Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/AAA4A8C0770111EB99FFDA19C4F9AE02.roa
File: AAA4A8C0770111EB99FFDA19C4F9AE02.roa (raw, json)
Hash identifier: ZMslykAB/UJhw0vWH5tzbqrfnuoDEHS/wPFMpDNJnGU=
Subject key identifier: 9A:1D:27:D4:57:68:CE:1E:81:1A:C6:E7:7D:B4:57:79:5D:57:E8:E4
Certificate issuer: /CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90
Certificate serial: 03D2
Authority key identifier: AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/AAA4A8C0770111EB99FFDA19C4F9AE02.roa
Signing time: Thu 30 Jun 2022 13:16:50 +0000
ROA not before: Thu 30 Jun 2022 13:16:50 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 56264
IP address blocks: 103.163.30.0/24 maxlen: 24
103.163.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 978 (0x3d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D6E35/serialNumber=AA0D3CBE591E1BF64118BF6F0364125FA69B8A90
Validity
Not Before: Jun 30 13:16:50 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=62bda242-920b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:46:88:ac:09:4a:e5:71:01:a2:49:54:83:c4:
6e:6a:34:80:fa:5c:97:29:14:d4:19:88:ac:ad:7b:
ac:42:62:f7:13:60:75:8d:69:84:9c:d0:1b:c5:99:
e5:fa:e8:56:11:9e:0b:cc:01:59:24:04:54:ca:10:
03:a4:21:bd:0d:68:e4:e7:00:a8:e9:73:12:03:f6:
bf:93:8b:a7:f6:c1:76:19:e5:34:3e:48:25:27:a5:
be:1f:43:94:00:0f:47:83:51:b7:e7:b8:cf:a0:63:
71:96:2a:e3:72:d9:6a:5d:70:e8:cc:e1:7d:fe:b2:
7c:b5:1c:e6:dc:7d:10:b2:c7:49:5a:10:4f:14:38:
70:41:0a:8d:0c:4f:58:bd:df:8c:d5:a5:88:26:33:
e3:02:e6:78:5b:e5:4e:ef:e0:55:4b:66:fa:34:f8:
a3:ce:d3:c0:b4:47:7f:68:ee:f4:66:ca:2a:bb:83:
77:99:93:04:45:ad:a2:b5:40:25:16:d7:e8:76:67:
fd:17:d5:97:28:40:9b:98:ad:ef:f6:13:1f:b1:b5:
ea:64:3a:c1:98:94:62:4a:22:cb:bd:77:88:ce:9b:
4e:3b:c6:a7:16:07:1f:42:0d:5d:69:34:0f:6a:0b:
b4:45:7d:2e:78:35:88:96:c9:e9:81:0d:8a:b5:2e:
03:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1D:27:D4:57:68:CE:1E:81:1A:C6:E7:7D:B4:57:79:5D:57:E8:E4
X509v3 Authority Key Identifier:
keyid:AA:0D:3C:BE:59:1E:1B:F6:41:18:BF:6F:03:64:12:5F:A6:9B:8A:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/qg08vlkeG_ZBGL9vA2QSX6abipA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qg08vlkeG_ZBGL9vA2QSX6abipA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6E35/729CB23076FF11EBBFB60D14C4F9AE02/AAA4A8C0770111EB99FFDA19C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.163.30.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:a5:be:60:2c:93:b5:88:5d:1a:c9:46:de:21:56:e9:f4:c2:
f4:04:6f:fd:97:70:1d:37:71:89:47:a6:20:35:15:34:15:b5:
34:07:75:58:ab:8c:5f:41:5a:eb:ea:00:73:85:04:fe:5a:8b:
01:11:2c:6d:35:a9:05:ef:10:92:b2:29:23:ce:31:87:f5:df:
9b:24:14:80:2f:3d:3f:58:3d:d9:bc:c1:fe:a0:9e:e3:ed:cf:
fc:e5:8a:5c:02:a9:09:07:99:34:62:06:1e:be:b7:f3:36:e6:
36:9f:bb:d4:54:c9:77:b7:54:b4:e1:7d:ad:38:cb:67:b5:12:
00:08:e8:83:78:4b:b6:1b:c4:20:f1:b1:b8:d6:ed:c0:96:bd:
90:2a:93:5b:ba:3d:40:3b:23:cd:8e:a7:1a:83:ca:4d:4f:7d:
26:34:de:af:fc:86:9f:1d:93:78:09:80:f4:05:3f:7d:51:5b:
af:e8:ff:87:63:20:f8:22:e2:b9:1b:43:02:36:23:97:4a:f0:
5b:8b:96:fc:4c:42:52:af:86:90:21:72:12:f8:db:59:2a:f4:
30:b6:14:5b:89:4b:74:46:18:fe:c1:97:4e:da:8f:54:b1:c2:
41:31:72:44:30:ae:07:5e:8d:04:d8:b9:03:71:27:32:a0:6d:
20:0a:41:98
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDZFMzUxMTAvBgNVBAUTKEFBMEQzQ0JFNTkxRTFCRjY0MTE4QkY2RjAzNjQxMjVG
QTY5QjhBOTAwHhcNMjIwNjMwMTMxNjUwWhcNMjMwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02MmJkYTI0Mi05MjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1kaIrAlK5XEBoklUg8RuajSA+lyXKRTUGYisrXusQmL3E2B1jWmEnNAbxZnl
+uhWEZ4LzAFZJARUyhADpCG9DWjk5wCo6XMSA/a/k4un9sF2GeU0PkglJ6W+H0OU
AA9Hg1G357jPoGNxlirjctlqXXDozOF9/rJ8tRzm3H0QssdJWhBPFDhwQQqNDE9Y
vd+M1aWIJjPjAuZ4W+VO7+BVS2b6NPijztPAtEd/aO70Zsoqu4N3mZMERa2itUAl
Ftfodmf9F9WXKECbmK3v9hMfsbXqZDrBmJRiSiLLvXeIzptOO8anFgcfQg1daTQP
agu0RX0ueDWIlsnpgQ2KtS4DKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJodJ9RX
aM4egRrG5320V3ldV+jkMB8GA1UdIwQYMBaAFKoNPL5ZHhv2QRi/bwNkEl+mm4qQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkUzNS83MjlDQjIzMDc2
RkYxMUVCQkZCNjBEMTRDNEY5QUUwMi9xZzA4dmxrZUdfWkJHTDl2QTJRU1g2YWJp
cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FnMDh2bGtlR19aQkdMOXZBMlFTWDZhYmlwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDZFMzUvNzI5Q0IyMzA3NkZGMTFFQkJGQjYwRDE0QzRGOUFFMDIvQUFBNEE4QzA3
NzAxMTFFQjk5RkZEQTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnox4wDQYJKoZIhvcNAQELBQADggEBAK2lvmAsk7WIXRrJ
Rt4hVun0wvQEb/2XcB03cYlHpiA1FTQVtTQHdVirjF9BWuvqAHOFBP5aiwERLG01
qQXvEJKyKSPOMYf135skFIAvPT9YPdm8wf6gnuPtz/zlilwCqQkHmTRiBh6+t/M2
5jafu9RUyXe3VLThfa04y2e1EgAI6IN4S7YbxCDxsbjW7cCWvZAqk1u6PUA7I82O
pxqDyk1PfSY03q/8hp8dk3gJgPQFP31RW6/o/4djIPgi4rkbQwI2I5dK8FuLlvxM
QlKvhpAhchL421kq9DC2FFuJS3RGGP7Bl07aj1SxwkExckQwrgdejQTYuQNxJzKg
bSAKQZg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:30 2024 by rpki-client on console-ams.rpki-client.org