Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/48302A5C831211EC9F62A60DC4F9AE02.roa
File: 48302A5C831211EC9F62A60DC4F9AE02.roa (raw, json)
Hash identifier: U1tZUxOYmtj9IqfG6dipFX4kQDVZQoZWaAf+e2DHBOA=
Subject key identifier: 32:BF:55:FF:38:41:94:B4:64:03:58:46:72:80:82:F2:67:11:70:C5
Certificate issuer: /CN=A91E7290/serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6
Certificate serial: 0139
Authority key identifier: 8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/48302A5C831211EC9F62A60DC4F9AE02.roa
Signing time: Tue 01 Feb 2022 15:52:20 +0000
ROA not before: Tue 01 Feb 2022 15:52:20 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 134504
IP address blocks: 103.43.168.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E7290/serialNumber=8D5BAB370CA92E4F5FD789FC2273310F9AEA38F6
Validity
Not Before: Feb 1 15:52:20 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=61f95733-25b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:12:1f:69:98:fd:1f:27:06:98:bf:13:47:cd:
04:f9:89:d7:50:54:e9:b0:ed:e0:84:d2:b4:01:20:
5a:bc:24:9f:b5:58:d0:c0:76:32:16:14:39:03:cd:
58:53:ed:db:eb:04:d8:a3:87:10:1b:4c:a3:3c:00:
36:62:17:43:93:22:0f:fc:58:e4:00:53:f9:cb:9d:
2b:98:17:e4:9f:b0:d7:63:e4:75:63:8b:eb:84:76:
b6:81:96:e2:b7:4a:af:85:c3:5c:38:ca:28:29:ab:
c0:bb:af:7f:6e:b1:ec:16:9a:94:0c:6f:9d:dc:32:
6c:e9:f6:52:d8:63:ff:fd:0e:81:e3:0d:ad:81:7a:
d9:25:08:ef:c0:9e:06:9e:5b:c6:43:69:dc:06:99:
2b:a1:f3:2f:78:b3:2c:46:14:d6:2e:e8:14:3c:02:
51:07:bc:68:dc:38:36:6c:18:33:9c:94:a0:44:54:
b8:8c:59:7c:16:5e:98:5c:95:89:8b:68:06:81:4c:
bc:95:68:0f:7a:e6:5c:3a:f5:d9:f2:fb:20:60:51:
a8:0c:35:fd:fa:30:64:5b:99:77:40:ab:7f:51:e2:
ed:44:fb:8f:dd:05:0b:56:ce:4b:1b:07:07:18:c4:
a7:99:d8:18:07:e3:4c:51:78:d7:9e:fb:40:5a:b7:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BF:55:FF:38:41:94:B4:64:03:58:46:72:80:82:F2:67:11:70:C5
X509v3 Authority Key Identifier:
keyid:8D:5B:AB:37:0C:A9:2E:4F:5F:D7:89:FC:22:73:31:0F:9A:EA:38:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/jVurNwypLk9f14n8InMxD5rqOPY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVurNwypLk9f14n8InMxD5rqOPY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7290/F68141E00B0311ECA4460754C4F9AE02/48302A5C831211EC9F62A60DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.43.168.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:7e:de:7f:22:4f:b5:ae:ca:89:e1:c8:0f:e5:96:48:49:d7:
6b:69:d9:bb:96:23:b0:1d:1f:06:d9:9e:74:b4:c3:4d:c3:5b:
d4:eb:82:b5:39:18:27:73:2d:d3:40:3f:ed:46:5a:91:06:49:
51:e2:67:8d:9f:c9:48:51:3a:61:0f:cd:4d:62:a0:56:dd:ab:
fe:6a:a9:c3:59:ac:0a:cd:0d:59:6a:89:a2:12:4d:d8:d8:ed:
ea:ee:54:18:b5:97:9e:28:8a:05:92:48:6d:be:26:37:6c:af:
31:97:d0:6f:6f:e6:06:5b:02:29:2a:5a:00:21:de:f4:82:83:
1d:2f:ff:3c:7f:fd:8f:bb:74:c4:7e:e5:8b:23:ce:1c:fd:b3:
56:97:ce:8c:bf:43:90:f9:e6:b4:fe:79:86:72:87:03:0e:19:
b3:35:19:3f:93:52:1b:50:e2:2b:b9:8c:68:0c:09:bd:a0:8c:
11:89:54:f2:16:f2:3f:4c:12:4a:33:74:a6:27:fa:5e:bf:f7:
19:ca:f6:26:9b:95:13:41:ed:41:e8:21:3d:65:b2:e7:b0:f6:
fb:86:c4:4d:38:89:d6:60:ef:16:16:b3:6e:7e:87:99:51:5d:
39:29:5c:d0:b6:ce:57:41:86:89:27:5f:f7:b0:b3:87:e9:02:
9f:35:5c:3d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTcyOTAxMTAvBgNVBAUTKDhENUJBQjM3MENBOTJFNEY1RkQ3ODlGQzIyNzMzMTBG
OUFFQTM4RjYwHhcNMjIwMjAxMTU1MjIwWhcNMjMwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWY5NTczMy0yNWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3RIfaZj9HycGmL8TR80E+YnXUFTpsO3ghNK0ASBavCSftVjQwHYyFhQ5A81Y
U+3b6wTYo4cQG0yjPAA2YhdDkyIP/FjkAFP5y50rmBfkn7DXY+R1Y4vrhHa2gZbi
t0qvhcNcOMooKavAu69/brHsFpqUDG+d3DJs6fZS2GP//Q6B4w2tgXrZJQjvwJ4G
nlvGQ2ncBpkrofMveLMsRhTWLugUPAJRB7xo3Dg2bBgznJSgRFS4jFl8Fl6YXJWJ
i2gGgUy8lWgPeuZcOvXZ8vsgYFGoDDX9+jBkW5l3QKt/UeLtRPuP3QULVs5LGwcH
GMSnmdgYB+NMUXjXnvtAWre77wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDK/Vf84
QZS0ZANYRnKAgvJnEXDFMB8GA1UdIwQYMBaAFI1bqzcMqS5PX9eJ/CJzMQ+a6jj2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzI5MC9GNjgxNDFFMDBC
MDMxMUVDQTQ0NjA3NTRDNEY5QUUwMi9qVnVyTnd5cExrOWYxNG44SW5NeEQ1cnFP
UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pWdXJOd3lwTGs5ZjE0bjhJbk14RDVycU9QWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTcyOTAvRjY4MTQxRTAwQjAzMTFFQ0E0NDYwNzU0QzRGOUFFMDIvNDgzMDJBNUM4
MzEyMTFFQzlGNjJBNjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnK6gwDQYJKoZIhvcNAQELBQADggEBAAt+3n8iT7Wuyonh
yA/llkhJ12tp2buWI7AdHwbZnnS0w03DW9TrgrU5GCdzLdNAP+1GWpEGSVHiZ42f
yUhROmEPzU1ioFbdq/5qqcNZrArNDVlqiaISTdjY7eruVBi1l54oigWSSG2+Jjds
rzGX0G9v5gZbAikqWgAh3vSCgx0v/zx//Y+7dMR+5Ysjzhz9s1aXzoy/Q5D55rT+
eYZyhwMOGbM1GT+TUhtQ4iu5jGgMCb2gjBGJVPIW8j9MEkozdKYn+l6/9xnK9iab
lRNB7UHoIT1lsuew9vuGxE04idZg7xYWs25+h5lRXTkpXNC2zldBhoknX/ews4fp
Ap81XD0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:36 2024 by rpki-client on console-ams.rpki-client.org