Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/A314F786746111ED890CA515C4F9AE02.roa
File: A314F786746111ED890CA515C4F9AE02.roa (raw, json)
Hash identifier: ojTDQzQHl7Lhdw6IZ7ynNQtIj5BkndaSCSATDx8OxVE=
Subject key identifier: 1C:D7:C7:9F:03:23:A6:6F:59:70:6A:9E:B6:16:19:0C:5A:81:28:A6
Certificate issuer: /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial: 03
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/A314F786746111ED890CA515C4F9AE02.roa
Signing time: Mon 05 Dec 2022 05:57:02 +0000
ROA not before: Mon 05 Dec 2022 05:57:02 +0000
ROA not after: Tue 31 Oct 2023 00:00:00 +0000
asID: 38337
IP address blocks: 103.230.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Validity
Not Before: Dec 5 05:57:02 2022 GMT
Not After : Oct 31 00:00:00 2023 GMT
Subject: CN=638d882d-9f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:5f:6d:ee:68:0e:ae:67:a6:98:3e:b4:c2:
e2:f4:a5:18:bc:aa:f2:86:dc:07:69:8b:01:22:f8:
10:b2:60:0f:6c:7f:db:43:3c:9e:d0:80:9e:79:a7:
cc:86:eb:5c:c2:2b:bd:f0:0f:06:9c:03:c2:e5:56:
03:76:5d:8e:3e:45:a6:f9:04:74:02:e0:47:1d:61:
e7:87:86:15:43:61:66:5a:73:04:77:04:33:50:c5:
88:2b:33:56:6d:b9:c7:97:98:bf:91:4d:ef:5d:d9:
43:26:6a:9f:64:c3:25:92:44:fb:84:fe:91:31:3f:
2c:a3:18:1f:a7:b5:96:97:30:c7:86:6a:c0:49:43:
05:e2:dd:e8:e9:f9:21:d8:d6:28:33:69:5d:f5:3e:
92:c6:2c:f1:ba:b2:e0:eb:a3:19:be:53:6b:bb:ac:
6f:e9:4a:a7:c3:9d:10:61:a2:2d:64:33:2f:f0:bf:
3a:3f:ec:3a:60:e0:80:a6:e0:c4:27:d5:f4:f4:72:
e0:ae:13:2e:b7:bf:ab:34:0c:ed:0d:ca:93:e3:27:
01:63:98:0a:cc:24:9c:44:22:eb:d1:fe:4e:31:14:
51:ec:36:ed:2e:b7:59:f7:12:c9:47:d0:ee:3c:0e:
21:2d:8f:fd:e4:28:cb:71:5d:72:5e:6b:93:22:88:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D7:C7:9F:03:23:A6:6F:59:70:6A:9E:B6:16:19:0C:5A:81:28:A6
X509v3 Authority Key Identifier:
keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/A314F786746111ED890CA515C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.230.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:7d:90:08:b8:d3:e6:d8:ec:fd:7d:6b:72:79:e3:86:21:68:
49:ea:76:71:58:da:14:42:cc:45:f4:e8:0b:18:98:34:85:5c:
be:e2:38:6f:67:4c:15:e2:0c:57:6f:0e:ab:01:aa:74:d6:1a:
77:b4:59:ec:ae:3c:40:85:d3:48:cb:9a:ca:2a:4e:0a:cf:88:
0b:c5:25:0c:e3:ec:b7:c9:30:08:01:e3:42:83:0e:86:99:a1:
04:1d:0e:9c:15:63:c1:fd:2c:bc:0a:be:93:2c:a1:98:72:ba:
ac:29:96:93:65:d3:a1:b8:4d:77:43:ff:41:02:83:29:07:8b:
d1:a7:3b:a2:9c:26:37:50:60:6a:e1:41:3a:2f:b0:f3:62:d8:
98:ba:0c:c3:a7:cc:95:d0:e7:45:d4:78:8b:79:2b:d9:fc:fa:
97:9a:7e:20:9b:40:93:08:a7:3e:de:2d:ec:c2:f3:3a:c5:90:
a4:c6:91:bb:04:01:5a:e5:f4:0a:35:4b:2a:7b:92:7f:7b:cf:
96:f9:c0:43:e6:11:82:dd:d2:9f:a1:c3:4c:45:7f:c2:20:b1:
36:39:aa:35:2e:08:83:63:31:f0:97:57:e8:80:7d:ad:0d:63:
be:4e:af:20:a9:4a:93:c2:27:97:fc:d2:7d:e1:fc:9d:94:93:
68:38:33:bf
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QTgxNDExMC8GA1UEBRMoNUMwNTZCODA2MUE4NjIyQzJDMDZCQjg1Nzg2RTlEQzYx
MzYxNEJDQTAeFw0yMjEyMDUwNTU3MDJaFw0yMzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYzOGQ4ODJkLTlmMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAVV9t7mgOrmemmD60wuL0pRi8qvKG3AdpiwEi+BCyYA9sf9tDPJ7QgJ55p8yG
61zCK73wDwacA8LlVgN2XY4+Rab5BHQC4EcdYeeHhhVDYWZacwR3BDNQxYgrM1Zt
uceXmL+RTe9d2UMmap9kwyWSRPuE/pExPyyjGB+ntZaXMMeGasBJQwXi3ejp+SHY
1igzaV31PpLGLPG6suDroxm+U2u7rG/pSqfDnRBhoi1kMy/wvzo/7Dpg4ICm4MQn
1fT0cuCuEy63v6s0DO0NypPjJwFjmArMJJxEIuvR/k4xFFHsNu0ut1n3EslH0O48
DiEtj/3kKMtxXXJea5MiiMXzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUHNfHnwMj
pm9ZcGqethYZDFqBKKYwHwYDVR0jBBgwFoAUXAVrgGGoYiwsBruFeG6dxhNhS8ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRBODE0L0QzOEExOTEyNzQ1
RTExRURCQTY4ODUxNEM0RjlBRTAyL1hBVnJnR0dvWWl3c0JydUZlRzZkeGhOaFM4
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWEFWcmdHR29ZaXdzQnJ1RmVHNmR4aE5oUzhvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTgxNC9EMzhBMTkxMjc0NUUxMUVEQkE2ODg1MTRDNEY5QUUwMi9BMzE0Rjc4Njc0
NjExMUVEODkwQ0E1MTVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGfmCTANBgkqhkiG9w0BAQsFAAOCAQEAX32QCLjT5tjs/X1r
cnnjhiFoSep2cVjaFELMRfToCxiYNIVcvuI4b2dMFeIMV28OqwGqdNYad7RZ7K48
QIXTSMuayipOCs+IC8UlDOPst8kwCAHjQoMOhpmhBB0OnBVjwf0svAq+kyyhmHK6
rCmWk2XTobhNd0P/QQKDKQeL0ac7opwmN1BgauFBOi+w82LYmLoMw6fMldDnRdR4
i3kr2fz6l5p+IJtAkwinPt4t7MLzOsWQpMaRuwQBWuX0CjVLKnuSf3vPlvnAQ+YR
gt3Sn6HDTEV/wiCxNjmqNS4Ig2Mx8JdX6IB9rQ1jvk6vIKlKk8Inl/zSfeH8nZST
aDgzvw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:05 2024 by rpki-client on console-fra.rpki-client.org