Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/C9301BBA1A4511ED9AB4D71AC4F9AE02.roa
File: C9301BBA1A4511ED9AB4D71AC4F9AE02.roa (raw, json)
Hash identifier: dzvxxCDECLH4pOnvcIUo/afCmVsSTjmg7LRFMfvgRz4=
Subject key identifier: 29:B9:55:6C:09:FF:FB:79:77:D8:E1:C5:48:0D:CA:8A:99:67:05:47
Certificate issuer: /CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Certificate serial: 0465
Authority key identifier: 86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/C9301BBA1A4511ED9AB4D71AC4F9AE02.roa
Signing time: Fri 12 Aug 2022 13:50:55 +0000
ROA not before: Fri 12 Aug 2022 13:50:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138675
IP address blocks: 103.136.104.0/24 maxlen: 24
103.136.105.0/24 maxlen: 24
103.136.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1125 (0x465)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EC979/serialNumber=86B2B1D1E782448B84F69818F16A1F707B54C86C
Validity
Not Before: Aug 12 13:50:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62f65abf-443e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:54:7f:bc:bc:69:b9:30:da:8c:fd:e2:f9:8c:
10:46:ff:17:69:a9:1d:10:69:29:d1:f7:8f:09:59:
54:e7:47:d6:40:e1:5d:32:9d:db:3d:80:60:b8:e6:
f6:57:52:80:11:2f:53:e6:6b:59:b6:e4:40:0b:96:
f0:50:96:73:a0:f1:21:35:71:bb:bd:7f:fc:f4:d1:
e1:5f:ee:7f:f7:36:3e:01:d6:d0:ea:4d:3e:0e:ca:
64:09:60:eb:7b:4a:40:cc:d1:89:8e:c5:db:9d:b7:
3b:2b:b0:cc:0c:17:19:3a:4f:ad:de:64:1b:38:01:
54:85:9a:4f:32:25:71:11:67:28:f5:50:1a:33:d8:
57:a4:5e:e9:82:89:8a:51:83:ae:c8:36:61:23:06:
ba:13:32:0e:0f:1e:03:c5:68:a2:2b:38:0c:b8:6a:
38:a0:99:c7:10:a5:07:05:1a:02:6f:ad:9a:98:3d:
40:86:33:ea:eb:47:74:aa:0c:fc:b8:e2:35:c2:9b:
31:83:77:44:b7:51:62:8f:f3:a2:a7:91:8b:27:0a:
1a:61:67:25:b8:f5:ad:5c:d6:9f:2a:1f:83:ef:6c:
08:d9:c6:17:28:e3:45:10:91:1d:19:77:f9:cc:b0:
b9:ee:1d:31:11:00:53:45:4e:7f:06:f6:f0:3f:bb:
10:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B9:55:6C:09:FF:FB:79:77:D8:E1:C5:48:0D:CA:8A:99:67:05:47
X509v3 Authority Key Identifier:
keyid:86:B2:B1:D1:E7:82:44:8B:84:F6:98:18:F1:6A:1F:70:7B:54:C8:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/hrKx0eeCRIuE9pgY8WofcHtUyGw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hrKx0eeCRIuE9pgY8WofcHtUyGw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC979/ED633E865FD911EBA30EE37BC4F9AE02/C9301BBA1A4511ED9AB4D71AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.104.0-103.136.106.255
Signature Algorithm: sha256WithRSAEncryption
d7:49:8d:e2:ef:84:a0:75:1b:2e:0c:61:5f:a2:1a:de:ec:f7:
dc:c3:60:a2:2c:70:bd:ff:f7:78:56:bf:5f:5b:b8:16:d1:7d:
e9:a8:86:a3:39:47:e0:f2:4f:ba:4a:e3:db:1e:4d:18:0b:c2:
7b:48:ca:14:26:35:9d:da:51:4c:ce:c0:dd:1e:c0:29:2c:39:
11:d6:8d:96:af:c0:ae:74:7e:d2:a4:b0:bf:10:01:8f:92:47:
f6:dc:fc:aa:5c:b0:49:70:a6:87:ec:66:0d:42:ed:0a:80:de:
13:dc:30:a5:34:a2:fa:e1:5e:0d:85:0f:84:af:6c:25:db:25:
50:d6:1d:55:86:27:c3:6c:d6:18:cb:a5:de:ac:7a:48:ab:f2:
ce:5a:30:cf:da:2c:e9:9f:60:e0:e6:32:d4:32:48:13:44:c3:
83:fd:fa:4f:52:d5:cd:e2:ef:86:58:85:9e:9f:ca:ff:4d:39:
4b:5d:06:8e:fc:37:dd:c1:be:49:06:e8:2c:cb:b9:51:5a:48:
90:bc:fc:07:a4:6c:3a:1a:3a:0b:c9:fe:61:aa:7f:d5:8c:85:
95:9f:80:34:43:80:e6:e3:c8:30:10:bf:a4:90:a5:a4:3b:b5:
27:c3:45:30:2b:a3:0a:00:61:8f:e1:18:fe:b7:74:29:1c:3b:
4b:2e:f3:e8
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgICBGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUM5NzkxMTAvBgNVBAUTKDg2QjJCMUQxRTc4MjQ0OEI4NEY2OTgxOEYxNkExRjcw
N0I1NEM4NkMwHhcNMjIwODEyMTM1MDU1WhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmY2NWFiZi00NDNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqFR/vLxpuTDajP3i+YwQRv8XaakdEGkp0fePCVlU50fWQOFdMp3bPYBguOb2
V1KAES9T5mtZtuRAC5bwUJZzoPEhNXG7vX/89NHhX+5/9zY+AdbQ6k0+DspkCWDr
e0pAzNGJjsXbnbc7K7DMDBcZOk+t3mQbOAFUhZpPMiVxEWco9VAaM9hXpF7pgomK
UYOuyDZhIwa6EzIODx4DxWiiKzgMuGo4oJnHEKUHBRoCb62amD1AhjPq60d0qgz8
uOI1wpsxg3dEt1Fij/Oip5GLJwoaYWcluPWtXNafKh+D72wI2cYXKONFEJEdGXf5
zLC57h0xEQBTRU5/BvbwP7sQxQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFCm5VWwJ
//t5d9jhxUgNyoqZZwVHMB8GA1UdIwQYMBaAFIaysdHngkSLhPaYGPFqH3B7VMhs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzk3OS9FRDYzM0U4NjVG
RDkxMUVCQTMwRUUzN0JDNEY5QUUwMi9ockt4MGVlQ1JJdUU5cGdZOFdvZmNIdFV5
R3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hyS3gwZWVDUkl1RTlwZ1k4V29mY0h0VXlHdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUM5NzkvRUQ2MzNFODY1RkQ5MTFFQkEzMEVFMzdCQzRGOUFFMDIvQzkzMDFCQkEx
QTQ1MTFFRDlBQjRENzFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E
GDAWMBQEAgABMA4wDAMEA2eIaAMEAGeIajANBgkqhkiG9w0BAQsFAAOCAQEA10mN
4u+EoHUbLgxhX6Ia3uz33MNgoixwvf/3eFa/X1u4FtF96aiGozlH4PJPukrj2x5N
GAvCe0jKFCY1ndpRTM7A3R7AKSw5EdaNlq/ArnR+0qSwvxABj5JH9tz8qlywSXCm
h+xmDULtCoDeE9wwpTSi+uFeDYUPhK9sJdslUNYdVYYnw2zWGMul3qx6SKvyzlow
z9os6Z9g4OYy1DJIE0TDg/36T1LVzeLvhliFnp/K/005S10Gjvw33cG+SQboLMu5
UVpIkLz8B6RsOho6C8n+Yap/1YyFlZ+ANEOA5uPIMBC/pJClpDu1J8NFMCujCgBh
j+EY/rd0KRw7Sy7z6A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:11 2023 by rpki-client on console-ams.rpki-client.org