Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/D902DEACB3D811EC8F9BB387C4F9AE02.roa
File: D902DEACB3D811EC8F9BB387C4F9AE02.roa (raw, json)
Hash identifier: 4KO7ucLWkmMlX49p1jkM6SBHzJd9amGo9+GOFQ914oQ=
Subject key identifier: 45:A4:40:D4:3D:D9:5E:79:FA:94:B8:DE:AA:5E:EE:35:55:F7:9F:55
Certificate issuer: /CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
Certificate serial: 02
Authority key identifier: E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/D902DEACB3D811EC8F9BB387C4F9AE02.roa
Signing time: Mon 04 Apr 2022 05:34:08 +0000
ROA not before: Mon 04 Apr 2022 05:34:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149764
IP address blocks: 103.185.224.0/24 maxlen: 24
103.185.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9112DEF/serialNumber=E3EB954B44721E411AAF0938310CC103EA4C8BB4
Validity
Not Before: Apr 4 05:34:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=624a834f-20c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5b:ea:9d:19:c4:8c:86:1f:b4:c2:c3:5d:7d:
b4:38:fb:59:ad:92:01:6d:65:ee:ee:dc:05:ca:7e:
c8:af:4b:68:af:87:19:f9:11:c0:d5:66:9d:f8:a4:
b8:f1:c9:36:b8:46:b7:58:30:51:a9:a7:da:a7:81:
47:33:85:06:e1:1e:3a:2b:4e:8b:17:02:77:00:31:
5a:0f:30:7b:04:77:e8:34:59:ba:5d:75:23:a3:6a:
bd:4a:24:b1:9b:c1:b1:00:c2:11:3b:f4:4a:4e:58:
25:68:66:7a:7e:c8:76:7a:e0:00:f3:8b:a4:66:9d:
14:d2:23:a4:9a:f4:26:9f:e2:21:2b:47:de:76:44:
cf:d2:ef:76:a7:64:0c:0d:0e:36:0c:29:95:75:fc:
25:8e:be:33:c1:95:51:d1:1c:34:ea:1e:e0:71:b4:
7b:d5:52:1a:d6:6b:8b:62:e1:2c:a1:f6:f2:4d:32:
58:60:4c:97:f7:19:9d:1e:56:11:5e:3a:d7:99:7c:
9b:10:d3:81:93:50:04:ce:58:9b:b0:62:73:8a:24:
51:f9:41:0c:c2:8c:c5:d2:db:31:26:0d:e6:69:8b:
60:a0:60:1d:20:45:94:24:d3:79:d4:f3:d9:e6:79:
29:73:3e:fa:f2:7f:d6:27:b3:c7:b5:0d:3f:6e:3b:
df:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A4:40:D4:3D:D9:5E:79:FA:94:B8:DE:AA:5E:EE:35:55:F7:9F:55
X509v3 Authority Key Identifier:
keyid:E3:EB:95:4B:44:72:1E:41:1A:AF:09:38:31:0C:C1:03:EA:4C:8B:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/4-uVS0RyHkEarwk4MQzBA-pMi7Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-uVS0RyHkEarwk4MQzBA-pMi7Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DEF/18F6987CB3D511ECB3A0A882C4F9AE02/D902DEACB3D811EC8F9BB387C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.185.224.0/23
Signature Algorithm: sha256WithRSAEncryption
83:73:31:ba:03:43:56:4f:d8:ac:d2:bb:95:d0:3e:36:56:86:
74:40:97:2f:84:e2:53:e4:0c:9a:2e:ed:83:6e:59:57:06:77:
80:a0:e6:c5:a8:3e:4e:0d:87:ca:8f:d0:3b:48:c4:73:50:de:
50:3e:ea:c3:b2:1c:6c:18:ff:d4:09:c1:8a:8c:cb:94:f9:95:
f2:38:41:f7:01:21:00:52:21:d3:22:dd:8e:e8:54:47:0f:12:
e4:e1:42:24:a5:7a:93:2f:95:26:d9:66:68:05:f1:9d:fa:18:
0b:e4:27:d4:ef:9e:b2:77:04:30:50:aa:50:eb:80:5d:69:bc:
57:ec:9b:e2:2c:29:8a:a2:39:78:f8:ad:c6:20:27:a4:66:46:
5c:62:04:63:b4:cc:59:1e:da:ac:b9:73:fd:e5:15:62:30:f0:
ea:49:2b:ca:f3:83:1f:22:af:a9:c1:e8:95:16:d5:08:77:24:
bf:50:54:85:ba:34:c1:e6:5f:07:17:15:50:ec:03:6e:90:d4:
34:37:1f:73:40:b4:36:16:d5:3d:b0:c6:7f:02:9d:56:92:41:
7a:b7:7a:bb:22:2f:59:15:ca:53:93:c2:ef:f0:90:70:56:6d:
40:02:5d:91:a7:8f:92:b7:d9:5e:7e:50:95:39:69:7f:a6:c5:
a1:8d:ca:e3
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
MkRFRjExMC8GA1UEBRMoRTNFQjk1NEI0NDcyMUU0MTFBQUYwOTM4MzEwQ0MxMDNF
QTRDOEJCNDAeFw0yMjA0MDQwNTM0MDhaFw0yMzA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyNGE4MzRmLTIwYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDHW+qdGcSMhh+0wsNdfbQ4+1mtkgFtZe7u3AXKfsivS2ivhxn5EcDVZp34pLjx
yTa4RrdYMFGpp9qngUczhQbhHjorTosXAncAMVoPMHsEd+g0WbpddSOjar1KJLGb
wbEAwhE79EpOWCVoZnp+yHZ64ADzi6RmnRTSI6Sa9Caf4iErR952RM/S73anZAwN
DjYMKZV1/CWOvjPBlVHRHDTqHuBxtHvVUhrWa4ti4Syh9vJNMlhgTJf3GZ0eVhFe
OteZfJsQ04GTUATOWJuwYnOKJFH5QQzCjMXS2zEmDeZpi2CgYB0gRZQk03nU89nm
eSlzPvryf9Yns8e1DT9uO9+3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQURaRA1D3Z
Xnn6lLjeql7uNVX3n1UwHwYDVR0jBBgwFoAU4+uVS0RyHkEarwk4MQzBA+pMi7Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyREVGLzE4RjY5ODdDQjNE
NTExRUNCM0EwQTg4MkM0RjlBRTAyLzQtdVZTMFJ5SGtFYXJ3azRNUXpCQS1wTWk3
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNC11VlMwUnlIa0VhcndrNE1RekJBLXBNaTdRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MkRFRi8xOEY2OTg3Q0IzRDUxMUVDQjNBMEE4ODJDNEY5QUUwMi9EOTAyREVBQ0Iz
RDgxMUVDOEY5QkIzODdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWe54DANBgkqhkiG9w0BAQsFAAOCAQEAg3MxugNDVk/YrNK7
ldA+NlaGdECXL4TiU+QMmi7tg25ZVwZ3gKDmxag+Tg2Hyo/QO0jEc1DeUD7qw7Ic
bBj/1AnBiozLlPmV8jhB9wEhAFIh0yLdjuhURw8S5OFCJKV6ky+VJtlmaAXxnfoY
C+Qn1O+esncEMFCqUOuAXWm8V+yb4iwpiqI5ePitxiAnpGZGXGIEY7TMWR7arLlz
/eUVYjDw6kkryvODHyKvqcHolRbVCHckv1BUhbo0weZfBxcVUOwDbpDUNDcfc0C0
NhbVPbDGfwKdVpJBerd6uyIvWRXKU5PC7/CQcFZtQAJdkaePkrfZXn5QlTlpf6bF
oY3K4w==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-fra.rpki-client.org