1F5A2
Validity
Not Before: Nov 29 10:45:24 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=6385e2c4-8463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:a1:fb:74:76:45:46:36:54:eb:8d:67:aa:
40:de:b3:90:67:96:77:7b:56:fa:7f:bd:7a:29:64:
e9:b5:b6:da:02:f8:0a:2a:44:48:15:f1:fb:7c:41:
14:44:14:66:63:56:a4:e0:35:00:36:86:47:e3:e4:
a4:72:f1:49:30:cd:39:98:a1:96:75:5d:4f:25:21:
8e:02:a0:d7:58:dc:a9:25:e0:63:6d:55:f5:89:d0:
97:2d:1e:fb:d0:b5:4e:a9:dc:aa:c3:15:3d:19:23:
ce:66:5d:73:d0:9a:62:6b:92:96:8d:0b:a6:ce:0e:
9b:d2:2a:be:68:ef:97:2c:84:b1:75:82:a8:c0:ac:
10:56:fe:49:af:e4:ca:fc:6e:32:cc:a3:c6:55:1c:
b6:01:7b:66:2d:06:a4:24:13:49:e2:df:b2:f7:21:
53:57:ff:00:d9:3e:62:64:1b:1b:36:48:11:bc:c9:
9c:86:43:b8:09:d8:f2:d0:7b:84:4b:2e:d6:6f:44:
c9:18:1c:41:57:17:10:3c:71:b1:4f:3e:15:a0:61:
4a:f9:2e:7a:b5:53:07:0c:a2:68:df:61:f2:3f:a5:
b4:8a:e8:45:a1:32:ef:54:51:24:04:a2:0c:9b:ea:
ba:1c:96:9e:4d:45:d8:58:c6:7b:d2:5e:e7:a8:7e:
52:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:12:70:70:51:AF:50:12:00:42:F2:60:6B:A3:0C:8C:35:35:47:EA
X509v3 Authority Key Identifier:
keyid:88:E7:B5:41:F4:22:98:D6:E9:B5:16:5D:96:52:46:CC:1C:C1:F5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/iOe1QfQimNbptRZdllJGzBzB9aI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iOe1QfQimNbptRZdllJGzBzB9aI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9D0F/74BE38D680CF11E9ACD71B50C4F9AE02/EDD035766FD211ED969B8017C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.133.141.0/24
Signature Algorithm: sha256WithRSAEncryption
85:dc:cc:f3:c6:89:3b:9f:78:fb:7e:b6:8e:9e:6f:82:84:3d:
45:8e:ff:2e:6a:9f:a1:85:3a:9d:c5:dd:fb:d0:de:21:3d:58:
6e:6e:e5:8d:db:6a:b2:6f:89:4f:2c:b9:6d:86:f5:f5:78:5a:
51:36:91:7d:34:14:79:74:a1:00:e5:ed:2a:6e:c6:c2:ab:7b:
65:13:72:cb:27:d1:e4:29:1f:c4:04:a4:87:52:33:29:d0:1d:
d8:b5:52:85:9f:2d:34:8c:91:00:d7:c2:5c:e3:5e:43:03:1f:
dc:1c:0e:fc:13:9b:66:9d:28:e6:0b:67:32:7a:93:5c:1f:f5:
3c:3d:3a:3f:46:45:87:0f:d3:8d:81:f2:60:f3:1a:b3:d6:53:
78:f3:fc:2f:ea:98:d0:cc:ab:62:2b:d1:84:2e:a3:2c:cc:b6:
bf:74:04:1f:25:60:af:9d:f0:c1:be:2a:82:1e:42:00:1f:e5:
c9:bf:6a:9a:31:a0:d6:d0:54:71:82:c9:99:20:14:67:16:7b:
bb:be:20:46:19:b6:c4:e4:04:57:e6:75:40:c4:fe:27:84:79:
ff:55:b6:15:a7:d4:f0:ff:aa:f8:6f:45:4c:e4:f9:0f:3c:2f:
8a:15:38:55:85:22:be:7c:b8:23:fe:c4:d9:46:05:46:f2:ea:
57:cb:a9:d0
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlEMEYxMTAvBgNVBAUTKDg4RTdCNTQxRjQyMjk4RDZFOUI1MTY1RDk2NTI0NkND
MUNDMUY1QTIwHhcNMjIxMTI5MTA0NTI0WhcNMjMwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mzg1ZTJjNC04NDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp7yh+3R2RUY2VOuNZ6pA3rOQZ5Z3e1b6f716KWTptbbaAvgKKkRIFfH7fEEU
RBRmY1ak4DUANoZH4+SkcvFJMM05mKGWdV1PJSGOAqDXWNypJeBjbVX1idCXLR77
0LVOqdyqwxU9GSPOZl1z0Jpia5KWjQumzg6b0iq+aO+XLISxdYKowKwQVv5Jr+TK
/G4yzKPGVRy2AXtmLQakJBNJ4t+y9yFTV/8A2T5iZBsbNkgRvMmchkO4Cdjy0HuE
Sy7Wb0TJGBxBVxcQPHGxTz4VoGFK+S56tVMHDKJo32HyP6W0iuhFoTLvVFEkBKIM
m+q6HJaeTUXYWMZ70l7nqH5SIwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPUScHBR
r1ASAELyYGujDIw1NUfqMB8GA1UdIwQYMBaAFIjntUH0IpjW6bUWXZZSRswcwfWi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUQwRi83NEJFMzhENjgw
Q0YxMUU5QUNENzFCNTBDNEY5QUUwMi9pT2UxUWZRaW1OYnB0UlpkbGxKR3pCekI5
YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lPZTFRZlFpbU5icHRSWmRsbEpHekJ6QjlhSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTlEMEYvNzRCRTM4RDY4MENGMTFFOUFDRDcxQjUwQzRGOUFFMDIvRUREMDM1NzY2
RkQyMTFFRDk2OUI4MDE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnhY0wDQYJKoZIhvcNAQELBQADggEBAIXczPPGiTufePt+
to6eb4KEPUWO/y5qn6GFOp3F3fvQ3iE9WG5u5Y3barJviU8suW2G9fV4WlE2kX00
FHl0oQDl7SpuxsKre2UTcssn0eQpH8QEpIdSMynQHdi1UoWfLTSMkQDXwlzjXkMD
H9wcDvwTm2adKOYLZzJ6k1wf9Tw9Oj9GRYcP042B8mDzGrPWU3jz/C/qmNDMq2Ir
0YQuoyzMtr90BB8lYK+d8MG+KoIeQgAf5cm/apoxoNbQVHGCyZkgFGcWe7u+IEYZ
tsTkBFfmdUDE/ieEef9VthWn1PD/qvhvRUzk+Q88L4oVOFWFIr58uCP+xNlGBUby
6lfLqdA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:55 2024 by rpki-client on console-ams.rpki-client.org