Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/E6346682B9D511ED89A5B11FC4F9AE02.roa
File: E6346682B9D511ED89A5B11FC4F9AE02.roa (raw, json)
Hash identifier: 8UUoAZGCNXGzk4JYrapUfeEuLeS+HZyjHPQDDiNXRLo=
Subject key identifier: 71:D1:18:3B:39:59:7C:31:05:1D:D9:DA:DF:D3:ED:35:6C:78:F0:4F
Certificate issuer: /CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Certificate serial: 02D0
Authority key identifier: 11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/E6346682B9D511ED89A5B11FC4F9AE02.roa
Signing time: Fri 03 Mar 2023 15:13:06 +0000
ROA not before: Fri 03 Mar 2023 15:13:06 +0000
ROA not after: Fri 01 Mar 2024 00:00:00 +0000
asID: 976
IP address blocks: 103.177.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 720 (0x2d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9113066/serialNumber=11BE935002F028C17CEFCB5F0A586839925B534A
Validity
Not Before: Mar 3 15:13:06 2023 GMT
Not After : Mar 1 00:00:00 2024 GMT
Subject: CN=64020e82-0079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:7e:aa:1d:98:8e:88:30:a6:dc:7a:26:54:
25:8f:9f:9e:ea:0f:e1:66:f9:8c:d8:c1:ec:ce:0d:
bb:89:4c:28:e0:0f:7c:b1:3f:0b:dc:f9:62:87:78:
90:94:6a:b9:41:e3:7f:f1:40:7d:64:3c:43:5c:fa:
2d:dc:27:50:04:b1:3e:05:e0:29:b4:7a:1b:e8:ff:
c6:31:8e:3e:76:7e:29:77:48:41:cb:8b:9f:f6:5e:
e5:89:8f:79:88:30:e4:fb:5e:67:bf:f9:e9:dd:f2:
01:2f:b7:ec:c0:46:c5:b5:c6:ce:5c:98:0f:e2:4e:
0f:9a:06:a4:be:f6:79:50:a3:b5:2a:11:8b:ed:c4:
21:bf:52:22:31:1f:b3:92:f2:8c:34:a7:a7:e3:22:
89:0d:b0:e4:06:5c:ee:92:19:e3:ab:4b:af:d8:27:
be:07:45:ea:9d:8f:c9:96:df:ad:03:49:21:8f:db:
2e:ec:13:4b:a1:d8:d2:0e:d5:95:c9:d5:5a:1b:20:
a7:8f:d8:cc:39:2d:ca:16:27:30:6b:71:e3:6a:53:
3d:cb:d3:9b:b5:c3:26:d9:7c:20:96:c8:68:69:66:
7f:a2:fe:1a:63:52:3a:6a:f9:6a:57:b4:11:f8:9a:
3b:20:6a:22:59:8c:01:be:17:9c:ac:da:d1:12:c2:
6c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D1:18:3B:39:59:7C:31:05:1D:D9:DA:DF:D3:ED:35:6C:78:F0:4F
X509v3 Authority Key Identifier:
keyid:11:BE:93:50:02:F0:28:C1:7C:EF:CB:5F:0A:58:68:39:92:5B:53:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/Eb6TUALwKMF878tfClhoOZJbU0o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Eb6TUALwKMF878tfClhoOZJbU0o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113066/6782E2DA4E3F11ECA2B52B31C4F9AE02/E6346682B9D511ED89A5B11FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.177.45.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:a0:0f:aa:29:66:6e:fa:c8:0c:29:37:19:29:3c:7e:63:1e:
37:00:ea:95:1e:7d:9f:a2:51:7d:f6:ab:dd:d8:93:79:d8:3a:
45:0d:9b:88:49:29:9a:01:e0:3a:a7:1a:19:ed:5f:a7:46:c0:
39:b3:86:ef:ae:46:1f:21:04:9f:d0:9c:6d:e2:62:69:cb:d6:
20:d6:a1:31:3a:0f:ee:81:b3:09:7c:67:fe:b3:e4:79:de:72:
ea:ef:9d:5f:fb:bd:f4:3d:23:f3:ba:ed:ed:9e:e8:51:c3:6f:
83:5f:e8:1f:11:81:f7:31:56:65:04:05:e9:00:59:cb:af:ff:
ef:f8:a6:f6:ca:3b:cc:3e:f2:ba:72:b0:cc:fd:a6:b9:5d:1f:
15:07:e3:41:c4:60:6b:54:2c:b0:dd:37:47:15:c0:dc:35:11:
de:0d:e3:21:32:0b:57:d1:4f:92:a5:76:f1:01:29:a0:b6:31:
89:b5:a1:17:07:49:21:45:19:cc:b3:23:37:a5:b9:da:56:86:
de:d2:ca:06:37:db:1f:f4:e5:fb:5a:69:5c:cc:0e:7b:6d:85:
37:61:df:2a:0b:b8:92:b5:09:86:3e:50:69:d9:ad:72:dc:eb:
b0:75:ac:bd:67:71:68:42:b9:f3:7d:10:45:81:ac:08:4f:ef:
64:2c:03:a9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTMwNjYxMTAvBgNVBAUTKDExQkU5MzUwMDJGMDI4QzE3Q0VGQ0I1RjBBNTg2ODM5
OTI1QjUzNEEwHhcNMjMwMzAzMTUxMzA2WhcNMjQwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDAyMGU4Mi0wMDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtId+qh2Yjogwptx6JlQlj5+e6g/hZvmM2MHszg27iUwo4A98sT8L3Plih3iQ
lGq5QeN/8UB9ZDxDXPot3CdQBLE+BeAptHob6P/GMY4+dn4pd0hBy4uf9l7liY95
iDDk+15nv/np3fIBL7fswEbFtcbOXJgP4k4PmgakvvZ5UKO1KhGL7cQhv1IiMR+z
kvKMNKen4yKJDbDkBlzukhnjq0uv2Ce+B0XqnY/Jlt+tA0khj9su7BNLodjSDtWV
ydVaGyCnj9jMOS3KFicwa3HjalM9y9ObtcMm2XwglshoaWZ/ov4aY1I6avlqV7QR
+Jo7IGoiWYwBvhecrNrREsJs7QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHHRGDs5
WXwxBR3Z2t/T7TVsePBPMB8GA1UdIwQYMBaAFBG+k1AC8CjBfO/LXwpYaDmSW1NK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzA2Ni82NzgyRTJEQTRF
M0YxMUVDQTJCNTJCMzFDNEY5QUUwMi9FYjZUVUFMd0tNRjg3OHRmQ2xob09aSmJV
MG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ViNlRVQUx3S01GODc4dGZDbGhvT1pKYlUwby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTMwNjYvNjc4MkUyREE0RTNGMTFFQ0EyQjUyQjMxQzRGOUFFMDIvRTYzNDY2ODJC
OUQ1MTFFRDg5QTVCMTFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnsS0wDQYJKoZIhvcNAQELBQADggEBAHqgD6opZm76yAwp
NxkpPH5jHjcA6pUefZ+iUX32q93Yk3nYOkUNm4hJKZoB4DqnGhntX6dGwDmzhu+u
Rh8hBJ/QnG3iYmnL1iDWoTE6D+6Bswl8Z/6z5HnecurvnV/7vfQ9I/O67e2e6FHD
b4Nf6B8RgfcxVmUEBekAWcuv/+/4pvbKO8w+8rpysMz9prldHxUH40HEYGtULLDd
N0cVwNw1Ed4N4yEyC1fRT5KldvEBKaC2MYm1oRcHSSFFGcyzIzeludpWht7SygY3
2x/05ftaaVzMDntthTdh3yoLuJK1CYY+UGnZrXLc67B1rL1ncWhCufN9EEWBrAhP
72QsA6k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:54 2024 by rpki-client on console-fra.rpki-client.org