Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/A41151F68B0211EB8A4D4834C4F9AE02.roa
File: A41151F68B0211EB8A4D4834C4F9AE02.roa (raw, json)
Hash identifier: qA/DVbs9OKKl4cgGD6NHCpN8j9CvsE6qZpitXRDThuI=
Subject key identifier: 0E:BE:E5:1A:01:70:57:CE:48:5E:EA:CA:5C:E9:23:16:B6:BA:B1:C4
Certificate issuer: /CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4
Certificate serial: 0736
Authority key identifier: 76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/A41151F68B0211EB8A4D4834C4F9AE02.roa
Signing time: Sat 05 Mar 2022 21:47:08 +0000
ROA not before: Sat 05 Mar 2022 21:47:08 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 55492
IP address blocks: 103.136.158.0/23 maxlen: 23
103.136.158.0/24 maxlen: 24
103.136.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1846 (0x736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911E6CA/serialNumber=76B9D339FACD62B47E93E8884DE850396DBCEFB4
Validity
Not Before: Mar 5 21:47:08 2022 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=6223da5b-8515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:32:a0:21:e9:d0:54:9a:26:a8:8e:fe:38:50:
9d:d8:0a:8c:fa:68:7a:10:a2:b0:82:1c:fc:e4:38:
37:e3:ad:06:7e:f0:31:62:0c:a0:ec:a6:20:6a:53:
b1:5d:87:a7:cd:8f:9a:e0:ac:b8:20:23:9e:9c:8e:
c4:a3:3c:3d:a0:e6:16:e6:3c:5f:5a:64:05:12:5e:
43:c9:7a:a1:52:1d:11:b7:68:81:ab:55:93:d0:1d:
03:ee:6d:71:1a:c6:42:12:21:54:f2:5f:9a:51:01:
11:6f:9c:80:5b:1e:44:9e:fb:68:91:19:b5:8f:c7:
53:a0:e6:95:25:60:be:52:fe:91:d2:56:b2:c5:89:
6f:87:46:7d:4c:57:eb:db:e4:eb:8d:38:7f:19:89:
8e:92:b3:c7:a5:ec:0c:8f:f9:d3:e9:e8:4a:21:2f:
c8:57:ab:17:6c:b8:d6:e9:82:f8:f8:bf:b2:ee:2c:
9e:19:d0:31:a4:0a:94:ff:33:df:37:8a:8e:91:34:
15:42:69:69:40:45:6f:57:b9:3b:e9:ef:b2:d5:08:
53:90:d0:9f:dd:87:8a:6a:1a:c0:72:3a:f8:ba:c6:
d6:39:81:73:84:70:e9:88:39:ae:64:80:99:dd:bd:
37:f1:02:28:4d:db:36:be:0e:70:41:b9:7b:12:30:
c8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BE:E5:1A:01:70:57:CE:48:5E:EA:CA:5C:E9:23:16:B6:BA:B1:C4
X509v3 Authority Key Identifier:
keyid:76:B9:D3:39:FA:CD:62:B4:7E:93:E8:88:4D:E8:50:39:6D:BC:EF:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/drnTOfrNYrR-k-iITehQOW2877Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/drnTOfrNYrR-k-iITehQOW2877Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E6CA/7409B47A4FC711EA8E46D415C4F9AE02/A41151F68B0211EB8A4D4834C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.158.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:75:ce:08:2e:a6:d1:19:6e:0d:65:81:02:92:75:79:0f:8f:
90:20:6b:b4:af:88:75:05:d7:8a:93:26:f1:27:e9:fd:7d:03:
00:fa:18:be:4c:05:b5:88:ef:8a:c8:0e:20:08:97:f8:66:86:
48:87:67:d6:82:10:35:dc:f2:1c:dc:93:c8:67:bb:1e:9c:c8:
c1:d3:87:87:52:9c:f7:85:92:7a:79:c0:1e:36:b7:db:87:59:
83:fb:a0:00:fc:35:79:68:08:4c:67:af:57:77:9c:f9:2c:64:
14:b2:69:aa:96:d6:77:c0:76:18:55:e0:2c:36:aa:f9:26:9a:
ef:2c:1a:cf:09:a1:98:e7:57:81:99:7f:15:10:c7:7f:b7:36:
29:e8:4b:61:1f:49:9c:d5:2c:a5:f0:c9:d5:22:32:3b:e4:e3:
13:1b:52:f0:7c:91:09:be:b0:5b:de:37:ad:37:38:9d:60:cf:
4f:5c:29:62:a4:31:d9:2a:63:2e:9b:df:f1:02:19:5a:65:4f:
31:78:3c:68:b0:18:1d:6c:23:a4:42:04:35:3e:6f:86:fb:a8:
20:19:cb:29:c6:08:4c:42:2a:6e:36:0b:cb:28:01:cc:aa:5a:
f0:2d:e3:65:45:3f:94:d7:8f:19:11:63:46:ea:a4:20:64:81:
df:fc:60:04
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBzYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU2Q0ExMTAvBgNVBAUTKDc2QjlEMzM5RkFDRDYyQjQ3RTkzRTg4ODRERTg1MDM5
NkRCQ0VGQjQwHhcNMjIwMzA1MjE0NzA4WhcNMjMwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02MjIzZGE1Yi04NTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8zKgIenQVJomqI7+OFCd2AqM+mh6EKKwghz85Dg3460GfvAxYgyg7KYgalOx
XYenzY+a4Ky4ICOenI7Eozw9oOYW5jxfWmQFEl5DyXqhUh0Rt2iBq1WT0B0D7m1x
GsZCEiFU8l+aUQERb5yAWx5EnvtokRm1j8dToOaVJWC+Uv6R0layxYlvh0Z9TFfr
2+TrjTh/GYmOkrPHpewMj/nT6ehKIS/IV6sXbLjW6YL4+L+y7iyeGdAxpAqU/zPf
N4qOkTQVQmlpQEVvV7k76e+y1QhTkNCf3YeKahrAcjr4usbWOYFzhHDpiDmuZICZ
3b038QIoTds2vg5wQbl7EjDI5wIDAQABo4IClTCCApEwHQYDVR0OBBYEFA6+5RoB
cFfOSF7qylzpIxa2urHEMB8GA1UdIwQYMBaAFHa50zn6zWK0fpPoiE3oUDltvO+0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTZDQS83NDA5QjQ3QTRG
QzcxMUVBOEU0NkQ0MTVDNEY5QUUwMi9kcm5UT2ZyTllyUi1rLWlJVGVoUU9XMjg3
N1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RyblRPZnJOWXJSLWstaUlUZWhRT1cyODc3US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUU2Q0EvNzQwOUI0N0E0RkM3MTFFQThFNDZENDE1QzRGOUFFMDIvQTQxMTUxRjY4
QjAyMTFFQjhBNEQ0ODM0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFniJ4wDQYJKoZIhvcNAQELBQADggEBAB11zgguptEZbg1l
gQKSdXkPj5Aga7SviHUF14qTJvEn6f19AwD6GL5MBbWI74rIDiAIl/hmhkiHZ9aC
EDXc8hzck8hnux6cyMHTh4dSnPeFknp5wB42t9uHWYP7oAD8NXloCExnr1d3nPks
ZBSyaaqW1nfAdhhV4Cw2qvkmmu8sGs8JoZjnV4GZfxUQx3+3NinoS2EfSZzVLKXw
ydUiMjvk4xMbUvB8kQm+sFveN603OJ1gz09cKWKkMdkqYy6b3/ECGVplTzF4PGiw
GB1sI6RCBDU+b4b7qCAZyynGCExCKm42C8soAcyqWvAt42VFP5TXjxkRY0bqpCBk
gd/8YAQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:36 2023 by rpki-client on console-fra.rpki-client.org