Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/681F501435CA11EA97945516C4F9AE02.roa
File: 681F501435CA11EA97945516C4F9AE02.roa (raw, json)
Hash identifier: Jtu6S92EoNU4Iflbg/FTsGSapxFNBOKMbRw/3UwecEk=
Subject key identifier: 0F:35:89:E0:5A:5B:24:E2:F3:8C:D8:A7:3D:F9:8A:53:12:65:BB:9B
Certificate issuer: /CN=A91AFA16/serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894
Certificate serial: 0768
Authority key identifier: 52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/681F501435CA11EA97945516C4F9AE02.roa
Signing time: Sat 29 Jan 2022 09:17:09 +0000
ROA not before: Sat 29 Jan 2022 09:17:09 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 139897
IP address blocks: 103.146.194.0/24 maxlen: 24
103.146.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1896 (0x768)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AFA16/serialNumber=52FD1DE24DAF8DD5FC3AA0078B07732FC2747894
Validity
Not Before: Jan 29 09:17:09 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61f50615-260d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:86:17:62:a7:3b:a6:c2:a2:ac:f5:38:d2:
4f:25:1c:e4:b9:1e:31:7d:30:18:8a:d5:f1:ba:8b:
a0:a0:ff:a7:04:17:9d:5f:83:51:30:c4:41:90:0f:
0e:01:34:f3:77:cc:8a:c0:73:7f:01:6b:7c:3b:5f:
93:3a:3f:33:92:81:4c:6c:96:fd:11:43:0f:69:02:
75:ec:d2:8d:db:c1:9b:7f:e7:24:2b:4e:e0:ac:b7:
bf:d6:40:80:f8:76:5d:93:0a:8e:33:47:ad:04:9d:
12:9d:6e:2e:89:d2:75:df:f7:65:0a:94:9f:b4:08:
52:60:ea:8c:07:ad:a4:8b:37:9f:90:a5:9b:6b:71:
60:c4:8a:97:b8:1c:21:4f:c5:83:25:e6:e0:50:e0:
98:6f:b0:47:36:64:4a:df:0d:56:ef:6e:61:46:5b:
38:58:79:6a:ea:2f:0f:7c:b7:d9:80:a8:fb:a1:9e:
7e:fc:0c:29:85:55:59:a3:32:ab:81:97:3d:6a:9b:
32:d2:6e:17:18:f5:0c:6b:ae:c5:b0:0b:c3:17:8a:
13:8f:dc:6d:96:13:6f:20:ed:c9:50:68:a6:d0:46:
a5:c2:4a:4a:1a:bf:29:fc:94:44:5c:5a:99:1d:bd:
5b:9d:dd:c7:b2:af:d7:03:4f:95:da:44:33:f5:e4:
bb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:35:89:E0:5A:5B:24:E2:F3:8C:D8:A7:3D:F9:8A:53:12:65:BB:9B
X509v3 Authority Key Identifier:
keyid:52:FD:1D:E2:4D:AF:8D:D5:FC:3A:A0:07:8B:07:73:2F:C2:74:78:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uv0d4k2vjdX8OqAHiwdzL8J0eJQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFA16/C554208035C911EAB4AFCB15C4F9AE02/681F501435CA11EA97945516C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.194.0/23
Signature Algorithm: sha256WithRSAEncryption
36:3c:87:2d:8a:c7:4e:40:bb:1d:98:2c:e0:b6:a4:4f:48:de:
dd:91:a7:a4:1a:13:bf:f2:45:d6:f5:f9:06:08:fc:db:e8:bd:
0e:58:44:84:ff:2c:4a:c1:24:4e:9d:d6:3d:b7:44:59:b7:1e:
da:30:30:54:93:9f:a0:15:db:2b:f6:c8:7e:ea:3c:85:11:59:
63:0b:48:26:7e:5c:1e:35:be:0a:7b:76:89:57:23:85:ba:8d:
0d:ad:0e:f0:17:7b:99:79:06:ad:cb:6e:0f:a3:13:c5:ff:94:
48:56:e1:30:2f:8a:4d:b3:39:52:10:03:ee:81:54:65:e2:25:
96:d4:a2:e7:02:df:64:2e:aa:14:7b:bc:40:c8:11:ab:13:8f:
ff:39:4b:f6:bb:a3:d9:07:da:0e:bc:8e:62:41:80:38:36:6c:
9f:39:04:b4:ab:a4:a0:66:ef:8b:71:3e:a7:2d:33:5d:b5:a2:
e2:0a:94:17:84:d5:35:d7:7a:91:2b:54:6e:00:52:8c:a2:2c:
a2:78:d0:e5:31:31:d7:8d:0a:6c:e2:58:31:df:be:7c:3b:40:
ab:48:b8:37:d8:95:e5:95:44:cf:76:70:b4:9f:c6:dd:dd:d8:
a8:b1:05:38:bc:0c:69:18:e0:b5:d4:3d:8e:fa:bd:67:ba:7b:
bd:96:ae:c7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB2gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZBMTYxMTAvBgNVBAUTKDUyRkQxREUyNERBRjhERDVGQzNBQTAwNzhCMDc3MzJG
QzI3NDc4OTQwHhcNMjIwMTI5MDkxNzA5WhcNMjMwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWY1MDYxNS0yNjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtB2GF2KnO6bCoqz1ONJPJRzkuR4xfTAYitXxuougoP+nBBedX4NRMMRBkA8O
ATTzd8yKwHN/AWt8O1+TOj8zkoFMbJb9EUMPaQJ17NKN28Gbf+ckK07grLe/1kCA
+HZdkwqOM0etBJ0SnW4uidJ13/dlCpSftAhSYOqMB62kizefkKWba3FgxIqXuBwh
T8WDJebgUOCYb7BHNmRK3w1W725hRls4WHlq6i8PfLfZgKj7oZ5+/AwphVVZozKr
gZc9apsy0m4XGPUMa67FsAvDF4oTj9xtlhNvIO3JUGim0EalwkpKGr8p/JREXFqZ
Hb1bnd3Hsq/XA0+V2kQz9eS78wIDAQABo4IClTCCApEwHQYDVR0OBBYEFA81ieBa
WyTi84zYpz35ilMSZbubMB8GA1UdIwQYMBaAFFL9HeJNr43V/DqgB4sHcy/CdHiU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkExNi9DNTU0MjA4MDM1
QzkxMUVBQjRBRkNCMTVDNEY5QUUwMi9VdjBkNGsydmpkWDhPcUFIaXdkekw4SjBl
SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V2MGQ0azJ2amRYOE9xQUhpd2R6TDhKMGVKUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUZBMTYvQzU1NDIwODAzNUM5MTFFQUI0QUZDQjE1QzRGOUFFMDIvNjgxRjUwMTQz
NUNBMTFFQTk3OTQ1NTE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnksIwDQYJKoZIhvcNAQELBQADggEBADY8hy2Kx05Aux2Y
LOC2pE9I3t2Rp6QaE7/yRdb1+QYI/NvovQ5YRIT/LErBJE6d1j23RFm3HtowMFST
n6AV2yv2yH7qPIURWWMLSCZ+XB41vgp7dolXI4W6jQ2tDvAXe5l5Bq3Lbg+jE8X/
lEhW4TAvik2zOVIQA+6BVGXiJZbUoucC32QuqhR7vEDIEasTj/85S/a7o9kH2g68
jmJBgDg2bJ85BLSrpKBm74txPqctM121ouIKlBeE1TXXepErVG4AUoyiLKJ40OUx
MdeNCmziWDHfvnw7QKtIuDfYleWVRM92cLSfxt3d2KixBTi8DGkY4LXUPY76vWe6
e72Wrsc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:56 2024 by rpki-client on console-ams.rpki-client.org