Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4164/03D92FD4919111EB89DDC35BC4F9AE02/913AF73E919311EBB7703063C4F9AE02.roa
File: 913AF73E919311EBB7703063C4F9AE02.roa (raw, json)
Hash identifier: ykbc4xXGpvLi+7XXTcsg0P9o3kwWg7a8pVRqQFhX93Q=
Subject key identifier: F8:5D:64:E0:A8:10:DE:58:80:96:D0:B9:72:AE:26:D3:17:64:53:6E
Certificate issuer: /CN=A91D4164/serialNumber=FE8EAA5D78E0BE668C618604A629E2F7F3D5BCB3
Certificate serial: 0238
Authority key identifier: FE:8E:AA:5D:78:E0:BE:66:8C:61:86:04:A6:29:E2:F7:F3:D5:BC:B3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_o6qXXjgvmaMYYYEpini9_PVvLM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D4164/03D92FD4919111EB89DDC35BC4F9AE02/913AF73E919311EBB7703063C4F9AE02.roa
Signing time: Sun 02 Jan 2022 02:00:01 +0000
ROA not before: Sun 02 Jan 2022 02:00:01 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 58678
IP address blocks: 103.104.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 568 (0x238)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D4164/serialNumber=FE8EAA5D78E0BE668C618604A629E2F7F3D5BCB3
Validity
Not Before: Jan 2 02:00:01 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61d10721-33c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:4d:6b:65:77:a0:9f:9d:39:5d:43:42:07:
f3:f6:3d:dc:fd:76:26:03:5d:78:7e:ba:2c:0e:95:
a4:c1:51:e8:15:3c:55:0a:b3:f4:2c:1c:bc:b3:d5:
bb:56:6d:d1:ce:1e:fa:d4:cd:23:3f:56:23:90:cc:
2b:fc:1c:22:d0:4f:fb:e8:cd:81:fa:82:06:e3:a1:
f0:52:2f:79:4e:87:c0:07:88:4e:22:d9:93:9e:17:
da:17:69:49:82:e9:6c:31:b7:9b:af:15:54:49:69:
14:17:17:5f:de:c1:51:59:b1:e5:18:53:2d:da:a0:
c3:63:37:71:61:dc:e3:5c:a2:02:ef:0c:a9:2f:f6:
0e:e9:11:eb:c5:dc:a7:12:0e:ca:16:e0:55:49:5f:
c9:19:f9:d9:59:3e:f3:a3:91:75:f6:50:be:4f:ab:
df:06:87:1d:47:55:86:0b:9d:e9:88:a3:55:b2:42:
11:07:78:0f:67:bd:f8:19:90:eb:0b:01:10:61:4c:
63:fe:a2:bd:da:1b:8d:b4:a4:2e:ee:be:13:66:d4:
de:9e:70:54:8f:2b:19:6e:41:a1:16:07:4f:58:02:
8d:c9:a7:ea:0e:79:4e:7c:e3:ef:64:15:aa:0d:af:
c5:59:6e:09:97:6b:7a:19:ed:38:cc:c8:dc:79:79:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5D:64:E0:A8:10:DE:58:80:96:D0:B9:72:AE:26:D3:17:64:53:6E
X509v3 Authority Key Identifier:
keyid:FE:8E:AA:5D:78:E0:BE:66:8C:61:86:04:A6:29:E2:F7:F3:D5:BC:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D4164/03D92FD4919111EB89DDC35BC4F9AE02/_o6qXXjgvmaMYYYEpini9_PVvLM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_o6qXXjgvmaMYYYEpini9_PVvLM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4164/03D92FD4919111EB89DDC35BC4F9AE02/913AF73E919311EBB7703063C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.104.92.0/24
Signature Algorithm: sha256WithRSAEncryption
28:0f:8a:87:c0:5b:f4:94:0b:a4:fe:cb:50:b9:2d:24:b0:ea:
db:5c:fb:6e:e1:ca:bc:a2:ae:b9:7d:20:b0:ec:58:11:eb:9a:
c2:6e:a4:08:de:b0:b4:ba:c9:a7:8d:97:f6:09:f7:2e:a6:dd:
18:c0:d0:06:d8:4d:e8:65:b2:d1:d4:bf:f1:80:cc:f8:d1:e2:
13:0d:32:b6:e8:d3:3e:a2:f3:27:cc:e9:fb:81:5e:72:3f:d0:
a6:d5:2c:90:4b:59:25:c2:99:51:74:a0:c2:95:f8:74:bd:af:
08:d9:4c:34:11:23:b8:f6:a2:fc:94:cc:f5:e5:c6:a6:a4:11:
c7:25:ae:8f:5f:09:dc:91:da:d7:c6:63:49:07:bc:ec:77:3c:
e5:a4:c1:32:19:5f:63:c6:35:3a:67:6f:a5:89:03:b9:08:bd:
bc:9c:a5:40:6e:02:c1:9a:bc:f4:d2:fd:c6:36:32:12:26:02:
50:42:e6:ff:76:8f:c1:50:b9:9c:97:84:b3:b0:88:c2:e0:d0:
1e:c3:75:6e:9e:98:60:eb:4d:c0:bb:ca:24:91:db:5c:d0:59:
9a:52:b6:ff:83:db:a9:48:fa:9d:71:c7:34:a6:70:ff:6c:5b:
3f:15:cd:0f:bf:f0:d1:94:7e:6d:e3:f6:55:6f:b0:c8:ca:48:
a1:7d:e2:1b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQxNjQxMTAvBgNVBAUTKEZFOEVBQTVENzhFMEJFNjY4QzYxODYwNEE2MjlFMkY3
RjNENUJDQjMwHhcNMjIwMTAyMDIwMDAxWhcNMjMwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWQxMDcyMS0zM2MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuPtNa2V3oJ+dOV1DQgfz9j3c/XYmA114frosDpWkwVHoFTxVCrP0LBy8s9W7
Vm3Rzh761M0jP1YjkMwr/Bwi0E/76M2B+oIG46HwUi95TofAB4hOItmTnhfaF2lJ
gulsMbebrxVUSWkUFxdf3sFRWbHlGFMt2qDDYzdxYdzjXKIC7wypL/YO6RHrxdyn
Eg7KFuBVSV/JGfnZWT7zo5F19lC+T6vfBocdR1WGC53piKNVskIRB3gPZ734GZDr
CwEQYUxj/qK92huNtKQu7r4TZtTennBUjysZbkGhFgdPWAKNyafqDnlOfOPvZBWq
Da/FWW4Jl2t6Ge04zMjceXmN9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPhdZOCo
EN5YgJbQuXKuJtMXZFNuMB8GA1UdIwQYMBaAFP6Oql144L5mjGGGBKYp4vfz1byz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDE2NC8wM0Q5MkZENDkx
OTExMUVCODlEREMzNUJDNEY5QUUwMi9fbzZxWFhqZ3ZtYU1ZWVlFcGluaTlfUFZ2
TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19vNnFYWGpndm1hTVlZWUVwaW5pOV9QVnZMTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDQxNjQvMDNEOTJGRDQ5MTkxMTFFQjg5RERDMzVCQzRGOUFFMDIvOTEzQUY3M0U5
MTkzMTFFQkI3NzAzMDYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnaFwwDQYJKoZIhvcNAQELBQADggEBACgPiofAW/SUC6T+
y1C5LSSw6ttc+27hyryirrl9ILDsWBHrmsJupAjesLS6yaeNl/YJ9y6m3RjA0AbY
TehlstHUv/GAzPjR4hMNMrbo0z6i8yfM6fuBXnI/0KbVLJBLWSXCmVF0oMKV+HS9
rwjZTDQRI7j2ovyUzPXlxqakEcclro9fCdyR2tfGY0kHvOx3POWkwTIZX2PGNTpn
b6WJA7kIvbycpUBuAsGavPTS/cY2MhImAlBC5v92j8FQuZyXhLOwiMLg0B7DdW6e
mGDrTcC7yiSR21zQWZpStv+D26lI+p1xxzSmcP9sWz8VzQ+/8NGUfm3j9lVvsMjK
SKF94hs=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:09 2023 by rpki-client on console-fra.rpki-client.org