Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/77F9132A7F9B11EE9E6F9B26C4F9AE02.roa
File: 77F9132A7F9B11EE9E6F9B26C4F9AE02.roa (raw, json)
Hash identifier: Gc/boMIq7UHQZXpNC9GzSafjG/vXBfdTPfidMQrY4qE=
Subject key identifier: BB:10:00:00:34:8B:D4:D0:26:C3:21:A6:92:67:DB:8A:3D:3D:D4:CB
Certificate issuer: /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial: 3409
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/77F9132A7F9B11EE9E6F9B26C4F9AE02.roa
Signing time: Fri 10 Nov 2023 07:33:41 +0000
ROA not before: Fri 10 Nov 2023 07:33:41 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 174
IP address blocks: 116.90.100.0/24 maxlen: 24
116.90.101.0/24 maxlen: 24
116.90.102.0/24 maxlen: 24
116.90.103.0/24 maxlen: 24
116.90.104.0/24 maxlen: 24
116.90.105.0/24 maxlen: 24
116.90.113.0/24 maxlen: 24
116.90.114.0/24 maxlen: 24
116.90.115.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13321 (0x3409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Validity
Not Before: Nov 10 07:33:41 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=654ddcd4-affe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:e0:37:24:19:ce:03:04:52:ac:cf:5c:ef:
5c:76:88:8e:d2:c4:0f:bc:f4:a0:26:fb:5c:da:fb:
c0:56:49:14:68:5e:d4:0b:b6:07:51:d8:f6:bf:b6:
b5:d1:38:1c:47:c5:79:de:48:b6:71:5f:12:cd:5b:
27:09:05:79:8e:fd:32:37:b1:ee:7a:68:d6:c2:89:
b2:f3:6b:85:3b:16:5e:fe:a8:42:78:5c:66:c2:9b:
42:e7:88:4d:48:8d:57:d0:45:3d:f4:fd:72:d0:88:
0c:99:06:b7:14:79:ad:19:90:31:8b:23:4b:89:32:
71:03:61:e3:af:f0:1c:95:d4:02:6d:ba:8f:bc:ad:
52:27:06:d2:22:ac:1a:74:49:14:82:30:7c:b5:94:
25:a4:98:d9:c3:03:82:36:13:45:91:bd:4d:c9:25:
10:8c:53:b1:7b:a0:c0:a0:21:4d:d3:07:39:ca:bf:
18:87:3b:58:99:82:40:38:b4:63:4f:8d:f8:18:f2:
d6:a9:04:5e:f8:95:83:e2:75:2e:4f:ca:9f:05:9a:
6f:39:70:2e:dc:11:c3:ec:06:08:f3:59:a7:a5:2a:
cd:a1:07:14:4f:00:2f:78:78:e9:c5:28:c3:04:0b:
5c:b8:9c:47:23:7e:f8:8f:00:5d:43:9c:c3:fc:df:
e3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:10:00:00:34:8B:D4:D0:26:C3:21:A6:92:67:DB:8A:3D:3D:D4:CB
X509v3 Authority Key Identifier:
keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/77F9132A7F9B11EE9E6F9B26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.90.100.0-116.90.105.255
116.90.113.0-116.90.115.255
Signature Algorithm: sha256WithRSAEncryption
66:21:8e:1d:4a:f1:fd:cf:ae:75:f9:5d:e0:1c:ca:c1:d3:d6:
c5:29:d3:79:61:b5:3a:64:36:84:34:69:69:c2:1c:6b:c8:5d:
5b:1a:59:2a:21:6d:96:40:d7:6a:00:ab:85:5e:a1:6b:4a:37:
3e:3d:2c:c0:fa:8f:f1:e7:52:b7:15:a5:2a:66:fc:38:87:03:
12:15:ee:aa:4f:9c:a0:c7:6d:27:e4:8a:5b:2e:55:39:1d:f5:
fc:e6:97:bb:97:60:2f:03:a7:97:48:e3:98:c4:bf:7d:e0:df:
d3:91:0a:cf:56:07:20:43:b5:a8:d5:8b:a7:76:3a:60:b2:89:
5d:9a:7c:3d:31:bd:59:46:52:f1:eb:b9:0d:53:29:4c:ea:0a:
08:81:95:3b:e4:18:26:a3:ad:7c:f2:10:1b:b2:90:59:6c:cf:
21:89:93:50:c7:f6:3c:7d:d3:fa:55:d2:6f:82:a5:ec:64:85:
a7:aa:c9:d8:fe:6b:57:fd:c4:21:7b:8a:09:ee:96:64:03:d7:
5f:78:2e:b8:aa:d3:14:2b:ab:93:d1:17:e5:dc:6b:82:76:a2:
9b:12:0a:3c:4f:a4:85:81:25:db:a3:dd:74:6e:0b:1c:41:ac:
2c:bc:e8:4d:96:8c:aa:e3:e3:39:9d:e7:21:52:96:35:85:43:
29:b4:2b:56
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICNAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjVEN0UxMTAvBgNVBAUTKDRDQUUzQUVGQjFBQzhBQkREQjk5QkNDRUU0RkE1QTkx
NkQxNTdCMzQwHhcNMjMxMTEwMDczMzQxWhcNMjQwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTRkZGNkNC1hZmZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHPgNyQZzgMEUqzPXO9cdoiO0sQPvPSgJvtc2vvAVkkUaF7UC7YHUdj2v7a1
0TgcR8V53ki2cV8SzVsnCQV5jv0yN7HuemjWwomy82uFOxZe/qhCeFxmwptC54hN
SI1X0EU99P1y0IgMmQa3FHmtGZAxiyNLiTJxA2Hjr/AcldQCbbqPvK1SJwbSIqwa
dEkUgjB8tZQlpJjZwwOCNhNFkb1NySUQjFOxe6DAoCFN0wc5yr8YhztYmYJAOLRj
T434GPLWqQRe+JWD4nUuT8qfBZpvOXAu3BHD7AYI81mnpSrNoQcUTwAveHjpxSjD
BAtcuJxHI374jwBdQ5zD/N/jGwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFLsQAAA0
i9TQJsMhppJn24o9PdTLMB8GA1UdIwQYMBaAFEyuOu+xrIq925m8zuT6WpFtFXs0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUQ3RS9FQ0E2ODIzNDFE
ODcxMUUyOTgzMjJERTAwOEIwMkNEMi9USzQ2NzdHc2lyM2JtYnpPNVBwYWtXMFZl
elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RLNDY3N0dzaXIzYm1iek81UHBha1cwVmV6US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QjVEN0UvRUNBNjgyMzQxRDg3MTFFMjk4MzIyREUwMDhCMDJDRDIvNzdGOTEzMkE3
RjlCMTFFRTlFNkY5QjI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E
JjAkMCIEAgABMBwwDAMEAnRaZAMEAXRaaDAMAwQAdFpxAwQCdFpwMA0GCSqGSIb3
DQEBCwUAA4IBAQBmIY4dSvH9z651+V3gHMrB09bFKdN5YbU6ZDaENGlpwhxryF1b
GlkqIW2WQNdqAKuFXqFrSjc+PSzA+o/x51K3FaUqZvw4hwMSFe6qT5ygx20n5Ipb
LlU5HfX85pe7l2AvA6eXSOOYxL994N/TkQrPVgcgQ7Wo1Yundjpgsoldmnw9Mb1Z
RlLx67kNUylM6goIgZU75Bgmo6188hAbspBZbM8hiZNQx/Y8fdP6VdJvgqXsZIWn
qsnY/mtX/cQhe4oJ7pZkA9dfeC64qtMUK6uT0Rfl3GuCdqKbEgo8T6SFgSXbo910
bgscQawsvOhNloyq4+M5nechUpY1hUMptCtW
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:57 2024 by rpki-client on console-ams.rpki-client.org