Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/02DAD924C2E611EDB1FC202DC4F9AE02.roa
File: 02DAD924C2E611EDB1FC202DC4F9AE02.roa (raw, json)
Hash identifier: wmUQ3YN8kAoRNCi3qnx6po/5ASnXup42GGBpT/+9Zrs=
Subject key identifier: D7:25:EA:53:B8:03:C1:69:85:18:9E:AF:70:28:90:80:13:C2:0B:D0
Certificate issuer: /CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Certificate serial: 3207
Authority key identifier: BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/02DAD924C2E611EDB1FC202DC4F9AE02.roa
Signing time: Wed 15 Mar 2023 04:01:07 +0000
ROA not before: Wed 15 Mar 2023 04:01:07 +0000
ROA not after: Sun 28 May 2023 00:00:00 +0000
asID: 10753
IP address blocks: 122.8.72.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12807 (0x3207)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915370F/serialNumber=BB5B8156B037E5D22263EAC7F6A11C052FDF633F
Validity
Not Before: Mar 15 04:01:07 2023 GMT
Not After : May 28 00:00:00 2023 GMT
Subject: CN=64114302-87b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:66:0d:2e:c9:c2:c6:c7:15:5a:e1:1b:1f:
5c:08:d7:d1:0c:50:60:56:25:34:72:05:7c:fb:49:
5a:10:cb:7e:95:e1:48:fb:58:c8:00:cc:ae:f9:e1:
6f:5d:0b:07:2f:9e:cb:1e:85:9e:bb:e0:f7:cc:11:
37:d8:b9:9f:35:b0:cd:0c:aa:f7:b6:b0:cd:1b:16:
38:c0:d7:01:64:e6:b8:8d:bf:a8:f6:7e:f2:86:84:
23:53:e4:99:3d:f2:c1:5a:d3:6e:c3:e7:48:7f:35:
5c:81:36:a7:43:95:44:47:b0:6e:d4:99:13:75:f5:
fc:9e:b1:b6:68:8e:99:8c:14:ed:82:c2:11:a1:a2:
83:2e:be:6b:6f:5d:b0:5b:6c:c8:cb:b9:17:42:6e:
04:d0:bb:ee:df:f0:fa:45:ac:5f:b4:1f:9c:01:e8:
e9:e2:97:fd:8b:62:42:d2:a5:22:5f:83:92:fe:db:
f0:f2:72:e5:84:47:29:86:43:d9:83:a1:1a:82:7c:
d2:ad:7b:5f:f0:55:6a:82:23:9b:cf:61:c5:ec:48:
49:5d:09:a8:7c:76:26:64:70:d8:49:bf:7a:9a:fa:
be:72:73:f6:44:f2:ba:b5:d4:ed:0e:9f:c0:8e:40:
c4:a0:43:1b:84:60:82:0b:92:fc:b4:30:53:05:d0:
e0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:25:EA:53:B8:03:C1:69:85:18:9E:AF:70:28:90:80:13:C2:0B:D0
X509v3 Authority Key Identifier:
keyid:BB:5B:81:56:B0:37:E5:D2:22:63:EA:C7:F6:A1:1C:05:2F:DF:63:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/u1uBVrA35dIiY-rH9qEcBS_fYz8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1uBVrA35dIiY-rH9qEcBS_fYz8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915370F/7346E8A2604911E2A307578D2979BB20/02DAD924C2E611EDB1FC202DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
122.8.72.0/22
Signature Algorithm: sha256WithRSAEncryption
16:b6:5d:bc:37:7c:bf:50:82:af:1c:7f:09:21:3a:0f:04:9d:
4c:5f:2a:d9:19:21:19:e1:ba:3a:c3:de:f6:75:c1:c4:de:14:
20:ce:cb:1a:1f:06:71:47:d4:bc:0d:1f:e9:73:a3:bc:2f:e8:
11:f4:68:c4:7f:a8:df:15:45:ef:6d:46:c7:df:d3:94:aa:e8:
14:45:ce:16:f1:e5:c3:b1:e6:d2:70:30:99:19:9e:2d:52:3e:
9c:de:a4:f3:52:3f:6f:9e:c9:91:75:2a:43:21:25:74:8e:b3:
2c:96:3a:c0:00:ed:0b:44:d5:70:dc:40:c8:a3:2d:b6:84:77:
55:14:1d:1c:54:66:33:cb:a0:90:3b:10:59:4c:58:f1:8d:f4:
60:7f:f8:5a:fa:ee:54:79:28:8d:33:e9:66:70:fa:d1:f3:16:
b9:59:49:c6:4f:32:7a:8d:e9:78:81:c2:e4:78:1f:9b:78:cc:
77:0f:3d:f6:72:b6:4b:7c:d0:37:57:0d:8e:b5:c8:9f:a7:81:
8e:7a:9b:a3:8c:4d:61:92:92:e1:23:28:84:76:68:3d:96:01:
db:06:a2:96:79:29:0e:c6:40:6d:4e:af:33:1d:dd:13:76:e4:
29:df:4e:53:97:fc:8a:3f:83:d6:24:09:ea:87:9a:37:9c:e9:
e8:d1:13:42
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICMgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM3MEYxMTAvBgNVBAUTKEJCNUI4MTU2QjAzN0U1RDIyMjYzRUFDN0Y2QTExQzA1
MkZERjYzM0YwHhcNMjMwMzE1MDQwMTA3WhcNMjMwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02NDExNDMwMi04N2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlwRmDS7JwsbHFVrhGx9cCNfRDFBgViU0cgV8+0laEMt+leFI+1jIAMyu+eFv
XQsHL57LHoWeu+D3zBE32LmfNbDNDKr3trDNGxY4wNcBZOa4jb+o9n7yhoQjU+SZ
PfLBWtNuw+dIfzVcgTanQ5VER7Bu1JkTdfX8nrG2aI6ZjBTtgsIRoaKDLr5rb12w
W2zIy7kXQm4E0Lvu3/D6RaxftB+cAejp4pf9i2JC0qUiX4OS/tvw8nLlhEcphkPZ
g6EagnzSrXtf8FVqgiObz2HF7EhJXQmofHYmZHDYSb96mvq+cnP2RPK6tdTtDp/A
jkDEoEMbhGCCC5L8tDBTBdDgDwIDAQABo4IClTCCApEwHQYDVR0OBBYEFNcl6lO4
A8FphRier3AokIATwgvQMB8GA1UdIwQYMBaAFLtbgVawN+XSImPqx/ahHAUv32M/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzcwRi83MzQ2RThBMjYw
NDkxMUUyQTMwNzU3OEQyOTc5QkIyMC91MXVCVnJBMzVkSWlZLXJIOXFFY0JTX2ZZ
ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UxdUJWckEzNWRJaVktckg5cUVjQlNfZll6OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTM3MEYvNzM0NkU4QTI2MDQ5MTFFMkEzMDc1NzhEMjk3OUJCMjAvMDJEQUQ5MjRD
MkU2MTFFREIxRkMyMDJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJ6CEgwDQYJKoZIhvcNAQELBQADggEBABa2Xbw3fL9Qgq8c
fwkhOg8EnUxfKtkZIRnhujrD3vZ1wcTeFCDOyxofBnFH1LwNH+lzo7wv6BH0aMR/
qN8VRe9tRsff05Sq6BRFzhbx5cOx5tJwMJkZni1SPpzepPNSP2+eyZF1KkMhJXSO
syyWOsAA7QtE1XDcQMijLbaEd1UUHRxUZjPLoJA7EFlMWPGN9GB/+Fr67lR5KI0z
6WZw+tHzFrlZScZPMnqN6XiBwuR4H5t4zHcPPfZytkt80DdXDY61yJ+ngY56m6OM
TWGSkuEjKIR2aD2WAdsGopZ5KQ7GQG1OrzMd3RN25CnfTlOX/Io/g9YkCeqHmjec
6ejRE0I=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-fra.rpki-client.org