Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/12397D24831F11EC981F3884C4F9AE02.roa
File: 12397D24831F11EC981F3884C4F9AE02.roa (raw, json)
Hash identifier: OlGn5EWPtvSmBZtbufSRi2UIWI9rsYBxppEyQWIXWYY=
Subject key identifier: CC:2D:3C:7D:02:28:3B:E7:63:25:88:C5:FC:06:AD:79:83:BD:B3:B0
Certificate issuer: /CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
Certificate serial: 1A6F
Authority key identifier: 51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/12397D24831F11EC981F3884C4F9AE02.roa
Signing time: Tue 16 May 2023 17:25:16 +0000
ROA not before: Tue 16 May 2023 17:25:16 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 135882
IP address blocks: 103.78.252.0/24 maxlen: 24
103.78.253.0/24 maxlen: 24
103.78.254.0/24 maxlen: 24
103.78.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6767 (0x1a6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C7672/serialNumber=51569B48C03891454E469853A67DB909BEC2CAD6
Validity
Not Before: May 16 17:25:16 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=6463bc7c-a719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:91:89:c2:26:0b:f1:23:e8:d2:62:17:f4:6a:
19:39:ef:f2:65:3c:49:45:b4:df:84:e3:1f:33:f7:
23:60:89:a9:59:a1:6e:be:2e:32:46:dc:af:52:fe:
47:b8:57:15:54:26:d6:18:c8:83:e7:69:7f:af:ed:
f6:77:fe:25:84:73:6e:f8:dc:18:a2:63:39:d3:59:
64:40:18:db:a7:fa:f9:10:35:08:ce:a2:f4:c3:e0:
6e:63:d6:53:59:bd:32:eb:c3:2e:73:06:28:fd:a2:
85:af:e3:18:71:37:b3:fd:ff:06:60:d7:7e:f6:a2:
3a:3a:5b:76:65:1d:a2:a1:bb:37:c7:1e:5e:d4:f6:
4e:63:ca:8a:e9:65:c5:7f:8d:07:8e:0f:23:e2:2a:
64:f4:69:bc:a0:7a:c3:9a:9c:a1:99:12:5d:0c:aa:
0f:4a:8f:90:a0:61:3a:24:ac:93:11:e2:6f:81:c3:
cb:75:e1:aa:7b:a6:1c:2c:c5:45:b8:26:11:6d:98:
70:de:fd:98:e0:5c:8a:e5:4a:68:b0:3c:2c:0c:b9:
be:f3:87:6c:0f:d9:f6:0f:19:24:95:fc:66:cc:36:
77:c5:d7:9e:94:67:2b:b8:f8:2e:aa:ec:e0:f0:51:
93:92:dc:fe:7c:01:10:e4:81:a8:be:f2:f1:4d:17:
8e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2D:3C:7D:02:28:3B:E7:63:25:88:C5:FC:06:AD:79:83:BD:B3:B0
X509v3 Authority Key Identifier:
keyid:51:56:9B:48:C0:38:91:45:4E:46:98:53:A6:7D:B9:09:BE:C2:CA:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/UVabSMA4kUVORphTpn25Cb7CytY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UVabSMA4kUVORphTpn25Cb7CytY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/12397D24831F11EC981F3884C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.78.252.0/22
Signature Algorithm: sha256WithRSAEncryption
94:b7:eb:eb:af:68:ab:81:7c:43:ce:cd:7a:f8:71:00:83:12:
d0:b9:b5:59:90:92:f0:1a:0f:54:c5:e2:df:1b:b3:ea:01:f5:
a7:ce:70:6c:3a:cf:06:6d:a9:61:56:07:1b:b7:ab:8f:7d:17:
a9:76:f8:a7:79:bc:e8:ac:e1:96:e3:07:f4:76:d6:83:2b:c8:
8f:f0:0e:69:4a:6c:6f:fc:77:01:f0:df:d8:20:e4:2f:f5:7c:
b6:49:48:08:14:5d:20:55:7d:41:c6:a1:dc:85:aa:ec:a1:69:
bf:d2:c2:6f:11:8e:30:34:3e:40:4e:0c:b5:a2:3a:aa:10:10:
9d:10:47:a8:75:49:14:d6:82:79:a3:84:05:7f:c3:49:10:58:
08:aa:2e:ad:66:18:95:40:ec:3e:f7:90:ce:d1:66:5b:c5:52:
d2:f0:32:5f:99:7b:c8:15:31:1c:7e:00:48:a7:0a:d0:fc:3d:
a1:4f:ec:6b:37:ec:a9:07:a3:61:61:8a:ed:75:73:a7:bc:a4:
f4:40:f3:9a:dd:c4:9f:6f:94:6e:37:0b:cb:9a:7d:8f:06:06:
e3:8a:c4:22:26:c8:f4:37:01:0e:27:1a:a3:ed:cb:29:b6:32:
7c:aa:d8:67:53:6e:fb:03:df:0e:01:2e:d1:a4:c9:9c:87:28:
9e:33:8d:21
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICGm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qzc2NzIxMTAvBgNVBAUTKDUxNTY5QjQ4QzAzODkxNDU0RTQ2OTg1M0E2N0RCOTA5
QkVDMkNBRDYwHhcNMjMwNTE2MTcyNTE2WhcNMjQwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDYzYmM3Yy1hNzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5JGJwiYL8SPo0mIX9GoZOe/yZTxJRbTfhOMfM/cjYImpWaFuvi4yRtyvUv5H
uFcVVCbWGMiD52l/r+32d/4lhHNu+NwYomM501lkQBjbp/r5EDUIzqL0w+BuY9ZT
Wb0y68MucwYo/aKFr+MYcTez/f8GYNd+9qI6Olt2ZR2iobs3xx5e1PZOY8qK6WXF
f40Hjg8j4ipk9Gm8oHrDmpyhmRJdDKoPSo+QoGE6JKyTEeJvgcPLdeGqe6YcLMVF
uCYRbZhw3v2Y4FyK5UposDwsDLm+84dsD9n2DxkklfxmzDZ3xdeelGcruPguquzg
8FGTktz+fAEQ5IGovvLxTReOcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMwtPH0C
KDvnYyWIxfwGrXmDvbOwMB8GA1UdIwQYMBaAFFFWm0jAOJFFTkaYU6Z9uQm+wsrW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzY3Mi80Mzc2NEJFQ0Y3
MjQxMUU2QUJGMDJCM0NDNEY5QUUwMi9VVmFiU01BNGtVVk9ScGhUcG4yNUNiN0N5
dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VWYWJTTUE0a1VWT1JwaFRwbjI1Q2I3Q3l0WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qzc2NzIvNDM3NjRCRUNGNzI0MTFFNkFCRjAyQjNDQzRGOUFFMDIvMTIzOTdEMjQ4
MzFGMTFFQzk4MUYzODg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnTvwwDQYJKoZIhvcNAQELBQADggEBAJS36+uvaKuBfEPO
zXr4cQCDEtC5tVmQkvAaD1TF4t8bs+oB9afOcGw6zwZtqWFWBxu3q499F6l2+Kd5
vOis4ZbjB/R21oMryI/wDmlKbG/8dwHw39gg5C/1fLZJSAgUXSBVfUHGodyFquyh
ab/Swm8RjjA0PkBODLWiOqoQEJ0QR6h1SRTWgnmjhAV/w0kQWAiqLq1mGJVA7D73
kM7RZlvFUtLwMl+Ze8gVMRx+AEinCtD8PaFP7Gs37KkHo2Fhiu11c6e8pPRA85rd
xJ9vlG43C8uafY8GBuOKxCImyPQ3AQ4nGqPtyym2Mnyq2GdTbvsD3w4BLtGkyZyH
KJ4zjSE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:40 2024 by rpki-client on console-fra.rpki-client.org