Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/FC947890E15911ECA05C9236C4F9AE02.roa
File: FC947890E15911ECA05C9236C4F9AE02.roa (raw, json)
Hash identifier: xNhVHWAtB7aQu9TEJZsb+K8S8q+HlbHGijdXWPa0my4=
Subject key identifier: C7:89:C7:43:0C:B1:42:A9:0A:2C:40:9F:74:F2:F8:25:EA:75:5F:08
Certificate issuer: /CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Certificate serial: 07CA
Authority key identifier: A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/FC947890E15911ECA05C9236C4F9AE02.roa
Signing time: Wed 01 Jun 2022 03:21:55 +0000
ROA not before: Wed 01 Jun 2022 03:21:55 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 137969
IP address blocks: 103.148.150.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1994 (0x7ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913258C/serialNumber=A68CFA311EBB1F10320EA207753030E7F3A28F72
Validity
Not Before: Jun 1 03:21:55 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=6296db53-10f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:04:82:df:67:01:ef:3f:85:91:87:c4:d9:
07:8c:24:db:19:19:5f:50:9b:89:63:24:c0:e2:df:
9a:40:8a:6f:23:67:b0:8f:88:27:30:e0:dd:f8:8f:
03:6e:b8:85:2f:58:01:b1:9d:df:a6:eb:43:07:69:
77:41:ab:d6:7f:4a:91:4e:b9:10:44:c5:d0:ce:76:
f0:63:e5:e2:08:5c:5b:8e:ea:76:6e:33:75:84:6d:
15:40:98:90:8d:47:5f:18:1e:15:77:4c:13:e4:59:
82:ee:34:03:d2:3d:cd:5d:77:85:16:de:1a:7f:ff:
43:26:fa:a9:0a:ca:ba:94:18:9d:e9:4c:20:b8:a5:
40:f9:6a:0e:a4:e6:9d:d3:ed:ed:42:23:42:ee:47:
60:c3:91:f9:27:8e:81:75:c4:b7:6a:da:ce:8f:90:
11:52:51:b8:a4:2f:53:89:99:65:d8:77:27:8c:27:
fc:8c:11:e1:a8:61:5b:8f:ab:75:08:8e:77:6b:d4:
90:c0:5d:63:2f:39:6b:00:19:d9:3b:5b:02:90:15:
ca:a6:14:82:57:26:6c:19:40:50:a8:db:c6:e3:11:
67:a8:2e:0c:a0:44:ad:45:2c:f5:b1:14:2a:97:f4:
ff:76:a2:c6:ae:89:c0:44:66:6e:98:32:37:30:5b:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:89:C7:43:0C:B1:42:A9:0A:2C:40:9F:74:F2:F8:25:EA:75:5F:08
X509v3 Authority Key Identifier:
keyid:A6:8C:FA:31:1E:BB:1F:10:32:0E:A2:07:75:30:30:E7:F3:A2:8F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/poz6MR67HxAyDqIHdTAw5_Oij3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poz6MR67HxAyDqIHdTAw5_Oij3I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913258C/B4C45FE0548D11EA86C9DD7EC4F9AE02/FC947890E15911ECA05C9236C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.148.150.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:fa:be:9d:40:bc:d7:04:0d:16:70:07:1e:bb:45:7b:02:8b:
5d:2d:e8:96:fa:4c:72:27:af:3a:cf:4c:41:4a:06:4e:af:ff:
f6:8a:a4:a7:57:fd:d1:d7:5e:bf:c5:a8:7e:4a:a8:b8:bd:b2:
a6:9e:a2:7b:71:fb:b0:b2:fb:cc:d3:a0:86:f1:2b:04:47:08:
5f:b3:e9:6d:47:6a:b3:cb:28:03:e6:c9:66:ff:12:c0:00:32:
03:bf:b5:dd:40:be:17:7b:7e:52:64:27:ee:a3:ac:e4:d6:64:
82:a1:ed:86:cf:d8:c5:00:b2:0f:05:3a:ef:8c:a0:ab:67:32:
9b:cc:19:99:11:1b:79:55:42:a4:29:ab:a4:6d:c4:01:93:00:
06:be:28:2a:b1:a4:ff:98:3b:49:7d:1d:76:8f:16:9a:26:77:
04:99:35:03:6b:45:fd:83:11:57:a2:7a:9a:b6:90:f7:63:d7:
b6:ee:f6:14:10:59:1f:5a:37:74:60:d5:9d:37:5c:2f:e6:f4:
e3:b4:4e:d7:10:53:e8:17:1a:fe:89:ab:bc:4e:58:47:24:95:
71:70:7b:a9:0e:a0:1d:7d:80:2e:22:bd:51:0f:64:5d:a3:32:
63:1a:b7:d8:2b:99:82:1a:ff:44:21:74:2f:d8:64:28:9d:fe:
0f:97:56:14
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI1OEMxMTAvBgNVBAUTKEE2OENGQTMxMUVCQjFGMTAzMjBFQTIwNzc1MzAzMEU3
RjNBMjhGNzIwHhcNMjIwNjAxMDMyMTU1WhcNMjMwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mjk2ZGI1My0xMGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0v0Egt9nAe8/hZGHxNkHjCTbGRlfUJuJYyTA4t+aQIpvI2ewj4gnMODd+I8D
briFL1gBsZ3fputDB2l3QavWf0qRTrkQRMXQznbwY+XiCFxbjup2bjN1hG0VQJiQ
jUdfGB4Vd0wT5FmC7jQD0j3NXXeFFt4af/9DJvqpCsq6lBid6UwguKVA+WoOpOad
0+3tQiNC7kdgw5H5J46BdcS3atrOj5ARUlG4pC9TiZll2HcnjCf8jBHhqGFbj6t1
CI53a9SQwF1jLzlrABnZO1sCkBXKphSCVyZsGUBQqNvG4xFnqC4MoEStRSz1sRQq
l/T/dqLGronARGZumDI3MFu2UQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMeJx0MM
sUKpCixAn3Ty+CXqdV8IMB8GA1UdIwQYMBaAFKaM+jEeux8QMg6iB3UwMOfzoo9y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjU4Qy9CNEM0NUZFMDU0
OEQxMUVBODZDOUREN0VDNEY5QUUwMi9wb3o2TVI2N0h4QXlEcUlIZFRBdzVfT2lq
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BvejZNUjY3SHhBeURxSUhkVEF3NV9PaWozSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzI1OEMvQjRDNDVGRTA1NDhEMTFFQTg2QzlERDdFQzRGOUFFMDIvRkM5NDc4OTBF
MTU5MTFFQ0EwNUM5MjM2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnlJYwDQYJKoZIhvcNAQELBQADggEBAGr6vp1AvNcEDRZw
Bx67RXsCi10t6Jb6THInrzrPTEFKBk6v//aKpKdX/dHXXr/FqH5KqLi9sqaeontx
+7Cy+8zToIbxKwRHCF+z6W1HarPLKAPmyWb/EsAAMgO/td1Avhd7flJkJ+6jrOTW
ZIKh7YbP2MUAsg8FOu+MoKtnMpvMGZkRG3lVQqQpq6RtxAGTAAa+KCqxpP+YO0l9
HXaPFpomdwSZNQNrRf2DEVeiepq2kPdj17bu9hQQWR9aN3Rg1Z03XC/m9OO0TtcQ
U+gXGv6Jq7xOWEcklXFwe6kOoB19gC4ivVEPZF2jMmMat9grmYIa/0QhdC/YZCid
/g+XVhQ=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-fra.rpki-client.org