Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/71EE40E8542A11ECA44C8718C4F9AE02.roa
File: 71EE40E8542A11ECA44C8718C4F9AE02.roa (raw, json)
Hash identifier: a63MsftS16gp9ASIVMgPx1aY7oaE4vqw8knCl4SsbKQ=
Subject key identifier: C0:E3:F2:D7:25:4D:6E:04:66:82:FE:F3:DD:5E:AE:99:69:88:19:E3
Certificate issuer: /CN=A912E092/serialNumber=A18125D1D3BE4E60CFD9C821FCF5ACCE4EDA6544
Certificate serial: 079B
Authority key identifier: A1:81:25:D1:D3:BE:4E:60:CF:D9:C8:21:FC:F5:AC:CE:4E:DA:65:44
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYEl0dO-TmDP2cgh_PWszk7aZUQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/71EE40E8542A11ECA44C8718C4F9AE02.roa
Signing time: Fri 03 Dec 2021 11:16:22 +0000
ROA not before: Fri 03 Dec 2021 11:16:22 +0000
ROA not after: Wed 02 Mar 2022 00:00:00 +0000
asID: 17557
IP address blocks: 103.125.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1947 (0x79b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E092/serialNumber=A18125D1D3BE4E60CFD9C821FCF5ACCE4EDA6544
Validity
Not Before: Dec 3 11:16:22 2021 GMT
Not After : Mar 2 00:00:00 2022 GMT
Subject: CN=61a9fc86-8513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:e9:9e:22:c2:38:cd:0c:d8:93:7b:94:1f:
0e:6f:c1:8d:bf:bd:9b:7d:03:58:5c:d7:85:45:13:
9f:6a:19:4a:58:18:32:15:2c:36:a8:bb:24:b3:a9:
40:a8:95:b3:43:f8:d3:b7:1d:21:75:3b:50:62:7d:
95:43:ee:27:d8:f4:5c:a0:ae:3b:a2:87:be:b6:f5:
33:c2:fe:ea:e3:03:3a:4e:e8:b4:82:07:f4:27:4d:
8b:1a:31:b1:5c:00:c4:a9:ce:34:b1:52:5c:c8:74:
3e:da:73:61:15:24:97:ed:73:65:35:50:e9:0b:3c:
df:a3:10:cb:27:4c:46:b8:27:28:ef:ca:be:5d:8c:
40:40:40:26:c1:ad:e3:11:2e:83:39:78:61:cb:c4:
2e:5d:40:54:3e:6c:dd:ad:72:b7:ee:43:14:5c:e6:
65:1f:18:a3:af:f2:2c:fc:8b:04:c6:e5:55:90:90:
0e:b3:f9:fd:45:43:b8:e2:a4:44:be:d4:55:2c:c5:
fe:4c:1b:3c:19:bd:5a:92:7f:08:dc:9b:cf:89:7b:
c6:45:0d:db:25:3d:7f:9d:88:c6:e5:ef:cb:f4:12:
93:22:52:e6:14:2a:20:d4:e9:4d:ef:dd:8f:f7:2a:
67:f7:c7:23:be:dd:2c:1a:60:49:22:66:c8:79:27:
d9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E3:F2:D7:25:4D:6E:04:66:82:FE:F3:DD:5E:AE:99:69:88:19:E3
X509v3 Authority Key Identifier:
keyid:A1:81:25:D1:D3:BE:4E:60:CF:D9:C8:21:FC:F5:AC:CE:4E:DA:65:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/oYEl0dO-TmDP2cgh_PWszk7aZUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYEl0dO-TmDP2cgh_PWszk7aZUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E092/DF22B4FA18B811EAB06CA785C4F9AE02/71EE40E8542A11ECA44C8718C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.125.179.0/24
Signature Algorithm: sha256WithRSAEncryption
19:69:74:77:c1:17:ff:89:30:5e:95:22:a5:80:ef:63:6d:a0:
08:a2:fa:a4:3a:4e:2b:15:db:bc:da:26:fb:0d:e9:54:c2:8f:
da:0a:23:85:98:09:47:f2:4b:c5:20:ec:2a:d8:09:28:71:19:
c6:8f:59:80:05:a3:c8:c8:bb:f8:4b:c3:64:09:59:9e:03:ee:
7e:01:66:bf:83:92:0f:b5:c5:65:d3:2a:56:5b:c5:9a:5d:90:
be:f2:aa:f9:93:6d:08:f5:19:a4:38:bf:9d:65:cf:83:e7:28:
be:60:4f:ec:ac:b1:fd:c5:22:f7:b1:e3:c2:a5:94:e1:2a:27:
42:2b:4f:a1:99:2e:cb:40:c0:59:26:f0:43:3e:aa:e2:53:e7:
af:65:66:cc:ec:89:1a:78:5b:8f:f9:6e:1e:1a:53:4a:9a:b5:
1c:44:2f:3d:84:30:37:25:87:e5:ce:11:80:fa:e3:3e:36:d1:
48:a1:68:63:0f:1d:9d:ec:6c:7c:c8:21:74:6e:42:a9:11:97:
e9:29:96:77:a7:98:ef:52:a1:d5:33:94:c4:db:aa:a1:a9:c7:
4b:f7:b9:0f:14:c8:7f:a4:16:8c:2b:1e:a2:e7:1a:3e:ba:ae:
f1:f8:30:74:68:17:2a:ec:51:b9:1e:dc:2f:b0:98:f9:d4:bc:
ff:06:74:77
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkUwOTIxMTAvBgNVBAUTKEExODEyNUQxRDNCRTRFNjBDRkQ5QzgyMUZDRjVBQ0NF
NEVEQTY1NDQwHhcNMjExMjAzMTExNjIyWhcNMjIwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWE5ZmM4Ni04NTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq4HpniLCOM0M2JN7lB8Ob8GNv72bfQNYXNeFRROfahlKWBgyFSw2qLsks6lA
qJWzQ/jTtx0hdTtQYn2VQ+4n2PRcoK47ooe+tvUzwv7q4wM6Tui0ggf0J02LGjGx
XADEqc40sVJcyHQ+2nNhFSSX7XNlNVDpCzzfoxDLJ0xGuCco78q+XYxAQEAmwa3j
ES6DOXhhy8QuXUBUPmzdrXK37kMUXOZlHxijr/Is/IsExuVVkJAOs/n9RUO44qRE
vtRVLMX+TBs8Gb1akn8I3JvPiXvGRQ3bJT1/nYjG5e/L9BKTIlLmFCog1OlN792P
9ypn98cjvt0sGmBJImbIeSfZ6QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMDj8tcl
TW4EZoL+891erplpiBnjMB8GA1UdIwQYMBaAFKGBJdHTvk5gz9nIIfz1rM5O2mVE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTA5Mi9ERjIyQjRGQTE4
QjgxMUVBQjA2Q0E3ODVDNEY5QUUwMi9vWUVsMGRPLVRtRFAyY2doX1BXc3prN2Fa
VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29ZRWwwZE8tVG1EUDJjZ2hfUFdzems3YVpVUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkUwOTIvREYyMkI0RkExOEI4MTFFQUIwNkNBNzg1QzRGOUFFMDIvNzFFRTQwRTg1
NDJBMTFFQ0E0NEM4NzE4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnfbMwDQYJKoZIhvcNAQELBQADggEBABlpdHfBF/+JMF6V
IqWA72NtoAii+qQ6TisV27zaJvsN6VTCj9oKI4WYCUfyS8Ug7CrYCShxGcaPWYAF
o8jIu/hLw2QJWZ4D7n4BZr+Dkg+1xWXTKlZbxZpdkL7yqvmTbQj1GaQ4v51lz4Pn
KL5gT+yssf3FIvex48KllOEqJ0IrT6GZLstAwFkm8EM+quJT569lZszsiRp4W4/5
bh4aU0qatRxELz2EMDclh+XOEYD64z420UihaGMPHZ3sbHzIIXRuQqkRl+kplnen
mO9SodUzlMTbqqGpx0v3uQ8UyH+kFowrHqLnGj66rvH4MHRoFyrsUbke3C+wmPnU
vP8GdHc=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:37 2023 by rpki-client on console-fra.rpki-client.org