Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/5BFCFEE837E911ED9ECCA846C4F9AE02.roa
File: 5BFCFEE837E911ED9ECCA846C4F9AE02.roa (raw, json)
Hash identifier: wgpqDoQmdk0HA9+Ba4zzqS7fNL5ZIdi0EVJJpTW92Lc=
Subject key identifier: 35:01:63:BF:D8:5D:DC:17:FE:B7:3B:30:87:79:A4:9E:CE:69:08:39
Certificate issuer: /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Certificate serial: 02
Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/5BFCFEE837E911ED9ECCA846C4F9AE02.roa
Signing time: Mon 19 Sep 2022 07:04:53 +0000
ROA not before: Mon 19 Sep 2022 07:04:53 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 150132
IP address blocks: 103.52.63.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Validity
Not Before: Sep 19 07:04:53 2022 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=63281495-6682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:01:c0:8a:c8:eb:ce:17:3b:79:e1:2c:17:2c:
f5:81:ec:43:ff:6a:f3:ba:17:67:5c:13:c9:66:e9:
c9:ac:8a:53:04:cf:4e:95:1d:50:03:10:d0:a4:6e:
9d:11:fe:98:47:03:87:f7:98:c4:46:01:6a:19:24:
94:53:ac:f4:d9:c1:ef:00:d2:ce:85:68:28:a1:5a:
eb:2d:a2:8c:8e:6d:a7:83:8f:88:56:8b:f5:fe:ee:
7c:c3:53:0b:7e:8f:61:40:dc:da:a5:59:ff:34:82:
08:52:89:cd:0c:8b:c3:8c:4e:3f:76:fc:1f:74:9c:
98:1d:ec:b7:7a:04:c7:63:90:bb:6b:c7:68:9c:cc:
da:c4:61:3d:b8:b2:fd:bd:22:cd:f1:ce:06:d1:e1:
1b:13:09:b9:55:aa:36:0f:ab:43:74:9e:dd:73:82:
28:99:7d:3c:25:5a:7f:0e:fb:45:9e:cc:bc:09:98:
09:14:3d:cc:b3:fa:26:0a:89:be:1b:ee:94:88:95:
c6:c5:7d:7c:a6:ae:10:fb:df:93:0f:35:1f:71:1a:
a9:46:cd:02:78:c7:96:be:c7:b8:dc:5b:b8:09:ce:
c7:3c:6f:20:83:de:d7:38:85:ee:c4:af:25:05:e7:
03:15:a6:c0:52:6d:1b:b7:e3:f9:e6:aa:93:66:db:
7d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:01:63:BF:D8:5D:DC:17:FE:B7:3B:30:87:79:A4:9E:CE:69:08:39
X509v3 Authority Key Identifier:
keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/5BFCFEE837E911ED9ECCA846C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.52.63.0/24
Signature Algorithm: sha256WithRSAEncryption
03:45:9f:97:54:d8:20:f4:b7:92:fa:ec:00:2d:3f:a4:5b:1d:
5d:95:99:2a:62:c4:2b:29:5a:cf:0c:55:5d:43:3a:62:d1:a1:
58:95:d5:31:ef:fc:5c:87:ab:6a:f7:45:de:41:2c:ff:13:61:
0d:06:88:c1:03:c8:a2:fa:61:32:ba:d2:1c:ed:c7:46:e4:94:
55:a2:be:63:92:06:1f:62:0f:7e:89:0f:04:03:ed:06:88:a8:
41:38:d9:25:5f:9c:a1:1b:47:d8:57:50:0a:d2:26:e1:e8:e0:
3b:8f:1f:fa:44:5d:65:64:aa:a8:8b:79:fe:5b:cb:1f:1b:cc:
db:57:eb:b6:d5:cb:2e:4c:25:1e:25:a0:86:97:f5:88:4e:ff:
70:04:25:e0:74:c4:50:ed:d6:5e:a6:ef:84:dd:25:b0:76:ef:
dd:a5:bb:3a:5a:81:ce:29:2e:5a:b3:7a:c3:8f:48:fb:24:af:
94:9d:5a:f4:95:4d:68:dc:7b:29:25:0b:0c:45:0b:bc:f7:47:
0a:ff:d1:ac:71:29:f0:8d:f3:bf:02:4e:da:63:27:20:15:98:
77:7f:ca:da:69:3b:58:8b:a7:01:6f:22:39:62:98:6d:a5:b8:
d6:c6:1d:f4:f2:6f:0c:4f:b7:9b:f2:5f:d6:18:0e:8d:d8:15:
8b:af:6f:0b
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
RTJERTExMC8GA1UEBRMoRkMzRjdCQjA0NTQyNTZGMzFGMjVDQTAwODY0QkMzQTZC
RDc1NUY5NjAeFw0yMjA5MTkwNzA0NTNaFw0yMzEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTYzMjgxNDk1LTY2ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpAcCKyOvOFzt54SwXLPWB7EP/avO6F2dcE8lm6cmsilMEz06VHVADENCkbp0R
/phHA4f3mMRGAWoZJJRTrPTZwe8A0s6FaCihWustooyObaeDj4hWi/X+7nzDUwt+
j2FA3NqlWf80gghSic0Mi8OMTj92/B90nJgd7Ld6BMdjkLtrx2iczNrEYT24sv29
Is3xzgbR4RsTCblVqjYPq0N0nt1zgiiZfTwlWn8O+0WezLwJmAkUPcyz+iYKib4b
7pSIlcbFfXymrhD735MPNR9xGqlGzQJ4x5a+x7jcW7gJzsc8byCD3tc4he7EryUF
5wMVpsBSbRu34/nmqpNm232dAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUNQFjv9hd
3Bf+tzswh3mkns5pCDkwHwYDVR0jBBgwFoAU/D97sEVCVvMfJcoAhkvDpr11X5Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFMkRFL0FCREVFODdBMzdF
NjExRURCNTFFMUQ0NUM0RjlBRTAyL19EOTdzRVZDVnZNZkpjb0Foa3ZEcHIxMVg1
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX0Q5N3NFVkNWdk1mSmNvQWhrdkRwcjExWDVZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTJERS9BQkRFRTg3QTM3RTYxMUVEQjUxRTFENDVDNEY5QUUwMi81QkZDRkVFODM3
RTkxMUVEOUVDQ0E4NDZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGc0PzANBgkqhkiG9w0BAQsFAAOCAQEAA0Wfl1TYIPS3kvrs
AC0/pFsdXZWZKmLEKylazwxVXUM6YtGhWJXVMe/8XIeravdF3kEs/xNhDQaIwQPI
ovphMrrSHO3HRuSUVaK+Y5IGH2IPfokPBAPtBoioQTjZJV+coRtH2FdQCtIm4ejg
O48f+kRdZWSqqIt5/lvLHxvM21frttXLLkwlHiWghpf1iE7/cAQl4HTEUO3WXqbv
hN0lsHbv3aW7OlqBzikuWrN6w49I+ySvlJ1a9JVNaNx7KSULDEULvPdHCv/RrHEp
8I3zvwJO2mMnIBWYd3/K2mk7WIunAW8iOWKYbaW41sYd9PJvDE+3m/Jf1hgOjdgV
i69vCw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:27 2024 by rpki-client on console-ams.rpki-client.org