Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/618B9D022BD711ECB950CA61C4F9AE02.roa
File: 618B9D022BD711ECB950CA61C4F9AE02.roa (raw, json)
Hash identifier: XuJ+Kim06Ep4iNUo2doTYClCORo7eNXoYvy3QajcO8s=
Subject key identifier: 36:E7:4B:33:E4:BA:2D:2C:BF:6C:44:4D:EB:E4:4C:7C:F5:2B:50:30
Certificate issuer: /CN=A91F7DBA/serialNumber=E0849F0543918202B178444E5FF22F899F9E320E
Certificate serial: 024C
Authority key identifier: E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/618B9D022BD711ECB950CA61C4F9AE02.roa
Signing time: Tue 02 Aug 2022 03:12:10 +0000
ROA not before: Tue 02 Aug 2022 03:12:10 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 132007
IP address blocks: 43.255.136.0/22 maxlen: 24
103.239.132.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 588 (0x24c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F7DBA/serialNumber=E0849F0543918202B178444E5FF22F899F9E320E
Validity
Not Before: Aug 2 03:12:10 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=62e8960a-05d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:96:83:92:00:9c:24:a8:f2:a2:d1:71:f3:
82:ab:39:65:ee:72:93:7b:a1:a6:66:6b:60:80:12:
23:78:c0:a1:53:58:43:f4:ed:30:00:89:29:1d:ad:
62:7d:44:64:ac:31:be:d5:f5:02:a7:9d:d4:38:ed:
7d:73:15:b4:88:d2:71:7d:6b:f8:18:5e:f9:ae:2e:
2f:a1:f4:0f:4f:ff:a4:d2:a1:9a:d8:0a:e4:6d:60:
43:ce:36:b2:7e:90:58:56:cd:04:3e:f8:f8:d9:79:
2f:ce:6b:71:c3:8f:22:7e:ce:cf:fe:90:a1:14:df:
33:a5:a7:3f:46:80:69:1e:da:7c:01:25:15:3a:54:
7c:e1:8e:d3:6c:d9:24:e9:15:d5:01:81:03:7d:fe:
e5:99:34:e3:66:01:00:29:ec:5e:56:34:5a:80:99:
aa:3c:cc:f3:84:b2:43:fa:0d:a8:94:6d:ff:e1:8f:
03:54:9a:83:48:99:ee:b7:a6:ac:0e:bb:07:24:f4:
4d:58:2d:9c:05:ab:cb:dc:76:a9:f6:2a:75:a8:10:
bd:72:9c:2f:e4:2f:6c:dc:71:64:fb:03:4c:56:37:
f2:3f:f1:7c:60:8f:37:ba:89:34:3e:44:d0:45:44:
ac:28:46:4d:71:8d:c7:56:65:6f:84:c0:0b:11:f3:
36:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E7:4B:33:E4:BA:2D:2C:BF:6C:44:4D:EB:E4:4C:7C:F5:2B:50:30
X509v3 Authority Key Identifier:
keyid:E0:84:9F:05:43:91:82:02:B1:78:44:4E:5F:F2:2F:89:9F:9E:32:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/4ISfBUORggKxeEROX_IviZ-eMg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ISfBUORggKxeEROX_IviZ-eMg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DBA/28EB71462BD411ECB0BADE58C4F9AE02/618B9D022BD711ECB950CA61C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
43.255.136.0/22
103.239.132.0/22
Signature Algorithm: sha256WithRSAEncryption
81:67:7c:65:36:60:01:88:2f:be:e7:ad:8e:12:3d:72:0f:5a:
ff:50:bc:a9:c0:af:8f:77:15:a3:dd:22:48:8a:7a:bd:2d:94:
14:62:f6:81:4d:27:ef:a1:46:89:59:67:9b:a4:76:b6:d5:6b:
15:18:d6:eb:9d:3a:aa:f8:a1:d5:24:a8:52:79:4e:b3:9f:f0:
c4:8b:1f:b6:11:7b:91:5a:24:8b:0c:51:66:c3:25:4a:18:16:
a3:b1:c4:c8:58:3f:75:e0:6d:d1:67:fb:8c:fe:5b:fd:a1:06:
35:66:e9:5e:40:b1:94:3d:58:e7:f5:70:36:df:fa:88:26:91:
98:55:6e:4e:19:56:96:2b:9e:a6:61:01:ca:43:61:5d:b8:42:
ab:e8:33:2e:9b:f7:0a:d5:ce:38:b1:c3:c1:92:18:a4:0a:ad:
3c:e9:1c:22:15:04:d7:38:b7:e6:14:3e:0b:34:12:1b:46:9a:
08:7d:ca:06:8b:bd:73:e5:11:22:c0:6e:0a:23:fb:d7:64:b6:
f3:a3:f7:40:c1:db:c5:c5:82:16:05:45:af:be:26:2e:bc:8e:
cd:e2:2b:2e:93:f6:34:6c:e6:1d:03:e5:fd:41:e8:2a:57:7b:
c0:d9:51:ac:bb:5e:85:87:f2:d5:48:89:a3:e9:58:43:62:21:
1b:6f:b6:f5
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjdEQkExMTAvBgNVBAUTKEUwODQ5RjA1NDM5MTgyMDJCMTc4NDQ0RTVGRjIyRjg5
OUY5RTMyMEUwHhcNMjIwODAyMDMxMjEwWhcNMjMxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmU4OTYwYS0wNWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwjyWg5IAnCSo8qLRcfOCqzll7nKTe6GmZmtggBIjeMChU1hD9O0wAIkpHa1i
fURkrDG+1fUCp53UOO19cxW0iNJxfWv4GF75ri4vofQPT/+k0qGa2ArkbWBDzjay
fpBYVs0EPvj42Xkvzmtxw48ifs7P/pChFN8zpac/RoBpHtp8ASUVOlR84Y7TbNkk
6RXVAYEDff7lmTTjZgEAKexeVjRagJmqPMzzhLJD+g2olG3/4Y8DVJqDSJnut6as
DrsHJPRNWC2cBavL3Hap9ip1qBC9cpwv5C9s3HFk+wNMVjfyP/F8YI83uok0PkTQ
RUSsKEZNcY3HVmVvhMALEfM2+QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFDbnSzPk
ui0sv2xETevkTHz1K1AwMB8GA1UdIwQYMBaAFOCEnwVDkYICsXhETl/yL4mfnjIO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RCQS8yOEVCNzE0NjJC
RDQxMUVDQjBCQURFNThDNEY5QUUwMi80SVNmQlVPUmdnS3hlRVJPWF9JdmlaLWVN
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRJU2ZCVU9SZ2dLeGVFUk9YX0l2aVotZU1nNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjdEQkEvMjhFQjcxNDYyQkQ0MTFFQ0IwQkFERTU4QzRGOUFFMDIvNjE4QjlEMDIy
QkQ3MTFFQ0I5NTBDQTYxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAIr/4gDBAJn74QwDQYJKoZIhvcNAQELBQADggEBAIFnfGU2
YAGIL77nrY4SPXIPWv9QvKnAr493FaPdIkiKer0tlBRi9oFNJ++hRolZZ5ukdrbV
axUY1uudOqr4odUkqFJ5TrOf8MSLH7YRe5FaJIsMUWbDJUoYFqOxxMhYP3XgbdFn
+4z+W/2hBjVm6V5AsZQ9WOf1cDbf+ogmkZhVbk4ZVpYrnqZhAcpDYV24QqvoMy6b
9wrVzjixw8GSGKQKrTzpHCIVBNc4t+YUPgs0EhtGmgh9ygaLvXPlESLAbgoj+9dk
tvOj90DB28XFghYFRa++Ji68js3iKy6T9jRs5h0D5f1B6CpXe8DZUay7XoWH8tVI
iaPpWENiIRtvtvU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:06:39 2024 by rpki-client on console-ams.rpki-client.org