Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/635A3B526F2E11ED866B363AC4F9AE02.roa
File: 635A3B526F2E11ED866B363AC4F9AE02.roa (raw, json)
Hash identifier: jIz77aikk2c+KW2aKAgvzfOX1Q7DaqpA3UQqsHAkp60=
Subject key identifier: D3:2D:DB:85:6F:F9:82:2B:63:5C:C2:7B:58:F6:B8:24:EA:E3:61:0E
Certificate issuer: /CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Certificate serial: 0927
Authority key identifier: 4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/635A3B526F2E11ED866B363AC4F9AE02.roa
Signing time: Wed 14 Dec 2022 21:17:34 +0000
ROA not before: Wed 14 Dec 2022 21:17:34 +0000
ROA not after: Wed 31 Jan 2024 00:00:00 +0000
asID: 141731
IP address blocks: 103.103.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2343 (0x927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91522E0/serialNumber=4F32ECFF8CD46C3EC03FA75E1008F4AA9A0CF893
Validity
Not Before: Dec 14 21:17:34 2022 GMT
Not After : Jan 31 00:00:00 2024 GMT
Subject: CN=639a3d6e-5028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:57:6e:42:44:45:c9:72:c2:78:20:15:43:
67:52:5e:31:9f:31:ba:70:39:34:88:fe:9e:23:2d:
f8:e1:5a:22:c4:d7:59:c6:4b:a6:4e:1e:14:04:37:
f8:5a:20:0c:fc:84:41:8e:88:32:a1:b1:3b:32:d7:
fa:7b:ed:59:f6:43:70:2b:b8:d9:28:06:ed:6c:47:
b6:d8:80:fd:ea:c6:92:89:ff:39:9d:8b:3d:df:da:
cc:b6:8c:33:fa:9d:4f:23:45:bc:cf:eb:7e:ed:f9:
ec:e7:be:f8:bc:4a:46:ee:81:29:8b:5e:73:77:ee:
8a:73:b1:21:df:5b:25:e1:67:25:0b:80:13:d2:92:
49:a6:1a:bc:9e:5f:e6:bd:b3:51:b1:4f:2d:21:9f:
78:4d:21:99:57:cc:00:58:a5:5a:be:8e:25:08:01:
8b:7c:48:53:47:59:ec:eb:fa:90:38:09:f8:43:71:
6e:f9:26:ba:a4:7b:e4:a1:df:50:08:03:47:23:76:
ca:89:0a:ff:19:5a:1d:3e:c9:75:e1:31:4d:34:37:
c7:fc:81:54:24:07:e9:6a:07:7d:ee:36:c9:bf:9c:
83:a9:dd:a7:eb:59:84:b2:35:c7:d8:a0:37:39:e6:
6f:b7:16:09:73:4f:a0:4b:fb:60:9e:4a:24:49:83:
2a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2D:DB:85:6F:F9:82:2B:63:5C:C2:7B:58:F6:B8:24:EA:E3:61:0E
X509v3 Authority Key Identifier:
keyid:4F:32:EC:FF:8C:D4:6C:3E:C0:3F:A7:5E:10:08:F4:AA:9A:0C:F8:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/TzLs_4zUbD7AP6deEAj0qpoM-JM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzLs_4zUbD7AP6deEAj0qpoM-JM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91522E0/C9B90FF8468811EAACF18A28C4F9AE02/635A3B526F2E11ED866B363AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.103.99.0/24
Signature Algorithm: sha256WithRSAEncryption
65:52:a0:af:7b:f0:09:e1:06:1f:70:10:9b:c1:06:75:f4:e8:
cd:f7:ee:28:b4:76:70:70:9d:eb:75:0e:5c:38:7d:13:5e:3e:
05:b7:21:3c:9c:93:76:4b:ae:f3:f2:a1:6e:d5:b4:9a:f2:00:
3e:73:23:02:52:a0:c5:9a:e3:22:68:19:7b:d0:a2:f6:e5:5c:
f1:73:69:82:c9:4e:02:0c:82:09:d1:c9:a7:35:12:d5:ed:34:
9c:e9:49:ad:29:c5:13:8e:5a:96:e0:52:23:f4:89:9a:1c:96:
2b:30:90:cb:c2:bc:3c:e0:cc:17:19:7b:b7:81:45:b7:40:90:
eb:40:f7:14:31:48:b1:c0:56:06:1a:be:16:77:7f:1e:25:71:
4c:d6:a7:18:2d:6f:a4:18:0d:06:e3:f6:2b:16:11:fc:69:eb:
37:36:7f:d7:7e:0b:86:11:e9:06:4c:2b:0e:e5:41:e6:80:24:
de:88:a4:aa:91:5f:ec:85:b4:72:32:68:40:fe:3a:6a:8f:f7:
62:df:bc:51:79:1b:73:1a:d3:2c:49:24:e6:1f:60:a7:69:70:
0e:5a:ca:57:f5:63:1c:01:23:66:9b:10:39:15:17:12:2c:85:
62:4e:f2:b1:44:b9:47:5f:1f:ae:75:0e:e5:e6:b1:ac:ca:e7:
5e:cf:4a:4e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTIyRTAxMTAvBgNVBAUTKDRGMzJFQ0ZGOENENDZDM0VDMDNGQTc1RTEwMDhGNEFB
OUEwQ0Y4OTMwHhcNMjIxMjE0MjExNzM0WhcNMjQwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzlhM2Q2ZS01MDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvQRXbkJERclywnggFUNnUl4xnzG6cDk0iP6eIy344VoixNdZxkumTh4UBDf4
WiAM/IRBjogyobE7Mtf6e+1Z9kNwK7jZKAbtbEe22ID96saSif85nYs939rMtowz
+p1PI0W8z+t+7fns5774vEpG7oEpi15zd+6Kc7Eh31sl4WclC4AT0pJJphq8nl/m
vbNRsU8tIZ94TSGZV8wAWKVavo4lCAGLfEhTR1ns6/qQOAn4Q3Fu+Sa6pHvkod9Q
CANHI3bKiQr/GVodPsl14TFNNDfH/IFUJAfpagd97jbJv5yDqd2n61mEsjXH2KA3
OeZvtxYJc0+gS/tgnkokSYMqiQIDAQABo4IClTCCApEwHQYDVR0OBBYEFNMt24Vv
+YIrY1zCe1j2uCTq42EOMB8GA1UdIwQYMBaAFE8y7P+M1Gw+wD+nXhAI9KqaDPiT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjJFMC9DOUI5MEZGODQ2
ODgxMUVBQUNGMThBMjhDNEY5QUUwMi9UekxzXzR6VWJEN0FQNmRlRUFqMHFwb00t
Sk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1R6THNfNHpVYkQ3QVA2ZGVFQWowcXBvTS1KTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTIyRTAvQzlCOTBGRjg0Njg4MTFFQUFDRjE4QTI4QzRGOUFFMDIvNjM1QTNCNTI2
RjJFMTFFRDg2NkIzNjNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnZ2MwDQYJKoZIhvcNAQELBQADggEBAGVSoK978AnhBh9w
EJvBBnX06M337ii0dnBwnet1Dlw4fRNePgW3ITyck3ZLrvPyoW7VtJryAD5zIwJS
oMWa4yJoGXvQovblXPFzaYLJTgIMggnRyac1EtXtNJzpSa0pxROOWpbgUiP0iZoc
liswkMvCvDzgzBcZe7eBRbdAkOtA9xQxSLHAVgYavhZ3fx4lcUzWpxgtb6QYDQbj
9isWEfxp6zc2f9d+C4YR6QZMKw7lQeaAJN6IpKqRX+yFtHIyaED+OmqP92LfvFF5
G3Ma0yxJJOYfYKdpcA5aylf1YxwBI2abEDkVFxIshWJO8rFEuUdfH651DuXmsazK
517PSk4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-ams.rpki-client.org