Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/02381BDCCC8611EC8D238672C4F9AE02.roa
File: 02381BDCCC8611EC8D238672C4F9AE02.roa (raw, json)
Hash identifier: i9h5Keh96Y68+KCZQ4lDxjWxpP/uP633tbP2TfC+LKw=
Subject key identifier: F5:6D:F6:BB:24:2D:3E:AA:D3:3D:46:F5:5D:F9:61:0D:F6:D3:5F:96
Certificate issuer: /CN=A91C53EC/serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72
Certificate serial: 0314
Authority key identifier: FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/02381BDCCC8611EC8D238672C4F9AE02.roa
Signing time: Thu 05 May 2022 15:14:08 +0000
ROA not before: Thu 05 May 2022 15:14:08 +0000
ROA not after: Tue 31 Jan 2023 00:00:00 +0000
asID: 136950
IP address blocks: 103.144.219.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 788 (0x314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C53EC/serialNumber=FADC9764B209F81CF82933226A0669A32A4EDD72
Validity
Not Before: May 5 15:14:08 2022 GMT
Not After : Jan 31 00:00:00 2023 GMT
Subject: CN=6273e9c0-d385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:d2:d4:99:97:5e:19:a6:c9:54:1b:27:6c:
95:4a:72:c3:70:65:2f:19:2e:f9:0d:07:7c:72:a7:
70:ff:c2:d9:3d:93:fe:17:95:31:aa:d7:1f:f1:d6:
1a:7d:0f:42:32:c7:e7:84:6f:67:fa:68:0a:38:64:
b3:73:10:f4:08:1f:c8:ac:db:d0:23:da:f0:82:d8:
41:e5:f5:60:ae:2b:64:65:57:cc:ee:52:10:bc:01:
e2:92:fb:9f:66:8c:4f:74:50:8c:44:b9:11:3f:cd:
ff:21:c3:fd:d3:59:73:04:1a:2f:5b:0b:9f:94:dd:
c3:2d:ff:65:b8:b3:33:f2:62:4f:fe:b4:9a:de:19:
34:6a:3c:0a:6e:a7:a5:75:dd:c9:b6:9c:b6:e4:b8:
8e:07:44:48:c4:33:0d:9b:d2:e2:7f:6c:68:e9:cb:
04:47:d6:a6:0d:bc:72:85:9d:d3:9b:b7:61:c4:b6:
57:e3:bb:3a:c4:b7:6c:71:45:b1:c3:30:f0:c2:cf:
55:54:e7:fe:af:64:da:ac:ac:e4:f8:26:74:cb:1c:
34:7c:24:72:38:8e:ce:5d:93:ea:13:9c:af:0a:68:
eb:f2:d3:40:17:91:66:87:c5:c3:6d:bf:ce:53:1c:
4d:95:d2:14:32:d1:fd:29:00:20:23:54:52:ff:71:
bf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6D:F6:BB:24:2D:3E:AA:D3:3D:46:F5:5D:F9:61:0D:F6:D3:5F:96
X509v3 Authority Key Identifier:
keyid:FA:DC:97:64:B2:09:F8:1C:F8:29:33:22:6A:06:69:A3:2A:4E:DD:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/-tyXZLIJ-Bz4KTMiagZpoypO3XI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tyXZLIJ-Bz4KTMiagZpoypO3XI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C53EC/203CBB64968711EB8AE8132FC4F9AE02/02381BDCCC8611EC8D238672C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.144.219.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:05:eb:6d:5c:59:20:1a:89:08:aa:e6:b6:1f:5c:71:b2:84:
8b:7c:e8:8a:4c:5e:e3:9e:46:b9:48:a1:5f:ee:db:14:f8:4d:
cf:61:5f:0b:c5:cb:5f:3c:30:7d:cf:a4:ba:9c:c7:c3:98:61:
97:bf:7d:06:0c:e8:26:33:fa:c8:2d:71:08:53:b7:ca:72:cd:
9a:bc:5a:3e:cc:e0:55:b8:a9:58:cd:d6:a5:ca:26:22:bc:9c:
d9:58:2b:12:53:0e:86:4e:70:2f:1f:63:27:15:af:78:1d:a4:
37:8b:c7:ed:00:89:9f:73:c9:73:46:3f:51:2b:61:5c:e0:f5:
2e:35:14:c5:13:7a:19:94:28:ec:cf:05:85:3e:23:f8:21:44:
87:36:70:75:c0:76:ec:19:5e:73:f7:2e:db:4d:f6:01:21:b6:
f3:40:a4:20:a9:5a:ff:26:bb:43:65:59:66:f2:ed:2f:31:d4:
8b:0b:ba:0d:73:e6:08:07:d8:f9:93:56:30:38:ce:71:8e:9e:
6f:a7:de:12:a6:b2:3e:e2:86:01:dd:a1:4d:4b:e4:1e:05:d9:
a6:8a:eb:e8:9e:a2:aa:c4:25:06:fe:d7:bf:0b:ca:3b:93:87:
60:1a:15:54:10:78:24:4a:35:7d:51:86:0c:4a:43:40:f4:c5:
86:94:ca:67
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzUzRUMxMTAvBgNVBAUTKEZBREM5NzY0QjIwOUY4MUNGODI5MzMyMjZBMDY2OUEz
MkE0RURENzIwHhcNMjIwNTA1MTUxNDA4WhcNMjMwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MjczZTljMC1kMzg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv7LS1JmXXhmmyVQbJ2yVSnLDcGUvGS75DQd8cqdw/8LZPZP+F5Uxqtcf8dYa
fQ9CMsfnhG9n+mgKOGSzcxD0CB/IrNvQI9rwgthB5fVgritkZVfM7lIQvAHikvuf
ZoxPdFCMRLkRP83/IcP901lzBBovWwuflN3DLf9luLMz8mJP/rSa3hk0ajwKbqel
dd3Jtpy25LiOB0RIxDMNm9Lif2xo6csER9amDbxyhZ3Tm7dhxLZX47s6xLdscUWx
wzDwws9VVOf+r2TarKzk+CZ0yxw0fCRyOI7OXZPqE5yvCmjr8tNAF5Fmh8XDbb/O
UxxNldIUMtH9KQAgI1RS/3G/bwIDAQABo4IClTCCApEwHQYDVR0OBBYEFPVt9rsk
LT6q0z1G9V35YQ3201+WMB8GA1UdIwQYMBaAFPrcl2SyCfgc+CkzImoGaaMqTt1y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTNFQy8yMDNDQkI2NDk2
ODcxMUVCOEFFODEzMkZDNEY5QUUwMi8tdHlYWkxJSi1CejRLVE1pYWdacG95cE8z
WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy10eVhaTElKLUJ6NEtUTWlhZ1pwb3lwTzNYSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzUzRUMvMjAzQ0JCNjQ5Njg3MTFFQjhBRTgxMzJGQzRGOUFFMDIvMDIzODFCREND
Qzg2MTFFQzhEMjM4NjcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnkNswDQYJKoZIhvcNAQELBQADggEBAI0F621cWSAaiQiq
5rYfXHGyhIt86IpMXuOeRrlIoV/u2xT4Tc9hXwvFy188MH3PpLqcx8OYYZe/fQYM
6CYz+sgtcQhTt8pyzZq8Wj7M4FW4qVjN1qXKJiK8nNlYKxJTDoZOcC8fYycVr3gd
pDeLx+0AiZ9zyXNGP1ErYVzg9S41FMUTehmUKOzPBYU+I/ghRIc2cHXAduwZXnP3
LttN9gEhtvNApCCpWv8mu0NlWWby7S8x1IsLug1z5ggH2PmTVjA4znGOnm+n3hKm
sj7ihgHdoU1L5B4F2aaK6+ieoqrEJQb+178LyjuTh2AaFVQQeCRKNX1RhgxKQ0D0
xYaUymc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:04 2023 by rpki-client on console-ams.rpki-client.org