Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/A807C33E664411EDAD821315C4F9AE02.roa
File: A807C33E664411EDAD821315C4F9AE02.roa (raw, json)
Hash identifier: DIMLirsxEFlPex+VJikWF9KbOBTQ6mHgtuQTg/8J1tE=
Subject key identifier: F5:3A:2C:1E:63:62:B5:52:08:B8:64:B1:E3:78:15:E2:71:FB:CE:C7
Certificate issuer: /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Certificate serial: 19
Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/A807C33E664411EDAD821315C4F9AE02.roa
Signing time: Thu 17 Nov 2022 06:54:18 +0000
ROA not before: Thu 17 Nov 2022 06:54:18 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 150340
IP address blocks: 103.17.151.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25 (0x19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Validity
Not Before: Nov 17 06:54:18 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6375da9a-022b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:89:99:80:5c:b6:6c:59:bd:a3:e4:d5:bf:
b4:b3:9c:b3:e6:df:dd:42:ee:90:f4:0c:74:78:88:
25:a0:0c:44:b3:f9:1f:9f:94:f1:70:0b:e5:f2:cc:
01:09:55:af:13:0f:28:64:7e:20:07:1f:55:2c:21:
72:ce:db:ab:bf:56:8f:70:f4:8b:f5:46:31:c4:75:
f1:4f:00:73:4c:b6:50:50:48:f6:de:9d:03:07:e9:
6e:a9:7a:17:d3:c0:e3:0e:61:b8:93:25:c7:55:94:
50:1f:bb:71:27:c1:43:d9:a3:5d:49:5d:bf:d0:36:
51:7d:b4:f3:db:bb:55:e3:5a:f9:f6:70:47:2e:33:
cc:c4:0c:d0:0b:17:11:9c:b7:39:09:ef:2a:b9:5b:
8f:b2:0d:5c:f3:10:13:0c:03:2b:fe:fb:aa:7f:a0:
23:d0:97:39:4a:e8:54:ee:2e:47:4a:b7:80:a3:a9:
15:ad:2e:8a:fa:eb:6d:7c:f5:f9:0e:33:4e:da:bb:
5a:ce:94:0b:25:a0:bc:5c:24:bd:33:0c:d9:74:08:
5a:1e:d2:e0:dc:89:43:1c:e6:f4:ce:89:56:84:c5:
56:5e:76:36:9c:ab:8c:b8:72:83:da:f6:c3:af:17:
ed:fa:e7:c6:db:49:e6:51:8a:31:59:ad:82:bd:5b:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:3A:2C:1E:63:62:B5:52:08:B8:64:B1:E3:78:15:E2:71:FB:CE:C7
X509v3 Authority Key Identifier:
keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/A807C33E664411EDAD821315C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.17.151.0/24
Signature Algorithm: sha256WithRSAEncryption
14:71:08:a7:cb:55:7b:39:3e:82:35:43:ce:48:93:e0:db:9b:
1d:43:dc:e1:b9:b8:b9:01:18:b8:ce:33:be:e7:97:66:4b:7a:
6f:da:97:df:3b:55:93:59:c3:50:a3:bd:83:47:84:99:ac:95:
05:03:fc:3e:ee:99:5b:68:63:02:98:84:98:11:71:fa:26:c3:
8e:50:72:6e:69:65:6b:9f:e4:c7:bd:8b:d2:c3:3a:fb:09:e3:
42:67:ee:ff:fc:1c:e4:e1:1a:87:32:a9:eb:4a:22:66:5a:98:
fa:7a:1e:20:87:d8:8f:17:54:69:bf:1e:1e:d1:0b:71:df:62:
b9:f8:7c:53:27:ef:6b:58:5f:35:ee:f3:f9:7c:49:cf:bf:6a:
85:22:64:83:e6:8d:1f:30:43:32:8d:19:7c:5b:c3:57:05:13:
6a:10:b6:82:90:6b:a0:cc:b9:17:8f:b0:9f:f2:28:99:53:e5:
33:98:92:8f:bd:3e:29:38:11:4c:d8:f6:bb:e0:86:f6:94:8c:
48:ba:6f:7b:41:43:7f:92:22:a2:7e:23:cb:c6:a8:b6:27:f8:
f4:0b:9b:96:1f:55:5a:aa:a8:55:3f:b9:6a:7c:52:1d:88:d9:
cf:d0:0b:92:83:68:24:25:46:9d:2b:d8:30:bc:3d:f5:e0:2a:
2a:29:92:15
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
OUM3NDExMC8GA1UEBRMoMDAxMzc5MjA3OEQxMUIyRjk0MDMwRDdDM0JFRUY1MDEz
MkEyNkQ0MDAeFw0yMjExMTcwNjU0MThaFw0yMzEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTYzNzVkYTlhLTAyMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5BomZgFy2bFm9o+TVv7SznLPm391C7pD0DHR4iCWgDESz+R+flPFwC+XyzAEJ
Va8TDyhkfiAHH1UsIXLO26u/Vo9w9Iv1RjHEdfFPAHNMtlBQSPbenQMH6W6pehfT
wOMOYbiTJcdVlFAfu3EnwUPZo11JXb/QNlF9tPPbu1XjWvn2cEcuM8zEDNALFxGc
tzkJ7yq5W4+yDVzzEBMMAyv++6p/oCPQlzlK6FTuLkdKt4CjqRWtLor662189fkO
M07au1rOlAsloLxcJL0zDNl0CFoe0uDciUMc5vTOiVaExVZedjacq4y4coPa9sOv
F+3658bbSeZRijFZrYK9W2FvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU9TosHmNi
tVIIuGSx43gV4nH7zscwHwYDVR0jBBgwFoAUABN5IHjRGy+UAw18O+71ATKibUAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI5Qzc0LzQ0Q0M5NzFFNEUx
RjExRURCM0U2Q0MyRkM0RjlBRTAyL0FCTjVJSGpSR3ktVUF3MThPLTcxQVRLaWJV
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQUJONUlIalJHeS1VQXcxOE8tNzFBVEtpYlVBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OUM3NC80NENDOTcxRTRFMUYxMUVEQjNFNkNDMkZDNEY5QUUwMi9BODA3QzMzRTY2
NDQxMUVEQUQ4MjEzMTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGcRlzANBgkqhkiG9w0BAQsFAAOCAQEAFHEIp8tVezk+gjVD
zkiT4NubHUPc4bm4uQEYuM4zvueXZkt6b9qX3ztVk1nDUKO9g0eEmayVBQP8Pu6Z
W2hjApiEmBFx+ibDjlBybmlla5/kx72L0sM6+wnjQmfu//wc5OEahzKp60oiZlqY
+noeIIfYjxdUab8eHtELcd9iufh8Uyfva1hfNe7z+XxJz79qhSJkg+aNHzBDMo0Z
fFvDVwUTahC2gpBroMy5F4+wn/IomVPlM5iSj70+KTgRTNj2u+CG9pSMSLpve0FD
f5Iion4jy8aotif49Aublh9VWqqoVT+5anxSHYjZz9ALkoNoJCVGnSvYMLw99eAq
KimSFQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org