Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/EBA9A884D37A11EDA3F8D353C4F9AE02.roa
File: EBA9A884D37A11EDA3F8D353C4F9AE02.roa (raw, json)
Hash identifier: CQfbzYYXDaDwf2QX/dWDY5INK6ZwOpI0bxbalS17B8o=
Subject key identifier: 8A:E2:D6:4A:32:3C:35:C5:1C:28:BB:78:3B:F0:4E:56:4A:40:63:6F
Certificate issuer: /CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Certificate serial: 05
Authority key identifier: 6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/EBA9A884D37A11EDA3F8D353C4F9AE02.roa
Signing time: Wed 05 Apr 2023 06:27:21 +0000
ROA not before: Wed 05 Apr 2023 06:27:21 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 134475
IP address blocks: 103.94.234.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5 (0x5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Validity
Not Before: Apr 5 06:27:21 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=642d14c9-74cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:20:da:b0:3d:37:d0:f0:d1:af:35:df:57:66:
6a:28:41:50:c0:db:44:26:8b:f3:95:2e:98:42:3d:
ac:40:ac:6f:aa:fc:49:89:5a:47:77:24:68:e0:7f:
b2:3b:db:ba:80:a0:71:28:c9:9e:3a:a7:35:b8:5d:
fc:4f:d3:13:6d:4e:b5:cb:63:c3:ad:a2:48:81:31:
f0:b6:99:f9:4b:e6:3e:ae:5c:50:eb:50:f3:34:ae:
42:7f:64:02:11:21:ec:f8:d8:ff:2d:24:04:c9:9f:
65:c9:a4:e3:95:3d:62:36:9c:c2:58:99:d7:01:ba:
0e:d3:58:b0:84:97:80:c2:5d:68:03:e8:dc:07:1f:
31:a8:b7:11:fa:73:ee:04:27:81:be:9d:b6:58:3c:
d3:54:51:cc:5f:48:90:10:7c:0a:a2:81:69:64:b7:
78:99:8c:41:62:83:3e:97:ad:a9:d9:8b:af:b4:f8:
9f:18:a2:ad:e6:5d:71:ee:18:e9:82:bb:1f:98:33:
f5:b4:e5:f8:9c:5c:76:eb:33:5c:ae:dc:9b:70:75:
74:ae:20:41:eb:21:46:7b:52:5c:73:68:3f:48:ea:
57:4c:88:ee:bc:02:fa:d9:1d:72:16:34:e2:2f:2d:
fb:e8:50:6c:a1:39:2c:62:27:73:64:2d:0a:f6:83:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E2:D6:4A:32:3C:35:C5:1C:28:BB:78:3B:F0:4E:56:4A:40:63:6F
X509v3 Authority Key Identifier:
keyid:6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/EBA9A884D37A11EDA3F8D353C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.94.234.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:47:cc:f7:c9:2e:0c:7c:dc:e4:ad:59:e8:bb:a7:da:80:a5:
af:9a:59:2f:4d:9a:75:d7:32:0a:14:50:d0:57:ca:15:71:f5:
cd:26:d7:5e:12:4c:cc:55:30:37:47:3b:49:cc:cf:84:16:66:
33:d1:59:29:88:90:23:86:2f:3d:92:6e:5e:bb:77:65:58:d6:
27:1c:11:44:48:95:0c:36:53:55:a6:fd:64:55:20:db:7a:ca:
9f:7a:f8:a1:f3:2b:34:43:98:60:62:6f:d1:f8:63:1d:90:6d:
cc:fc:3e:c6:8b:3b:96:06:ea:7d:44:d4:6b:37:b4:d7:b9:eb:
2d:0a:13:92:a0:3f:55:ed:df:73:5d:59:a6:5d:98:60:74:51:
01:d1:6f:5c:25:fb:c5:30:8e:8b:cc:5f:a7:f4:07:94:96:82:
07:48:c6:9e:c9:8b:16:19:b3:fe:58:f2:e9:a2:e8:16:07:f4:
a7:44:49:b7:15:eb:66:54:a0:51:12:2c:80:82:9a:61:25:7a:
98:1a:e2:c6:f6:bd:42:81:97:91:ec:ae:e3:fa:fd:24:0f:8e:
e0:29:bf:a9:5e:2a:b5:0f:2a:e1:f1:18:c9:dd:c0:15:19:71:
5d:d9:76:25:b5:b1:50:91:ee:f4:52:11:18:ca:12:22:d7:c8:
d5:2f:69:e6
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RDFGMjExMC8GA1UEBRMoNkE3OUI3MDM5RTMzQkU5QUU2NjlDNTE2MTAzN0UwODQw
MTE3NjIwQTAeFw0yMzA0MDUwNjI3MjFaFw0yNDA1MjkwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0MmQxNGM5LTc0Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNINqwPTfQ8NGvNd9XZmooQVDA20Qmi/OVLphCPaxArG+q/EmJWkd3JGjgf7I7
27qAoHEoyZ46pzW4XfxP0xNtTrXLY8OtokiBMfC2mflL5j6uXFDrUPM0rkJ/ZAIR
Iez42P8tJATJn2XJpOOVPWI2nMJYmdcBug7TWLCEl4DCXWgD6NwHHzGotxH6c+4E
J4G+nbZYPNNUUcxfSJAQfAqigWlkt3iZjEFigz6XranZi6+0+J8Yoq3mXXHuGOmC
ux+YM/W05ficXHbrM1yu3JtwdXSuIEHrIUZ7UlxzaD9I6ldMiO68AvrZHXIWNOIv
LfvoUGyhOSxiJ3NkLQr2g6CHAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUiuLWSjI8
NcUcKLt4O/BOVkpAY28wHwYDVR0jBBgwFoAUanm3A54zvprmacUWEDfghAEXYgow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNEMUYyLzk5RjdBMzRBRDJD
RDExRUQ4MDYwNzcyMkM0RjlBRTAyL2FubTNBNTR6dnBybWFjVVdFRGZnaEFFWFln
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYW5tM0E1NHp2cHJtYWNVV0VEZmdoQUVYWWdvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDFGMi85OUY3QTM0QUQyQ0QxMUVEODA2MDc3MjJDNEY5QUUwMi9FQkE5QTg4NEQz
N0ExMUVEQTNGOEQzNTNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGde6jANBgkqhkiG9w0BAQsFAAOCAQEAHkfM98kuDHzc5K1Z
6Lun2oClr5pZL02addcyChRQ0FfKFXH1zSbXXhJMzFUwN0c7SczPhBZmM9FZKYiQ
I4YvPZJuXrt3ZVjWJxwRREiVDDZTVab9ZFUg23rKn3r4ofMrNEOYYGJv0fhjHZBt
zPw+xos7lgbqfUTUaze017nrLQoTkqA/Ve3fc11Zpl2YYHRRAdFvXCX7xTCOi8xf
p/QHlJaCB0jGnsmLFhmz/ljy6aLoFgf0p0RJtxXrZlSgURIsgIKaYSV6mBrixva9
QoGXkeyu4/r9JA+O4Cm/qV4qtQ8q4fEYyd3AFRlxXdl2JbWxUJHu9FIRGMoSItfI
1S9p5g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:03 2024 by rpki-client on console-fra.rpki-client.org