Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/1206BE68C2C011EBB7C7E17DC4F9AE02.roa
File: 1206BE68C2C011EBB7C7E17DC4F9AE02.roa (raw, json)
Hash identifier: vevue7YM98E+zJZ/pJOEFW1sQivqLQpYCnzZMaGJN5I=
Subject key identifier: 14:68:9A:10:01:D6:E2:50:CD:FE:74:18:67:42:87:5F:EE:8F:57:E6
Certificate issuer: /CN=A91580A1/serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9
Certificate serial: 0299
Authority key identifier: 43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/1206BE68C2C011EBB7C7E17DC4F9AE02.roa
Signing time: Thu 29 Jul 2021 08:57:18 +0000
ROA not before: Thu 29 Jul 2021 08:57:18 +0000
ROA not after: Fri 01 Jul 2022 00:00:00 +0000
asID: 140849
IP address blocks: 103.137.6.0/23 maxlen: 23
103.137.6.0/24 maxlen: 24
103.137.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 665 (0x299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91580A1/serialNumber=437FF34EE7BC7050C9C84886AA94CE8CF50C24F9
Validity
Not Before: Jul 29 08:57:18 2021 GMT
Not After : Jul 1 00:00:00 2022 GMT
Subject: CN=61026d6e-ff50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:95:c6:e1:65:9d:7a:59:42:f4:13:f5:e1:
5b:f4:5d:9f:90:0b:5d:26:9b:4f:69:67:f1:28:30:
8b:97:03:e2:15:dd:29:c8:52:fa:37:fd:7b:02:f5:
ce:7b:f1:f5:88:eb:de:7b:bf:a7:47:11:e8:fc:90:
6b:dd:e7:05:28:90:f8:00:12:1c:c3:8b:cb:3d:57:
22:5b:f8:a8:38:f4:67:60:64:94:ff:26:21:34:07:
a7:83:51:a6:86:02:1a:3a:2f:3a:f4:c4:72:59:b7:
94:9b:a9:b2:e3:1d:9f:f0:43:17:bb:46:40:8d:4f:
30:92:f8:c0:10:07:27:e7:7d:84:7a:e4:40:a7:58:
ed:e2:9b:21:42:75:ea:82:ac:7b:7e:bc:ef:46:9f:
35:d9:75:54:e5:64:ee:a6:50:97:bb:6e:28:0c:f7:
03:29:00:78:db:82:7a:d7:89:62:e9:6b:20:2a:2d:
9e:fe:69:9b:45:51:7c:73:90:2d:99:84:4c:26:51:
20:7e:5f:7f:a2:53:d5:12:c4:26:a0:3a:d2:53:b3:
bc:13:5b:1b:cf:5a:1a:92:60:81:9a:b0:79:20:9a:
b7:f7:5d:d4:42:3e:e8:ca:c5:35:63:c6:a5:d6:ef:
00:b7:68:7f:5a:0c:62:53:b8:37:24:f2:6e:8e:30:
5b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:68:9A:10:01:D6:E2:50:CD:FE:74:18:67:42:87:5F:EE:8F:57:E6
X509v3 Authority Key Identifier:
keyid:43:7F:F3:4E:E7:BC:70:50:C9:C8:48:86:AA:94:CE:8C:F5:0C:24:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/Q3_zTue8cFDJyEiGqpTOjPUMJPk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q3_zTue8cFDJyEiGqpTOjPUMJPk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91580A1/92560A6A374D11EAA0A3BE55C4F9AE02/1206BE68C2C011EBB7C7E17DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.137.6.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:27:42:6a:71:2b:60:d3:a0:8e:66:e0:10:ec:76:75:87:13:
4c:3c:a7:b3:d8:f0:89:57:a6:d6:0a:0c:e9:30:89:fb:d6:60:
c7:45:7f:f2:75:99:9c:49:70:78:99:e2:4e:93:de:c4:74:20:
ee:c1:64:ba:93:d7:ee:a1:d7:c8:8d:59:3f:ac:fd:1a:48:f0:
2a:0a:6a:56:19:2f:4a:25:f0:be:52:44:57:bf:19:59:81:7b:
6e:54:ef:61:eb:17:13:7c:03:11:61:db:9d:ba:5d:6c:ea:16:
6d:1c:1e:92:74:4b:62:15:31:95:13:16:aa:bb:f9:d4:58:67:
91:e6:4c:7c:6b:fc:f3:b0:ef:c2:6e:24:73:c7:56:04:ca:00:
d4:f4:1d:32:6d:25:50:bf:29:21:3d:28:eb:04:3d:72:bd:fb:
3b:c9:bb:b9:16:26:e0:07:1b:8c:5d:ea:96:59:60:20:6c:a7:
d2:09:36:c6:77:8a:6c:c6:af:4c:2d:74:35:25:f3:f9:99:0c:
c2:6b:cc:7f:43:56:0a:28:30:10:ca:17:1d:36:3e:73:3b:bd:
40:64:06:f9:6f:9d:dd:dd:cd:b6:79:85:46:43:80:70:e8:80:
8c:d7:4e:2c:5f:ab:5c:b6:fa:27:62:19:af:56:49:94:b4:21:
68:af:ad:ae
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTgwQTExMTAvBgNVBAUTKDQzN0ZGMzRFRTdCQzcwNTBDOUM4NDg4NkFBOTRDRThD
RjUwQzI0RjkwHhcNMjEwNzI5MDg1NzE4WhcNMjIwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MTAyNmQ2ZS1mZjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyRKVxuFlnXpZQvQT9eFb9F2fkAtdJptPaWfxKDCLlwPiFd0pyFL6N/17AvXO
e/H1iOvee7+nRxHo/JBr3ecFKJD4ABIcw4vLPVciW/ioOPRnYGSU/yYhNAeng1Gm
hgIaOi869MRyWbeUm6my4x2f8EMXu0ZAjU8wkvjAEAcn532EeuRAp1jt4pshQnXq
gqx7frzvRp812XVU5WTuplCXu24oDPcDKQB424J614li6WsgKi2e/mmbRVF8c5At
mYRMJlEgfl9/olPVEsQmoDrSU7O8E1sbz1oakmCBmrB5IJq3913UQj7oysU1Y8al
1u8At2h/WgxiU7g3JPJujjBbywIDAQABo4IClTCCApEwHQYDVR0OBBYEFBRomhAB
1uJQzf50GGdCh1/uj1fmMB8GA1UdIwQYMBaAFEN/807nvHBQychIhqqUzoz1DCT5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODBBMS85MjU2MEE2QTM3
NEQxMUVBQTBBM0JFNTVDNEY5QUUwMi9RM196VHVlOGNGREp5RWlHcXBUT2pQVU1K
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1EzX3pUdWU4Y0ZESnlFaUdxcFRPalBVTUpQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTgwQTEvOTI1NjBBNkEzNzREMTFFQUEwQTNCRTU1QzRGOUFFMDIvMTIwNkJFNjhD
MkMwMTFFQkI3QzdFMTdEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFniQYwDQYJKoZIhvcNAQELBQADggEBAJonQmpxK2DToI5m
4BDsdnWHE0w8p7PY8IlXptYKDOkwifvWYMdFf/J1mZxJcHiZ4k6T3sR0IO7BZLqT
1+6h18iNWT+s/RpI8CoKalYZL0ol8L5SRFe/GVmBe25U72HrFxN8AxFh2526XWzq
Fm0cHpJ0S2IVMZUTFqq7+dRYZ5HmTHxr/POw78JuJHPHVgTKANT0HTJtJVC/KSE9
KOsEPXK9+zvJu7kWJuAHG4xd6pZZYCBsp9IJNsZ3imzGr0wtdDUl8/mZDMJrzH9D
VgooMBDKFx02PnM7vUBkBvlvnd3dzbZ5hUZDgHDogIzXTixfq1y2+idiGa9WSZS0
IWivra4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-ams.rpki-client.org