Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/57495A50127711EDA0892B82C4F9AE02.roa
File: 57495A50127711EDA0892B82C4F9AE02.roa (raw, json)
Hash identifier: otG68GtnD7CzXE1yqWqEEvJ/5ZSxf29LAdWQrMamsEU=
Subject key identifier: 33:D3:DA:AB:1D:64:46:E1:E3:62:62:2B:AD:7E:7D:CA:C8:C6:9D:29
Certificate issuer: /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial: 0BEC
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/57495A50127711EDA0892B82C4F9AE02.roa
Signing time: Tue 02 Aug 2022 15:25:30 +0000
ROA not before: Tue 02 Aug 2022 15:25:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 997
IP address blocks: 103.136.34.0/24 maxlen: 24
103.136.35.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3052 (0xbec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Validity
Not Before: Aug 2 15:25:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62e941e9-ebac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:91:e1:11:02:a9:4f:16:a3:d9:03:e4:f8:c6:
ef:d6:9d:c2:94:ac:2d:7a:87:3c:1a:e8:bf:23:4a:
b6:c9:c6:a2:d7:ae:3a:b7:e6:64:19:d7:c6:84:75:
c4:4d:7b:dd:8f:d9:db:ba:68:5c:97:ac:25:a9:49:
36:96:6b:07:a5:34:91:a3:57:98:6c:58:64:b1:c6:
cf:c3:82:7c:a7:c4:00:69:5c:55:d0:00:7d:bd:32:
43:e5:83:a2:63:93:03:96:1d:4d:e4:b5:3f:ce:09:
53:46:9f:38:10:a2:8b:13:ad:b2:4a:e9:f7:fa:24:
ff:0f:d2:1c:c4:e1:48:d9:79:18:2a:54:63:65:fb:
5c:82:1e:a6:7b:2f:df:50:61:5e:4d:71:5e:bd:29:
4d:e7:8b:e5:99:fa:96:18:ef:14:5a:f9:76:c6:f5:
75:e1:95:99:ee:4b:90:6a:6f:70:08:cb:73:9b:38:
1d:bb:b5:d5:2c:b5:97:48:a3:0c:d9:12:35:f9:e7:
d9:a8:91:30:45:68:d6:33:b4:31:6d:00:1f:4e:6d:
c6:88:1d:79:5b:4d:c8:9d:bb:39:c9:89:6a:9a:fd:
fe:8f:91:34:3f:48:d7:8a:49:7b:e0:da:3c:7a:25:
4b:0f:31:94:00:11:ee:72:90:0f:b1:79:c8:3e:e8:
24:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D3:DA:AB:1D:64:46:E1:E3:62:62:2B:AD:7E:7D:CA:C8:C6:9D:29
X509v3 Authority Key Identifier:
keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/57495A50127711EDA0892B82C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.136.34.0/23
Signature Algorithm: sha256WithRSAEncryption
53:71:d1:db:f1:a3:a3:15:12:6a:42:14:34:76:27:43:03:d8:
d5:1f:e2:9b:39:ca:d3:f5:05:69:e2:74:c9:74:51:0d:ea:84:
e7:d7:8e:f9:c7:d8:ec:a4:84:c8:45:51:5a:39:a7:3b:40:5b:
fd:c5:e1:64:0c:4f:ff:0a:a0:97:5e:cd:ef:5b:a1:f9:38:cb:
59:2a:3d:e0:5a:a2:97:0a:95:05:d7:de:09:ac:31:f9:a5:34:
d3:41:ee:da:33:bd:c8:eb:de:e0:04:56:41:aa:2d:ec:2b:d6:
39:43:fc:d4:1b:55:78:fb:bb:49:b9:0f:56:12:40:1c:47:b2:
e0:d5:d4:83:10:ac:f8:e4:2d:f6:4e:90:62:1d:53:f5:72:97:
2d:8b:8c:65:75:c7:04:d2:5a:cf:df:16:d0:98:d3:56:ff:e4:
94:1d:51:d5:d7:33:40:25:0c:70:1e:d3:d2:c4:07:90:9d:c1:
d8:86:44:4f:2b:5b:e5:5b:fc:cc:d0:6d:4d:32:9f:ac:b3:1a:
2a:d6:3d:d7:49:12:5e:c5:2e:f6:f9:34:d9:f2:92:3a:45:c2:
e8:e2:aa:89:87:60:98:0f:47:b6:94:42:56:1f:62:71:25:5a:
27:46:c0:37:d3:09:9d:5a:22:21:c8:dd:20:ab:f5:bf:0c:81:
07:1e:42:68
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjY5OEUxMTAvBgNVBAUTKEMwQjlDMTFCMUIxNjBGMzIxQjhBRUM0Q0ZDREREQUQ4
OTVGQzQ3REUwHhcNMjIwODAyMTUyNTMwWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmU5NDFlOS1lYmFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuZHhEQKpTxaj2QPk+Mbv1p3ClKwteoc8Gui/I0q2ycai1646t+ZkGdfGhHXE
TXvdj9nbumhcl6wlqUk2lmsHpTSRo1eYbFhkscbPw4J8p8QAaVxV0AB9vTJD5YOi
Y5MDlh1N5LU/zglTRp84EKKLE62ySun3+iT/D9IcxOFI2XkYKlRjZftcgh6mey/f
UGFeTXFevSlN54vlmfqWGO8UWvl2xvV14ZWZ7kuQam9wCMtzmzgdu7XVLLWXSKMM
2RI1+efZqJEwRWjWM7QxbQAfTm3GiB15W03Inbs5yYlqmv3+j5E0P0jXikl74No8
eiVLDzGUABHucpAPsXnIPugk6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDPT2qsd
ZEbh42JiK61+fcrIxp0pMB8GA1UdIwQYMBaAFMC5wRsbFg8yG4rsTPzd2tiV/Efe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjk4RS9GMTlBN0M5NDlD
MUMxMUU5OTJGQUZCMUJDNEY5QUUwMi93TG5CR3hzV0R6SWJpdXhNX04zYTJKWDhS
OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dMbkJHeHNXRHpJYml1eE1fTjNhMkpYOFI5NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjY5OEUvRjE5QTdDOTQ5QzFDMTFFOTkyRkFGQjFCQzRGOUFFMDIvNTc0OTVBNTAx
Mjc3MTFFREEwODkyQjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFniCIwDQYJKoZIhvcNAQELBQADggEBAFNx0dvxo6MVEmpC
FDR2J0MD2NUf4ps5ytP1BWnidMl0UQ3qhOfXjvnH2OykhMhFUVo5pztAW/3F4WQM
T/8KoJdeze9bofk4y1kqPeBaopcKlQXX3gmsMfmlNNNB7tozvcjr3uAEVkGqLewr
1jlD/NQbVXj7u0m5D1YSQBxHsuDV1IMQrPjkLfZOkGIdU/Vyly2LjGV1xwTSWs/f
FtCY01b/5JQdUdXXM0AlDHAe09LEB5CdwdiGRE8rW+Vb/MzQbU0yn6yzGirWPddJ
El7FLvb5NNnykjpFwujiqomHYJgPR7aUQlYfYnElWidGwDfTCZ1aIiHI3SCr9b8M
gQceQmg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:35 2023 by rpki-client on console-ams.rpki-client.org