Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/7279BADA793011EC8478CD70C4F9AE02.roa
File: 7279BADA793011EC8478CD70C4F9AE02.roa (raw, json)
Hash identifier: qp7NiRN+7e4MZHBJrkXZGjOVxNvdQ+vpihpTacCvIjk=
Subject key identifier: BA:50:B8:D3:05:D1:B2:BA:8C:6B:2A:29:B6:E3:FA:70:D8:96:B1:D0
Certificate issuer: /CN=A9152DE4/serialNumber=217C3D8BED0B40C0FB088B59EE6E65AE6C661F0D
Certificate serial: 02
Authority key identifier: 21:7C:3D:8B:ED:0B:40:C0:FB:08:8B:59:EE:6E:65:AE:6C:66:1F:0D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/7279BADA793011EC8478CD70C4F9AE02.roa
Signing time: Wed 19 Jan 2022 14:02:33 +0000
ROA not before: Wed 19 Jan 2022 14:02:33 +0000
ROA not after: Mon 01 May 2023 00:00:00 +0000
asID: 149449
IP address blocks: 103.179.198.0/23 maxlen: 23
103.179.198.0/24 maxlen: 24
103.179.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9152DE4/serialNumber=217C3D8BED0B40C0FB088B59EE6E65AE6C661F0D
Validity
Not Before: Jan 19 14:02:33 2022 GMT
Not After : May 1 00:00:00 2023 GMT
Subject: CN=61e819f9-0817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:6e:84:9f:19:7e:98:5e:2c:77:bf:48:c6:
5a:e1:27:d5:8e:8f:9e:b6:17:fa:75:6e:3f:5a:49:
d3:af:ca:bd:1f:95:d2:b5:9f:d7:d5:7b:d9:f6:52:
c2:e7:7e:d4:52:38:7e:5c:8f:89:fa:0a:19:1b:46:
16:61:b5:66:20:7b:9e:a5:c9:2f:3b:e9:49:15:9f:
90:90:13:ec:19:c1:cc:88:48:2d:7f:9f:3a:e7:38:
86:f0:b6:98:43:fe:0c:74:18:ac:e8:e8:70:b5:75:
47:6c:19:6e:8a:26:0f:fe:fb:81:17:4f:d0:dc:30:
f3:da:e7:c5:21:a0:57:7f:8a:52:02:8e:c1:ab:fd:
be:d1:84:f1:bf:02:4d:c6:c5:5b:85:44:1d:1b:b8:
62:7c:ff:19:96:ce:4a:6e:8b:ed:36:ee:2f:c4:56:
13:01:50:24:73:b3:22:ab:f6:90:ab:e7:4b:0d:b6:
f7:1e:87:96:2b:b0:5a:ea:20:37:96:05:f5:d8:c4:
75:63:0b:fe:bb:5f:c3:90:f1:65:02:8d:27:8d:4e:
f5:13:9b:ad:39:40:e9:aa:f3:4f:d5:8e:18:ca:1e:
62:f0:1c:aa:a7:a6:e7:87:f2:c7:3b:50:a8:fd:d1:
22:7e:62:f1:11:47:5c:ac:ee:66:73:ab:7c:3a:7e:
c6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:50:B8:D3:05:D1:B2:BA:8C:6B:2A:29:B6:E3:FA:70:D8:96:B1:D0
X509v3 Authority Key Identifier:
keyid:21:7C:3D:8B:ED:0B:40:C0:FB:08:8B:59:EE:6E:65:AE:6C:66:1F:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/IXw9i-0LQMD7CItZ7m5lrmxmHw0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXw9i-0LQMD7CItZ7m5lrmxmHw0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152DE4/4CCCC332792A11ECB0C59162C4F9AE02/7279BADA793011EC8478CD70C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.179.198.0/23
Signature Algorithm: sha256WithRSAEncryption
04:bc:27:0a:e4:c4:2f:f7:42:be:7f:fd:f6:6b:c7:a5:71:c5:
9f:08:67:a9:ff:82:cc:33:fe:c8:47:1a:89:c3:76:07:37:86:
88:ff:3f:d4:d7:e7:00:c2:25:b2:62:ca:fa:db:67:ea:1c:d7:
2f:44:5e:5e:cd:8b:7d:80:f0:5f:9b:8b:db:bf:4b:12:1b:60:
f0:01:a1:f0:b1:84:fc:d2:33:33:a4:28:76:c5:de:87:4d:e3:
79:3d:09:6d:64:d6:9f:e5:d8:95:ac:ec:85:ed:e5:55:0a:ca:
1d:31:32:39:f1:88:0a:1a:60:d8:57:54:a0:26:bd:1c:62:d6:
46:ee:3b:ad:9f:e3:14:75:2f:2f:7e:2f:90:9e:90:a0:df:a6:
70:c5:26:f6:3c:e1:b4:26:0c:3e:e2:73:8b:4f:e0:21:61:f3:
a8:60:81:14:9f:00:6f:b9:c3:a4:a0:ee:41:0a:c2:dd:b5:12:
e0:84:8b:ac:71:cf:78:d9:03:a0:01:3c:37:be:9a:37:86:9d:
6e:a9:2f:6c:2b:a3:41:b2:e0:fb:0f:a1:3c:e5:3f:51:00:92:
57:a8:11:8b:5f:94:40:04:cb:0f:56:7b:7f:6f:cd:f2:77:b9:
58:6a:c5:e8:06:9c:f5:81:dd:7f:81:5f:a4:12:4f:00:a2:cb:
0c:b7:9f:4e
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
MkRFNDExMC8GA1UEBRMoMjE3QzNEOEJFRDBCNDBDMEZCMDg4QjU5RUU2RTY1QUU2
QzY2MUYwRDAeFw0yMjAxMTkxNDAyMzNaFw0yMzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYxZTgxOWY5LTA4MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDfgm6Enxl+mF4sd79IxlrhJ9WOj562F/p1bj9aSdOvyr0fldK1n9fVe9n2UsLn
ftRSOH5cj4n6ChkbRhZhtWYge56lyS876UkVn5CQE+wZwcyISC1/nzrnOIbwtphD
/gx0GKzo6HC1dUdsGW6KJg/++4EXT9DcMPPa58UhoFd/ilICjsGr/b7RhPG/Ak3G
xVuFRB0buGJ8/xmWzkpui+027i/EVhMBUCRzsyKr9pCr50sNtvceh5YrsFrqIDeW
BfXYxHVjC/67X8OQ8WUCjSeNTvUTm605QOmq80/VjhjKHmLwHKqnpueH8sc7UKj9
0SJ+YvERR1ys7mZzq3w6fsabAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUulC40wXR
srqMayoptuP6cNiWsdAwHwYDVR0jBBgwFoAUIXw9i+0LQMD7CItZ7m5lrmxmHw0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyREU0LzRDQ0NDMzMyNzky
QTExRUNCMEM1OTE2MkM0RjlBRTAyL0lYdzlpLTBMUU1EN0NJdFo3bTVscm14bUh3
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSVh3OWktMExRTUQ3Q0l0WjdtNWxybXhtSHcwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MkRFNC80Q0NDQzMzMjc5MkExMUVDQjBDNTkxNjJDNEY5QUUwMi83Mjc5QkFEQTc5
MzAxMUVDODQ3OENENzBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWezxjANBgkqhkiG9w0BAQsFAAOCAQEABLwnCuTEL/dCvn/9
9mvHpXHFnwhnqf+CzDP+yEcaicN2BzeGiP8/1NfnAMIlsmLK+ttn6hzXL0ReXs2L
fYDwX5uL279LEhtg8AGh8LGE/NIzM6QodsXeh03jeT0JbWTWn+XYlazshe3lVQrK
HTEyOfGIChpg2FdUoCa9HGLWRu47rZ/jFHUvL34vkJ6QoN+mcMUm9jzhtCYMPuJz
i0/gIWHzqGCBFJ8Ab7nDpKDuQQrC3bUS4ISLrHHPeNkDoAE8N76aN4adbqkvbCuj
QbLg+w+hPOU/UQCSV6gRi1+UQATLD1Z7f2/N8ne5WGrF6Aac9YHdf4FfpBJPAKLL
DLefTg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:41 2023 by rpki-client on console-fra.rpki-client.org