Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/0CFBF95A444611EAB52D0259C4F9AE02.roa
File: 0CFBF95A444611EAB52D0259C4F9AE02.roa (raw, json)
Hash identifier: nmyHMjeb3R3812WpTWCQDd7yLAZt2YGJFOv7Cy0uZ7o=
Subject key identifier: F2:64:4A:FC:90:A3:2A:1B:D7:82:96:BC:3C:D8:3A:5E:2D:D6:3E:39
Certificate issuer: /CN=A9158568/serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F
Certificate serial: 07FA
Authority key identifier: DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/0CFBF95A444611EAB52D0259C4F9AE02.roa
Signing time: Wed 12 Jan 2022 08:57:42 +0000
ROA not before: Wed 12 Jan 2022 08:57:42 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 203
IP address blocks: 116.251.204.0/24 maxlen: 24
116.251.205.0/24 maxlen: 24
116.251.206.0/24 maxlen: 24
116.251.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2042 (0x7fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158568/serialNumber=DF253484DCE52C4137CBD1C8ED44D9CB2557F43F
Validity
Not Before: Jan 12 08:57:42 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61de9806-2559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:48:0b:b2:76:cb:73:f8:74:46:f4:2b:50:
60:6f:ed:11:36:d7:ae:82:5e:02:61:db:ab:67:30:
a3:36:76:7c:2f:0b:ca:42:47:c7:32:4f:ae:04:25:
6d:b4:5a:76:e6:3a:4b:17:a5:d5:f1:7e:b7:6e:7d:
43:43:5c:1e:56:7b:28:c5:88:cd:41:49:90:b0:5c:
09:6e:ee:80:71:61:9a:a7:68:a9:d7:af:91:4b:e8:
37:a2:a0:b4:f7:d0:58:20:fa:6a:0f:94:5d:3f:5d:
a3:27:2c:1e:5f:0a:7e:ae:fb:89:00:39:e5:d5:dd:
1d:87:a1:2c:c8:aa:0a:9f:1a:b1:64:b5:7f:83:5d:
f8:82:08:d9:04:43:47:fe:75:80:58:53:60:c4:23:
16:6a:f2:21:2b:29:fd:35:ee:ee:26:90:7d:0e:03:
9c:54:1e:70:cb:83:13:f9:11:cc:11:14:15:62:24:
af:b0:69:48:cb:a7:4f:56:42:c1:24:ba:57:f1:b7:
3b:71:72:a5:13:f6:45:90:ae:49:db:c3:a8:0e:2e:
7f:a8:06:25:a7:1e:4b:97:70:62:9d:79:7e:47:80:
d4:da:9c:89:e7:05:75:93:0a:f5:97:9c:af:53:58:
50:1d:93:e4:26:00:c9:41:a0:eb:f4:c9:c0:31:c8:
33:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:64:4A:FC:90:A3:2A:1B:D7:82:96:BC:3C:D8:3A:5E:2D:D6:3E:39
X509v3 Authority Key Identifier:
keyid:DF:25:34:84:DC:E5:2C:41:37:CB:D1:C8:ED:44:D9:CB:25:57:F4:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/3yU0hNzlLEE3y9HI7UTZyyVX9D8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3yU0hNzlLEE3y9HI7UTZyyVX9D8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158568/D3130676185711EA9863415EC4F9AE02/0CFBF95A444611EAB52D0259C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
116.251.204.0/22
Signature Algorithm: sha256WithRSAEncryption
54:51:71:70:01:8b:c9:bd:f5:31:47:d9:69:72:30:f0:2b:28:
8a:1f:27:83:59:d1:da:b9:02:d0:3e:b2:48:5e:a5:97:7d:c5:
40:01:02:49:fd:3f:f7:a3:2f:5c:81:dd:e2:84:a7:39:a0:9c:
07:7c:48:86:61:d1:cc:c4:8b:c8:93:81:fc:da:b6:52:f0:de:
ba:a4:78:19:4c:b8:78:29:3f:ae:87:91:ad:03:0f:34:5c:99:
ba:71:58:58:da:ad:bc:69:bc:81:90:c1:df:0a:ff:29:22:00:
fe:77:0a:58:5a:b4:f8:d7:a3:84:2c:06:b3:52:11:96:3a:ab:
b2:92:6f:5f:3c:77:4c:ab:9a:b1:be:d5:69:dd:92:90:01:d3:
2e:92:c6:e2:15:75:9d:3b:37:c8:2c:d6:60:94:4f:cd:ab:c9:
fc:58:9c:10:09:2a:e2:88:de:6b:f0:ad:b3:9b:1f:0c:d3:4a:
db:3a:ac:42:02:21:ce:e7:65:70:da:6a:a1:2f:28:c9:1d:25:
d9:c4:47:63:26:c1:e8:b2:7d:71:9e:28:40:6e:0c:7a:8f:78:
e3:aa:c5:19:2d:da:5f:3a:ef:f6:c7:ca:b7:31:fd:d8:b1:f2:
bc:69:47:e0:93:77:84:3b:9d:06:16:43:bd:98:38:ee:87:07:
f7:cb:42:16
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTg1NjgxMTAvBgNVBAUTKERGMjUzNDg0RENFNTJDNDEzN0NCRDFDOEVENDREOUNC
MjU1N0Y0M0YwHhcNMjIwMTEyMDg1NzQyWhcNMjMwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02MWRlOTgwNi0yNTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAopxIC7J2y3P4dEb0K1Bgb+0RNteugl4CYdurZzCjNnZ8LwvKQkfHMk+uBCVt
tFp25jpLF6XV8X63bn1DQ1weVnsoxYjNQUmQsFwJbu6AcWGap2ip16+RS+g3oqC0
99BYIPpqD5RdP12jJyweXwp+rvuJADnl1d0dh6EsyKoKnxqxZLV/g134ggjZBENH
/nWAWFNgxCMWavIhKyn9Ne7uJpB9DgOcVB5wy4MT+RHMERQVYiSvsGlIy6dPVkLB
JLpX8bc7cXKlE/ZFkK5J28OoDi5/qAYlpx5Ll3BinXl+R4DU2pyJ5wV1kwr1l5yv
U1hQHZPkJgDJQaDr9MnAMcgzJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPJkSvyQ
oyob14KWvDzYOl4t1j45MB8GA1UdIwQYMBaAFN8lNITc5SxBN8vRyO1E2cslV/Q/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODU2OC9EMzEzMDY3NjE4
NTcxMUVBOTg2MzQxNUVDNEY5QUUwMi8zeVUwaE56bExFRTN5OUhJN1VUWnl5Vlg5
RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN5VTBoTnpsTEVFM3k5SEk3VVRaeXlWWDlEOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTg1NjgvRDMxMzA2NzYxODU3MTFFQTk4NjM0MTVFQzRGOUFFMDIvMENGQkY5NUE0
NDQ2MTFFQUI1MkQwMjU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJ0+8wwDQYJKoZIhvcNAQELBQADggEBAFRRcXABi8m99TFH
2WlyMPArKIofJ4NZ0dq5AtA+skhepZd9xUABAkn9P/ejL1yB3eKEpzmgnAd8SIZh
0czEi8iTgfzatlLw3rqkeBlMuHgpP66Hka0DDzRcmbpxWFjarbxpvIGQwd8K/yki
AP53ClhatPjXo4QsBrNSEZY6q7KSb188d0yrmrG+1WndkpAB0y6SxuIVdZ07N8gs
1mCUT82ryfxYnBAJKuKI3mvwrbObHwzTSts6rEICIc7nZXDaaqEvKMkdJdnER2Mm
weiyfXGeKEBuDHqPeOOqxRkt2l867/bHyrcx/dix8rxpR+CTd4Q7nQYWQ72YOO6H
B/fLQhY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:40 2023 by rpki-client on console-ams.rpki-client.org