Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/5D1C4CCCD13111EBBF945C80C4F9AE02.roa
File: 5D1C4CCCD13111EBBF945C80C4F9AE02.roa (raw, json)
Hash identifier: xU3l8v/6UVnR8htK4tUD8Z7IaqO/7A+pX4HGXgXUpN0=
Subject key identifier: 2C:79:BE:03:EE:6F:63:ED:84:A6:F7:81:38:4E:EA:25:10:C3:32:78
Certificate issuer: /CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
Certificate serial: 071F
Authority key identifier: 53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/5D1C4CCCD13111EBBF945C80C4F9AE02.roa
Signing time: Wed 12 Apr 2023 18:55:38 +0000
ROA not before: Wed 12 Apr 2023 18:55:38 +0000
ROA not after: Wed 29 May 2024 00:00:00 +0000
asID: 135353
IP address blocks: 45.118.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1823 (0x71f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143B09/serialNumber=5329700B4DDDAD9E3FCDC3273F4D18D3E3045DC0
Validity
Not Before: Apr 12 18:55:38 2023 GMT
Not After : May 29 00:00:00 2024 GMT
Subject: CN=6436feaa-0197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:06:4a:bc:ca:b6:fd:d2:4d:ee:9f:bf:74:
73:65:46:63:34:62:7f:d3:af:60:b8:dc:27:59:bc:
3d:c4:55:fd:0f:a9:20:0b:a0:f5:e4:d9:3d:b3:c8:
01:93:37:f6:4a:78:cd:95:af:a0:9b:f8:14:e2:20:
fd:4d:7d:4e:a9:eb:47:69:d1:e8:c8:aa:42:f1:f9:
ee:f0:92:18:26:40:be:4a:19:8d:49:d9:58:d8:60:
50:d2:cb:8c:01:9e:23:f4:a9:6a:a1:91:02:1a:33:
8d:7e:d8:4a:d7:3f:72:de:97:e9:c1:f7:19:31:18:
b7:da:e7:2e:3d:d1:9b:7c:da:bb:49:a4:7d:e2:04:
e8:7d:02:44:f3:b8:0d:d5:ab:a8:bb:09:45:bd:47:
49:0b:c6:7d:31:4a:b9:10:5c:c1:62:1b:6e:12:f6:
0d:ce:67:10:a0:55:c1:31:6a:6c:fb:1f:71:2d:1b:
43:59:a5:15:64:23:31:a7:2a:f0:0b:7f:a6:ae:47:
43:4d:49:8e:75:1b:ab:74:d5:d2:4b:3e:74:eb:30:
a8:67:2a:50:09:6c:8a:46:7b:49:dd:b5:0f:f4:9f:
f3:1c:49:d8:9e:98:83:a6:cd:dc:49:44:6a:2b:1a:
5d:62:b1:a7:1e:78:e5:81:6e:48:78:44:ad:b6:bb:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:79:BE:03:EE:6F:63:ED:84:A6:F7:81:38:4E:EA:25:10:C3:32:78
X509v3 Authority Key Identifier:
keyid:53:29:70:0B:4D:DD:AD:9E:3F:CD:C3:27:3F:4D:18:D3:E3:04:5D:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/UylwC03drZ4_zcMnP00Y0-MEXcA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UylwC03drZ4_zcMnP00Y0-MEXcA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B09/3B367BCE33B711E9AD0F587AC4F9AE02/5D1C4CCCD13111EBBF945C80C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.118.70.0/24
Signature Algorithm: sha256WithRSAEncryption
70:7c:5b:fe:de:a8:1d:72:ea:22:1e:34:96:79:67:eb:fd:31:
07:ce:ad:28:09:70:0e:3d:53:a8:57:89:e4:cc:3a:ee:85:46:
bf:57:c2:79:86:16:85:ec:f5:bb:c8:90:1b:04:82:c0:d2:58:
00:24:52:52:ee:af:43:0e:52:6d:6e:5c:55:a0:36:c0:d2:b8:
21:25:c7:c7:24:3d:cb:fa:3d:f9:e3:10:bf:4a:4d:b6:43:6e:
19:09:0d:15:84:0d:71:aa:5d:ed:96:a9:8b:06:fb:38:80:5d:
d1:74:e0:c1:05:e1:4e:e5:ea:26:52:37:d3:3e:49:54:bf:e6:
21:48:a0:d9:32:de:a5:a8:f3:87:60:5b:e9:c5:85:32:19:b9:
7d:63:c1:30:80:c4:f1:3f:92:64:d0:c9:40:b6:39:54:66:74:
09:54:cd:84:60:09:3e:79:33:2d:c0:11:63:99:f8:b8:0e:3b:
cf:cf:76:46:dd:6b:23:82:7f:64:d3:8e:d0:e6:fd:92:a6:36:
0b:92:b7:88:5a:38:46:5e:c0:ac:47:5b:98:e4:20:ae:18:67:
63:01:81:16:a1:e9:7a:39:17:45:c6:6b:35:56:bf:ad:1e:3a:
88:7b:a1:98:d4:6d:93:a9:b5:56:ad:04:2a:72:4a:79:dc:ab:
3f:d9:16:25
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDNCMDkxMTAvBgNVBAUTKDUzMjk3MDBCNEREREFEOUUzRkNEQzMyNzNGNEQxOEQz
RTMwNDVEQzAwHhcNMjMwNDEyMTg1NTM4WhcNMjQwNTI5MDAwMDAwWjAYMRYwFAYD
VQQDEw02NDM2ZmVhYS0wMTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuz4GSrzKtv3STe6fv3RzZUZjNGJ/069guNwnWbw9xFX9D6kgC6D15Nk9s8gB
kzf2SnjNla+gm/gU4iD9TX1OqetHadHoyKpC8fnu8JIYJkC+ShmNSdlY2GBQ0suM
AZ4j9KlqoZECGjONfthK1z9y3pfpwfcZMRi32ucuPdGbfNq7SaR94gTofQJE87gN
1auouwlFvUdJC8Z9MUq5EFzBYhtuEvYNzmcQoFXBMWps+x9xLRtDWaUVZCMxpyrw
C3+mrkdDTUmOdRurdNXSSz506zCoZypQCWyKRntJ3bUP9J/zHEnYnpiDps3cSURq
KxpdYrGnHnjlgW5IeESttrumFQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCx5vgPu
b2PthKb3gThO6iUQwzJ4MB8GA1UdIwQYMBaAFFMpcAtN3a2eP83DJz9NGNPjBF3A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0IwOS8zQjM2N0JDRTMz
QjcxMUU5QUQwRjU4N0FDNEY5QUUwMi9VeWx3QzAzZHJaNF96Y01uUDAwWTAtTUVY
Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V5bHdDMDNkclo0X3pjTW5QMDBZMC1NRVhjQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDNCMDkvM0IzNjdCQ0UzM0I3MTFFOUFEMEY1ODdBQzRGOUFFMDIvNUQxQzRDQ0NE
MTMxMTFFQkJGOTQ1QzgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtdkYwDQYJKoZIhvcNAQELBQADggEBAHB8W/7eqB1y6iIe
NJZ5Z+v9MQfOrSgJcA49U6hXieTMOu6FRr9XwnmGFoXs9bvIkBsEgsDSWAAkUlLu
r0MOUm1uXFWgNsDSuCElx8ckPcv6PfnjEL9KTbZDbhkJDRWEDXGqXe2WqYsG+ziA
XdF04MEF4U7l6iZSN9M+SVS/5iFIoNky3qWo84dgW+nFhTIZuX1jwTCAxPE/kmTQ
yUC2OVRmdAlUzYRgCT55My3AEWOZ+LgOO8/PdkbdayOCf2TTjtDm/ZKmNguSt4ha
OEZewKxHW5jkIK4YZ2MBgRah6Xo5F0XGazVWv60eOoh7oZjUbZOptVatBCpySnnc
qz/ZFiU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:04 2024 by rpki-client on console-fra.rpki-client.org