Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/D05E94A6FB0F11ED9BA1826AC4F9AE02.roa
File: D05E94A6FB0F11ED9BA1826AC4F9AE02.roa (raw, json)
Hash identifier: Ty23KIqy4qysq0ZZRBWHWxlBwvquSP+NV73i7CbPrPg=
Subject key identifier: 85:5F:92:2C:5E:40:27:A5:09:B2:05:FA:B7:B6:49:19:A3:C2:B4:90
Certificate issuer: /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial: 041A
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/D05E94A6FB0F11ED9BA1826AC4F9AE02.roa
Signing time: Thu 20 Jul 2023 12:17:49 +0000
ROA not before: Thu 20 Jul 2023 12:17:49 +0000
ROA not after: Fri 01 Dec 2023 00:00:00 +0000
asID: 150716
IP address blocks: 103.240.196.0/24 maxlen: 24
103.240.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1050 (0x41a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Validity
Not Before: Jul 20 12:17:49 2023 GMT
Not After : Dec 1 00:00:00 2023 GMT
Subject: CN=64b925ed-7c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e0:0e:eb:07:b3:b0:6c:e3:7c:62:5e:e4:b6:
ce:9a:52:c6:09:a0:94:61:0c:dc:61:01:ee:96:d4:
50:6e:2c:35:95:cf:69:b7:de:bd:4d:84:12:da:5f:
2b:dd:46:ce:9f:6e:b0:c0:54:a5:d2:2f:1b:e9:6c:
b3:ff:7f:69:1e:ed:b4:ad:7c:59:6b:56:50:01:06:
4f:18:0e:af:46:eb:58:17:f7:38:5e:01:9b:a1:86:
b9:7a:06:e9:08:35:c9:1d:80:71:29:65:59:9f:99:
02:45:1f:61:3d:3f:fc:bb:ca:10:8f:94:e4:5b:7b:
21:1d:d8:95:d1:0c:e7:d5:5c:ad:b6:e6:f3:e9:e9:
df:e6:71:d5:44:95:e0:8f:a3:06:1c:1c:d9:53:3d:
ff:77:56:6a:cc:81:ab:88:65:7a:b7:a7:45:5b:04:
0a:3e:91:9b:87:8c:d0:68:7a:5a:77:5b:9d:2d:28:
19:f9:5c:02:77:59:d8:63:ca:e2:ed:aa:2d:17:82:
89:2a:61:a7:4b:4c:c2:f0:84:5a:68:ca:b9:f9:02:
d7:d8:c7:c3:eb:d2:cd:97:0b:85:db:79:c3:f8:b9:
d0:94:01:54:ef:65:75:b9:b0:a4:68:1d:aa:03:ef:
a6:92:25:30:42:7e:18:60:0e:4b:08:90:e0:bd:d5:
db:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5F:92:2C:5E:40:27:A5:09:B2:05:FA:B7:B6:49:19:A3:C2:B4:90
X509v3 Authority Key Identifier:
keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/D05E94A6FB0F11ED9BA1826AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.240.196.0/24
103.240.198.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f5:43:b7:2e:f2:ef:07:f6:c9:e9:82:72:04:d0:72:55:3c:
36:57:14:f4:35:3b:0d:75:a3:db:61:9a:3b:8a:39:77:7b:28:
8c:b4:62:7d:bb:90:bd:7c:29:12:5f:ed:f5:0d:89:40:a2:09:
9f:c4:5c:d1:68:a4:21:b8:21:cf:b8:ed:65:0d:32:bb:cc:4e:
65:63:00:bf:d6:cf:eb:34:eb:fe:d6:2b:41:d2:56:01:84:db:
1a:0f:ef:6b:87:ad:63:ae:cb:dd:40:4b:1c:cb:7b:e5:fc:c3:
6f:80:ce:9a:cd:5b:b8:ed:ad:c9:0a:52:0f:45:6e:bc:c1:6c:
d0:db:87:0e:96:a4:91:3f:7f:9f:e5:7a:63:14:a4:a7:4f:28:
e6:ec:9c:83:12:a3:9f:70:b0:8c:34:ef:51:84:f0:fb:e9:8c:
5c:f7:dc:c2:ec:fc:bc:58:92:c4:0d:29:1c:37:8f:05:07:1a:
b1:91:63:a5:d7:7d:53:1d:8a:ba:ab:89:23:85:c1:a9:90:98:
bb:32:02:aa:ec:ee:28:3c:c4:e9:18:55:86:2d:ce:43:06:19:
e1:4c:1f:f4:b9:f7:09:e4:c5:35:79:fe:d7:7c:fa:16:b4:ba:
98:e7:42:b3:af:f3:0a:67:b0:c5:94:ff:fd:b9:74:4c:0e:c1:
51:34:87:92
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzkzMjIxMTAvBgNVBAUTKEVEQzU0N0JEMEU2QzBDMDcwNkExODU4MzM4MzVGNjVF
QTNDNzEwMTMwHhcNMjMwNzIwMTIxNzQ5WhcNMjMxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NGI5MjVlZC03YzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz+AO6wezsGzjfGJe5LbOmlLGCaCUYQzcYQHultRQbiw1lc9pt969TYQS2l8r
3UbOn26wwFSl0i8b6Wyz/39pHu20rXxZa1ZQAQZPGA6vRutYF/c4XgGboYa5egbp
CDXJHYBxKWVZn5kCRR9hPT/8u8oQj5TkW3shHdiV0Qzn1Vyttubz6enf5nHVRJXg
j6MGHBzZUz3/d1ZqzIGriGV6t6dFWwQKPpGbh4zQaHpad1udLSgZ+VwCd1nYY8ri
7aotF4KJKmGnS0zC8IRaaMq5+QLX2MfD69LNlwuF23nD+LnQlAFU72V1ubCkaB2q
A++mkiUwQn4YYA5LCJDgvdXbGQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIVfkixe
QCelCbIF+re2SRmjwrSQMB8GA1UdIwQYMBaAFO3FR70ObAwHBqGFgzg19l6jxxAT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi8yQ0IxRUVCQUY2
NTMxMUVCQTFCNEE2MUFDNEY5QUUwMi83Y1ZIdlE1c0RBY0dvWVdET0RYMlhxUEhF
Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdjVkh2UTVzREFjR29ZV0RPRFgyWHFQSEVCTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzkzMjIvMkNCMUVFQkFGNjUzMTFFQkExQjRBNjFBQzRGOUFFMDIvRDA1RTk0QTZG
QjBGMTFFRDlCQTE4MjZBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABn8MQDBABn8MYwDQYJKoZIhvcNAQELBQADggEBAEH1Q7cu
8u8H9snpgnIE0HJVPDZXFPQ1Ow11o9thmjuKOXd7KIy0Yn27kL18KRJf7fUNiUCi
CZ/EXNFopCG4Ic+47WUNMrvMTmVjAL/Wz+s06/7WK0HSVgGE2xoP72uHrWOuy91A
SxzLe+X8w2+AzprNW7jtrckKUg9FbrzBbNDbhw6WpJE/f5/lemMUpKdPKObsnIMS
o59wsIw071GE8PvpjFz33MLs/LxYksQNKRw3jwUHGrGRY6XXfVMdirqriSOFwamQ
mLsyAqrs7ig8xOkYVYYtzkMGGeFMH/S59wnkxTV5/td8+ha0upjnQrOv8wpnsMWU
//25dEwOwVE0h5I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:54 2024 by rpki-client on console-ams.rpki-client.org