Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/C9CA48383D4611EDBC564B13C4F9AE02.roa
File: C9CA48383D4611EDBC564B13C4F9AE02.roa (raw, json)
Hash identifier: Yfbwadr/UVy+epTMDJtLVfDrqumqr5VHNqpSMQGjm5w=
Subject key identifier: CD:EC:91:FD:5A:FE:BE:31:C8:36:81:D0:1F:4A:28:D8:6A:16:0A:59
Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Certificate serial: 0B69
Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/C9CA48383D4611EDBC564B13C4F9AE02.roa
Signing time: Mon 26 Sep 2022 02:56:16 +0000
ROA not before: Mon 26 Sep 2022 02:56:16 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 147001
IP address blocks: 103.38.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2921 (0xb69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C
Validity
Not Before: Sep 26 02:56:16 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=633114d0-d75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:91:0d:53:e1:02:29:4d:87:5d:bb:51:bd:83:
ba:62:d5:b1:c7:1f:0e:33:c5:b5:b4:f5:21:bb:dc:
3b:a4:f3:b4:e0:8c:b6:9c:3c:cd:24:1c:53:2e:84:
8c:77:ff:cd:19:2c:49:e3:cf:04:60:28:0c:54:46:
24:2a:aa:d7:11:86:f6:41:15:76:5a:d5:da:c1:f7:
24:5f:01:e9:79:17:6f:de:af:d3:72:9f:17:b1:26:
86:6a:57:12:9e:14:8a:e2:de:68:da:ac:e0:69:8a:
9a:b7:4b:9d:5b:62:80:01:7a:0d:20:e3:67:ea:f0:
99:3e:b5:4e:07:26:5c:84:4f:ef:9b:ce:4e:fb:7c:
3f:19:3a:23:8f:21:14:c9:cd:6a:7a:40:b4:5a:6d:
af:27:33:77:5f:55:6a:48:5f:65:de:fa:6a:57:4a:
75:fb:0f:9e:f3:34:a4:97:e9:ad:05:85:4a:b5:66:
83:0d:69:78:c4:2c:85:59:3e:6c:a5:69:78:97:b7:
ba:3c:fe:5d:98:bd:7e:01:50:f3:1c:19:78:a1:36:
e6:66:11:02:b8:ca:c7:73:13:a9:33:42:3c:02:ad:
87:44:8f:4d:13:1e:ea:a1:a1:2f:8a:bb:84:08:7c:
40:73:a4:b0:39:0d:07:ff:9a:b2:ba:f4:39:02:d3:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EC:91:FD:5A:FE:BE:31:C8:36:81:D0:1F:4A:28:D8:6A:16:0A:59
X509v3 Authority Key Identifier:
keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/C9CA48383D4611EDBC564B13C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.38.255.0/24
Signature Algorithm: sha256WithRSAEncryption
86:45:76:b9:86:37:a9:1f:14:da:22:fe:30:1e:46:b9:0a:56:
59:80:61:da:b6:ca:9f:31:74:00:38:1b:d8:65:8d:52:93:00:
3b:7e:60:7d:98:ba:b5:e6:2e:85:41:50:38:1e:35:e6:c8:10:
26:14:6f:49:ea:6c:78:ac:b7:de:91:ea:02:47:1a:c1:9e:74:
92:f2:c9:e9:90:99:51:7a:ff:e2:31:2e:f6:6d:f5:2f:3d:7c:
77:20:8f:fb:4d:6f:b8:71:e0:13:c9:a6:b0:c6:d0:cf:69:0f:
2b:c1:31:30:09:89:e8:d3:03:11:f6:74:e3:09:6a:2a:d0:35:
a6:b0:ed:4a:c7:32:de:31:da:74:71:56:68:7b:ad:9b:1b:70:
b5:de:f0:2e:30:d9:cc:3e:83:85:f7:82:b2:29:63:3a:aa:9f:
91:aa:4d:a7:d2:25:9a:08:5d:11:17:85:db:5c:63:71:cb:e2:
83:ec:b6:3d:db:cf:ca:fd:0b:3c:35:c1:3e:ae:53:05:5a:e1:
fd:19:fc:93:7d:57:34:72:54:62:62:0b:d8:28:a1:47:f9:bc:
4c:38:dc:70:a9:82:45:61:12:f0:00:6d:06:de:6d:58:ab:ce:
f2:c3:ad:86:f3:38:a3:fb:a9:d9:16:00:5e:77:ba:51:bd:d0:
52:20:3c:3e
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICC2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE
NTdERDU1NkMwHhcNMjIwOTI2MDI1NjE2WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzMxMTRkMC1kNzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2ZENU+ECKU2HXbtRvYO6YtWxxx8OM8W1tPUhu9w7pPO04Iy2nDzNJBxTLoSM
d//NGSxJ488EYCgMVEYkKqrXEYb2QRV2WtXawfckXwHpeRdv3q/Tcp8XsSaGalcS
nhSK4t5o2qzgaYqat0udW2KAAXoNIONn6vCZPrVOByZchE/vm85O+3w/GTojjyEU
yc1qekC0Wm2vJzN3X1VqSF9l3vpqV0p1+w+e8zSkl+mtBYVKtWaDDWl4xCyFWT5s
pWl4l7e6PP5dmL1+AVDzHBl4oTbmZhECuMrHcxOpM0I8Aq2HRI9NEx7qoaEviruE
CHxAc6SwOQ0H/5qyuvQ5AtMIMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFM3skf1a
/r4xyDaB0B9KKNhqFgpZMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF
MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW
V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTY4RjYvMzdEMDNERjZDRTI4MTFFOUE2QjZDMTdCQzRGOUFFMDIvQzlDQTQ4Mzgz
RDQ2MTFFREJDNTY0QjEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnJv8wDQYJKoZIhvcNAQELBQADggEBAIZFdrmGN6kfFNoi
/jAeRrkKVlmAYdq2yp8xdAA4G9hljVKTADt+YH2YurXmLoVBUDgeNebIECYUb0nq
bHist96R6gJHGsGedJLyyemQmVF6/+IxLvZt9S89fHcgj/tNb7hx4BPJprDG0M9p
DyvBMTAJiejTAxH2dOMJairQNaaw7UrHMt4x2nRxVmh7rZsbcLXe8C4w2cw+g4X3
grIpYzqqn5GqTafSJZoIXREXhdtcY3HL4oPstj3bz8r9Czw1wT6uUwVa4f0Z/JN9
VzRyVGJiC9gooUf5vEw43HCpgkVhEvAAbQbebVirzvLDrYbzOKP7qdkWAF53ulG9
0FIgPD4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:07 2024 by rpki-client on console-fra.rpki-client.org