Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/089755ACE7CE11ECB55FA472C4F9AE02.roa
File: 089755ACE7CE11ECB55FA472C4F9AE02.roa (raw, json)
Hash identifier: jhk0Cu1YhjWgzgZIC65PghZ0gLqXGYzhI9PWn3nK1xc=
Subject key identifier: 1F:40:C8:07:9E:48:48:74:DE:BC:B6:4C:3A:D9:F9:94:26:B8:B4:3A
Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA
Certificate serial: 0CAD
Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/089755ACE7CE11ECB55FA472C4F9AE02.roa
Signing time: Tue 06 Sep 2022 04:35:40 +0000
ROA not before: Tue 06 Sep 2022 04:35:40 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 149855
IP address blocks: 103.138.253.0/24 maxlen: 24
2001:df0:5f80::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3245 (0xcad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA
Validity
Not Before: Sep 6 04:35:40 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6316ce1b-19f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:82:ca:30:d6:c6:5e:e4:0a:a3:43:76:11:e9:
2b:1c:0c:b0:0d:05:c3:b4:05:41:28:2c:c4:48:bd:
29:a1:5b:c5:0c:b4:ba:51:ba:dc:f6:f5:e8:e3:21:
09:14:ec:b7:86:55:6e:68:1f:5e:9d:f2:ea:25:5e:
4f:a4:70:0a:a8:cf:66:99:1d:b7:2f:ba:10:6d:b2:
80:28:7c:52:fb:5d:c9:27:f8:30:53:f1:6a:bb:39:
93:93:f8:58:57:f6:86:bb:3a:58:17:72:a9:dc:40:
c6:f3:27:d4:66:8d:63:99:fb:ce:7b:3d:ad:ee:6d:
6b:84:dd:98:12:c3:c7:68:e7:32:db:b5:67:b9:a3:
97:92:78:f4:cc:9e:92:dd:23:58:5c:03:d8:3e:ed:
45:18:e5:7a:71:8e:6c:90:97:92:ab:2b:44:a2:b9:
0e:80:d3:78:0b:80:9f:e7:9f:d6:43:71:b7:83:9c:
44:97:d9:9c:aa:6d:71:32:ee:8b:a8:b5:8f:54:e2:
0b:55:46:ee:63:e5:63:70:9d:fe:f5:52:76:ca:76:
11:f2:8a:50:73:ea:43:ed:bc:a4:f6:1f:f8:55:bc:
94:3d:58:7a:b0:b1:3c:28:e1:37:de:97:a0:09:0c:
a0:84:fe:1c:e4:df:29:f4:1c:3a:06:99:1a:9c:a9:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:40:C8:07:9E:48:48:74:DE:BC:B6:4C:3A:D9:F9:94:26:B8:B4:3A
X509v3 Authority Key Identifier:
keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/089755ACE7CE11ECB55FA472C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.253.0/24
IPv6:
2001:df0:5f80::/48
Signature Algorithm: sha256WithRSAEncryption
70:7d:30:ef:75:99:71:89:9f:4c:f1:92:d7:a6:09:3c:36:7b:
01:20:fd:41:28:06:9a:e4:6d:78:2c:27:f9:30:db:fb:8a:61:
c6:25:2d:0f:15:39:3d:17:1b:4d:0c:fa:82:46:e8:4b:32:ff:
5e:53:71:29:cf:94:95:9b:ed:f5:37:ff:db:e3:57:8d:e0:0f:
36:2c:0d:a1:1c:6f:b8:a0:81:8d:a8:51:95:94:43:8c:84:a2:
21:a2:3b:ee:e4:4d:bd:1d:ee:eb:45:fa:0e:ef:de:56:38:00:
f9:4f:af:52:25:41:e7:74:50:cf:28:27:ab:1f:27:61:ab:13:
18:20:a8:78:20:e1:ea:64:93:62:b0:f8:f4:22:b0:64:24:31:
3b:80:ae:c0:9b:70:3e:74:9c:d2:5a:0d:12:5e:2b:6c:ce:16:
f3:d6:4d:36:2f:45:b6:99:fa:29:6f:b0:c1:69:17:f0:92:68:
6d:ae:31:b8:88:f8:77:d9:a7:b3:d2:e9:e2:b9:06:b0:35:d9:
ea:82:98:ce:47:3b:77:f2:35:5c:9e:30:74:ab:64:3f:49:d3:
5f:fb:71:fe:45:16:97:04:0a:61:37:1e:69:dc:00:d6:8a:da:
a5:6e:ec:c4:b3:2b:4f:e8:30:bf:4b:58:84:c8:de:ae:3f:58:
aa:09:d1:b2
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgICDK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJGN0YxMTAvBgNVBAUTKEQ1RjZERDYzQzAzODEwNjBBRkZCQzlEMjBFRDMwRjA3
RkJERTg4RUEwHhcNMjIwOTA2MDQzNTQwWhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzE2Y2UxYi0xOWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArILKMNbGXuQKo0N2EekrHAywDQXDtAVBKCzESL0poVvFDLS6Ubrc9vXo4yEJ
FOy3hlVuaB9enfLqJV5PpHAKqM9mmR23L7oQbbKAKHxS+13JJ/gwU/FquzmTk/hY
V/aGuzpYF3Kp3EDG8yfUZo1jmfvOez2t7m1rhN2YEsPHaOcy27VnuaOXknj0zJ6S
3SNYXAPYPu1FGOV6cY5skJeSqytEorkOgNN4C4Cf55/WQ3G3g5xEl9mcqm1xMu6L
qLWPVOILVUbuY+VjcJ3+9VJ2ynYR8opQc+pD7byk9h/4VbyUPVh6sLE8KOE33peg
CQyghP4c5N8p9Bw6BpkanKmDcQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFB9AyAee
SEh03ry2TDrZ+ZQmuLQ6MB8GA1UdIwQYMBaAFNX23WPAOBBgr/vJ0g7TDwf73ojq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkY3Ri80NTNFQjZGNDg3
NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVHQ3YtOG5TRHRNUEJfdmVp
T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFmYmRZOEE0RUdDdi04blNEdE1QQl92ZWlPby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QkJGN0YvNDUzRUI2RjQ4NzQ1MTFFOUJGODY0NDVDQzRGOUFFMDIvMDg5NzU1QUNF
N0NFMTFFQ0I1NUZBNDcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E
ITAfMAwEAgABMAYDBABniv0wDwQCAAIwCQMHACABDfBfgDANBgkqhkiG9w0BAQsF
AAOCAQEAcH0w73WZcYmfTPGS16YJPDZ7ASD9QSgGmuRteCwn+TDb+4phxiUtDxU5
PRcbTQz6gkboSzL/XlNxKc+UlZvt9Tf/2+NXjeAPNiwNoRxvuKCBjahRlZRDjISi
IaI77uRNvR3u60X6Du/eVjgA+U+vUiVB53RQzygnqx8nYasTGCCoeCDh6mSTYrD4
9CKwZCQxO4CuwJtwPnSc0loNEl4rbM4W89ZNNi9Ftpn6KW+wwWkX8JJoba4xuIj4
d9mns9Lp4rkGsDXZ6oKYzkc7d/I1XJ4wdKtkP0nTX/tx/kUWlwQKYTceadwA1ora
pW7sxLMrT+gwv0tYhMjerj9YqgnRsg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:39 2024 by rpki-client on console-fra.rpki-client.org