Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/76773398BE2011ED9E80730EC4F9AE02.roa
File: 76773398BE2011ED9E80730EC4F9AE02.roa (raw, json)
Hash identifier: OjWpnCUKXwOHbuMyhyvch4fooowU43x3W+3zg7SlzyA=
Subject key identifier: B1:50:AE:E9:96:DD:A0:6A:A7:10:E6:0C:06:88:63:07:8F:24:C9:89
Certificate issuer: /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial: 02
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/76773398BE2011ED9E80730EC4F9AE02.roa
Signing time: Thu 09 Mar 2023 02:16:56 +0000
ROA not before: Thu 09 Mar 2023 02:16:56 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 17447
IP address blocks: 103.71.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Validity
Not Before: Mar 9 02:16:56 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64094197-7d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:62:e9:cd:c7:95:c8:67:a0:f6:e0:40:8d:
bd:af:9e:b7:a3:2a:47:2f:38:cd:55:a9:62:ab:57:
34:bc:3a:3d:3d:a4:40:b8:8c:e6:6a:33:21:04:78:
f4:87:af:40:48:53:f6:ac:5a:78:f0:7d:2e:f5:ef:
89:ef:2a:9b:07:b4:cf:30:8a:0a:14:b1:fb:07:74:
07:24:4f:61:65:ae:a4:c6:3e:f4:4a:04:cb:70:a9:
4f:95:75:a6:d2:31:92:67:71:28:31:a2:78:a2:2d:
57:e8:86:0e:67:f4:17:fa:3f:2d:c4:41:ae:e2:ce:
59:af:d8:2a:ca:20:a9:ae:90:a1:ce:38:60:68:af:
83:d9:77:a4:3e:c0:eb:7f:c6:0b:22:5d:6a:a9:0a:
72:4d:26:d1:8a:fe:ad:40:a8:74:53:df:c5:da:6b:
0b:f2:3d:df:7c:37:b3:94:e1:fb:9d:71:9e:59:7a:
3e:ab:59:10:8b:95:12:e2:f8:b5:98:5e:ea:5d:4b:
4e:e5:bf:a6:56:17:cb:15:2a:ba:3f:c6:c0:99:f8:
15:64:b3:52:f6:68:3a:8e:f1:41:52:2d:27:01:84:
41:21:fa:9f:57:fb:3d:b6:27:09:c9:a0:41:f7:98:
9f:a1:3a:b8:91:fa:2e:d1:55:80:45:e3:41:80:c0:
e3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:50:AE:E9:96:DD:A0:6A:A7:10:E6:0C:06:88:63:07:8F:24:C9:89
X509v3 Authority Key Identifier:
keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/76773398BE2011ED9E80730EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.71.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:83:ee:f7:44:cb:46:3a:5f:50:70:e9:43:92:5f:d6:5a:08:
98:b5:c3:72:be:9c:2f:cb:99:35:8b:65:22:ea:da:14:af:ad:
8e:98:06:cb:27:45:e8:06:61:5c:b7:e9:3f:29:c5:e0:4c:62:
6c:a7:02:55:a2:e8:20:f9:5d:ef:25:07:4f:c0:57:d1:a4:64:
12:ca:72:1c:79:81:5d:a7:51:5d:0f:49:a4:d6:b9:d6:5e:6d:
36:ab:94:75:7f:a8:f1:8f:91:1d:f8:88:4d:df:cf:44:9f:47:
20:77:37:0e:64:ec:75:6a:5c:57:dc:16:7e:ac:86:b0:b2:fc:
49:4d:88:45:b8:bf:01:24:31:a1:db:63:05:7b:e1:e1:cf:09:
50:f9:4d:7c:39:21:c0:2b:fe:3b:d0:ee:c9:ab:a6:72:e4:17:
73:e7:6b:7a:3d:48:78:65:d0:4f:fd:49:76:9b:f6:a6:eb:74:
ee:4c:85:55:e5:50:fa:d8:52:07:f5:5b:75:84:28:34:2e:86:
29:4c:51:20:97:b2:1c:89:ad:41:64:72:8c:40:ea:db:e7:0b:
0a:85:d0:55:7e:ec:54:49:5e:a3:18:aa:27:cf:cb:0c:74:40:
dc:93:65:2e:8a:6b:7d:51:c2:2c:78:94:cb:eb:58:d9:7a:6c:
05:2d:22:0f
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NkREQjExMC8GA1UEBRMoMEM3NjlEQTQ0OTgyRjYxNjUwMzYyOTQzRTZERkVGOTUx
Qjk3NzdGQTAeFw0yMzAzMDkwMjE2NTZaFw0yMzEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0MDk0MTk3LTdkN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCgDWLpzceVyGeg9uBAjb2vnrejKkcvOM1VqWKrVzS8Oj09pEC4jOZqMyEEePSH
r0BIU/asWnjwfS7174nvKpsHtM8wigoUsfsHdAckT2FlrqTGPvRKBMtwqU+VdabS
MZJncSgxoniiLVfohg5n9Bf6Py3EQa7izlmv2CrKIKmukKHOOGBor4PZd6Q+wOt/
xgsiXWqpCnJNJtGK/q1AqHRT38XaawvyPd98N7OU4fudcZ5Zej6rWRCLlRLi+LWY
XupdS07lv6ZWF8sVKro/xsCZ+BVks1L2aDqO8UFSLScBhEEh+p9X+z22JwnJoEH3
mJ+hOriR+i7RVYBF40GAwOObAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUsVCu6Zbd
oGqnEOYMBohjB48kyYkwHwYDVR0jBBgwFoAUDHadpEmC9hZQNilD5t/vlRuXd/ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2RERCL0UxQ0RDREQyQkUx
QjExRURBNjFBQ0Q4NEM0RjlBRTAyL0RIYWRwRW1DOWhaUU5pbEQ1dF92bFJ1WGRf
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvREhhZHBFbUM5aFpRTmlsRDV0X3ZsUnVYZF9vLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NkREQi9FMUNEQ0REMkJFMUIxMUVEQTYxQUNEODRDNEY5QUUwMi83Njc3MzM5OEJF
MjAxMUVEOUU4MDczMEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGdHXDANBgkqhkiG9w0BAQsFAAOCAQEAXYPu90TLRjpfUHDp
Q5Jf1loImLXDcr6cL8uZNYtlIuraFK+tjpgGyydF6AZhXLfpPynF4ExibKcCVaLo
IPld7yUHT8BX0aRkEspyHHmBXadRXQ9JpNa51l5tNquUdX+o8Y+RHfiITd/PRJ9H
IHc3DmTsdWpcV9wWfqyGsLL8SU2IRbi/ASQxodtjBXvh4c8JUPlNfDkhwCv+O9Du
yaumcuQXc+drej1IeGXQT/1Jdpv2put07kyFVeVQ+thSB/VbdYQoNC6GKUxRIJey
HImtQWRyjEDq2+cLCoXQVX7sVEleoxiqJ8/LDHRA3JNlLoprfVHCLHiUy+tY2Xps
BS0iDw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:50:55 2024 by rpki-client on console-fra.rpki-client.org