Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/C30513B4F76111EC93951455C4F9AE02.roa
File: C30513B4F76111EC93951455C4F9AE02.roa (raw, json)
Hash identifier: Le+nSbqhR1954DkZEQ6u5FRo8Y263c9XPQFM81zUuyI=
Subject key identifier: 99:F6:42:91:E2:8D:5F:24:69:E9:D6:09:86:5D:56:E3:B4:6A:F6:7C
Certificate issuer: /CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Certificate serial: 07B9
Authority key identifier: AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/C30513B4F76111EC93951455C4F9AE02.roa
Signing time: Wed 29 Jun 2022 04:13:00 +0000
ROA not before: Wed 29 Jun 2022 04:13:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 938
IP address blocks: 103.19.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1977 (0x7b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9132B1E/serialNumber=ABD43548659CBB276EF8D35B8212F838E8CEB75F
Validity
Not Before: Jun 29 04:13:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62bbd14c-a0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:85:cf:15:cb:c6:c1:8a:8e:11:e6:4d:aa:a9:
e9:b9:ad:f6:d2:8a:a1:9d:71:68:f9:64:0a:e3:bb:
98:84:3b:68:72:06:2b:71:5c:f4:45:a7:3a:4a:00:
aa:ee:0f:1b:42:1b:15:89:6c:7e:18:57:77:85:38:
d7:e2:15:83:90:a0:2d:2a:b0:b9:3c:b4:bd:4e:79:
73:9d:45:cc:ed:08:e6:90:53:ac:9d:26:e4:6a:26:
48:08:4a:ec:49:b9:42:c5:40:ca:98:f5:66:6b:16:
17:b5:2b:aa:62:9b:56:9f:e3:89:ec:0f:b4:12:f2:
f3:79:dd:2c:03:51:0a:62:c8:e8:62:4d:5e:4d:b9:
bd:7e:71:be:79:90:1d:42:7d:b0:09:1f:8c:6a:ec:
20:f5:42:91:2a:27:56:65:38:4d:c9:fe:3a:0b:93:
33:11:31:fb:07:f4:3c:f0:ae:50:39:dc:6e:69:fa:
96:6c:af:b7:1e:05:d3:d2:2a:9a:cf:8a:22:92:d0:
65:1c:34:2b:54:88:bb:6c:6e:68:5c:58:5f:ef:f5:
8e:ad:1c:45:a0:1e:8c:74:a8:8b:24:c8:02:2f:f1:
3e:98:c2:df:89:43:0a:b6:2c:5c:c2:f0:3d:72:d0:
e1:d3:0a:a3:2f:8b:24:ec:ff:c4:7d:1d:c8:7a:ea:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F6:42:91:E2:8D:5F:24:69:E9:D6:09:86:5D:56:E3:B4:6A:F6:7C
X509v3 Authority Key Identifier:
keyid:AB:D4:35:48:65:9C:BB:27:6E:F8:D3:5B:82:12:F8:38:E8:CE:B7:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/q9Q1SGWcuydu-NNbghL4OOjOt18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q9Q1SGWcuydu-NNbghL4OOjOt18.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B1E/8936CC04883211EA84861B70C4F9AE02/C30513B4F76111EC93951455C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.19.236.0/22
Signature Algorithm: sha256WithRSAEncryption
24:07:00:de:a0:ae:ec:fc:b8:28:a1:f7:31:29:a5:03:05:f5:
6e:60:04:af:a3:d7:61:2f:ec:73:16:46:26:91:89:17:3f:45:
58:2e:57:15:5a:08:5a:9b:98:43:ce:6c:f7:13:9a:05:86:70:
f5:a2:09:d3:1b:a4:9e:6a:39:8f:66:7e:7e:7b:4d:8c:d9:3c:
a3:9c:01:a3:75:5b:aa:62:37:14:86:54:da:6f:3e:0b:cb:1c:
4f:51:eb:1f:2a:15:1e:ef:2a:ef:f5:4d:71:f8:4d:b8:c1:d3:
4b:44:3d:56:49:23:62:b1:56:c2:c5:79:a4:6b:a0:77:b8:b0:
3e:44:d7:95:99:87:50:3d:a2:35:ee:01:fb:80:a2:49:30:eb:
ff:8f:ba:6c:8a:ed:aa:3b:fe:81:57:cf:51:08:12:d3:4c:92:
51:c0:f9:0c:52:bd:c7:85:59:c6:16:57:13:22:6f:9d:f2:52:
05:3a:53:4f:6f:83:5a:41:a6:ff:c4:d0:48:43:ae:53:64:14:
96:e7:67:8e:50:a9:89:dc:06:40:23:cb:c0:f2:2a:b2:ea:eb:
ee:ea:29:a4:3d:7c:9b:7f:c4:fd:01:23:3d:1c:4d:4e:bc:7f:
21:28:37:6c:fd:3c:85:56:b0:38:4e:30:12:2b:92:a4:cc:ed:
a2:73:e8:78
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB7kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJCMUUxMTAvBgNVBAUTKEFCRDQzNTQ4NjU5Q0JCMjc2RUY4RDM1QjgyMTJGODM4
RThDRUI3NUYwHhcNMjIwNjI5MDQxMzAwWhcNMjMwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmJiZDE0Yy1hMGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2IXPFcvGwYqOEeZNqqnpua320oqhnXFo+WQK47uYhDtocgYrcVz0Rac6SgCq
7g8bQhsViWx+GFd3hTjX4hWDkKAtKrC5PLS9TnlznUXM7QjmkFOsnSbkaiZICErs
SblCxUDKmPVmaxYXtSuqYptWn+OJ7A+0EvLzed0sA1EKYsjoYk1eTbm9fnG+eZAd
Qn2wCR+Mauwg9UKRKidWZThNyf46C5MzETH7B/Q88K5QOdxuafqWbK+3HgXT0iqa
z4oiktBlHDQrVIi7bG5oXFhf7/WOrRxFoB6MdKiLJMgCL/E+mMLfiUMKtixcwvA9
ctDh0wqjL4sk7P/EfR3Ieuq+XQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJn2QpHi
jV8kaenWCYZdVuO0avZ8MB8GA1UdIwQYMBaAFKvUNUhlnLsnbvjTW4IS+Djozrdf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkIxRS84OTM2Q0MwNDg4
MzIxMUVBODQ4NjFCNzBDNEY5QUUwMi9xOVExU0dXY3V5ZHUtTk5iZ2hMNE9Pak90
MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E5UTFTR1djdXlkdS1OTmJnaEw0T09qT3QxOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzJCMUUvODkzNkNDMDQ4ODMyMTFFQTg0ODYxQjcwQzRGOUFFMDIvQzMwNTEzQjRG
NzYxMTFFQzkzOTUxNDU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnE+wwDQYJKoZIhvcNAQELBQADggEBACQHAN6gruz8uCih
9zEppQMF9W5gBK+j12Ev7HMWRiaRiRc/RVguVxVaCFqbmEPObPcTmgWGcPWiCdMb
pJ5qOY9mfn57TYzZPKOcAaN1W6piNxSGVNpvPgvLHE9R6x8qFR7vKu/1TXH4TbjB
00tEPVZJI2KxVsLFeaRroHe4sD5E15WZh1A9ojXuAfuAokkw6/+PumyK7ao7/oFX
z1EIEtNMklHA+QxSvceFWcYWVxMib53yUgU6U09vg1pBpv/E0EhDrlNkFJbnZ45Q
qYncBkAjy8DyKrLq6+7qKaQ9fJt/xP0BIz0cTU68fyEoN2z9PIVWsDhOMBIrkqTM
7aJz6Hg=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:38 2023 by rpki-client on console-fra.rpki-client.org