Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/E086B530AEF711EC8AB1B912C4F9AE02.roa
File: E086B530AEF711EC8AB1B912C4F9AE02.roa (raw, json)
Hash identifier: lEnT/HgeYNqly8UB9XxdC1AY1TmCFov16DYemkL2dKI=
Subject key identifier: 23:F3:BC:88:CA:D3:95:DA:2C:54:50:93:78:2D:4A:93:2E:09:36:A8
Certificate issuer: /CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
Certificate serial: 03
Authority key identifier: 5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/E086B530AEF711EC8AB1B912C4F9AE02.roa
Signing time: Tue 29 Mar 2022 00:33:39 +0000
ROA not before: Tue 29 Mar 2022 00:33:39 +0000
ROA not after: Thu 02 Mar 2023 00:00:00 +0000
asID: 139088
IP address blocks: 103.159.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9158E8E/serialNumber=5F2E5E62932BB50A85FF2F9A5F31B2BADD5F34AC
Validity
Not Before: Mar 29 00:33:39 2022 GMT
Not After : Mar 2 00:00:00 2023 GMT
Subject: CN=624253e3-af45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:e1:5a:cb:86:db:a8:3d:2a:0f:ac:c0:91:
60:4c:b3:a7:79:2a:be:19:d9:13:ba:af:be:08:74:
df:af:f0:81:59:8c:a7:d2:f7:4d:03:55:4b:85:bb:
a1:65:3b:5d:1b:c9:a6:bf:0a:48:d2:5b:00:16:e8:
18:9b:fe:d4:45:8f:80:ca:fe:4c:52:b3:f5:ff:c7:
79:d0:e9:6d:79:c8:4e:0c:f1:0b:3c:c5:d9:8c:3d:
02:c9:a7:a9:99:1b:cf:d1:00:09:76:11:b1:ee:5b:
92:8c:b7:89:d5:24:64:99:eb:42:1a:25:97:54:dd:
9f:29:69:7b:11:a8:3d:c1:24:17:cd:f4:87:13:40:
f8:88:8a:ec:cd:1a:07:17:2e:d2:28:3f:5c:52:df:
89:3f:27:fa:97:6d:95:4b:bb:ca:5d:6c:cc:99:d3:
c3:6c:ef:04:ba:fd:2f:e3:09:01:8b:9f:b9:68:57:
c4:42:b8:87:6e:84:30:8b:59:6f:53:1e:b1:02:06:
34:e4:dc:fe:3d:8c:62:66:9b:1e:47:4a:fc:d4:2f:
bc:a4:7d:c7:89:cf:ce:dd:e7:74:d1:ed:2c:03:5a:
d6:86:5f:9d:74:76:92:a0:2a:d8:9d:08:a6:29:1e:
31:69:ae:62:e6:f5:09:63:bc:f9:c1:cd:a6:d7:51:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F3:BC:88:CA:D3:95:DA:2C:54:50:93:78:2D:4A:93:2E:09:36:A8
X509v3 Authority Key Identifier:
keyid:5F:2E:5E:62:93:2B:B5:0A:85:FF:2F:9A:5F:31:B2:BA:DD:5F:34:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/Xy5eYpMrtQqF_y-aXzGyut1fNKw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xy5eYpMrtQqF_y-aXzGyut1fNKw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158E8E/04FBB8F0AE0F11ECA0205666C4F9AE02/E086B530AEF711EC8AB1B912C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.159.78.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:51:93:c0:23:bd:44:64:42:53:6f:f6:a3:a0:c0:f3:87:b6:
f5:d2:5f:89:8b:5d:f0:49:f4:be:bd:db:a1:83:26:59:95:ff:
c5:e3:0b:c1:79:53:d1:fd:69:a1:5f:ba:75:bd:f0:9b:58:55:
3a:65:07:b2:aa:96:74:9d:76:e6:da:da:f7:42:ce:f3:a7:c6:
1a:bd:ad:20:92:1d:60:33:2e:b6:bf:46:76:5a:0b:76:99:27:
b2:06:6c:a9:21:a1:fb:4a:95:77:3a:fc:f7:10:ff:14:0e:64:
ad:2b:e7:3f:4d:65:2d:4e:d7:f7:0f:aa:b5:92:e7:1a:fb:d6:
46:69:d6:e0:b8:48:fb:9d:a1:e2:84:33:f3:b3:ba:33:78:69:
e7:4c:db:6c:79:8c:03:de:33:a1:ba:ba:93:5e:cc:ae:a2:48:
86:44:06:1e:b4:29:9f:25:b9:93:73:db:60:32:dc:2e:1b:a7:
3c:90:d2:7d:16:0c:a4:ea:45:a8:d6:e7:44:05:ce:61:0f:89:
83:93:da:ef:4b:d5:05:fb:a5:f2:fd:4b:f1:54:3d:92:d7:53:
28:85:48:36:1e:e0:93:8c:72:b2:04:dd:cd:57:98:a2:f7:52:
72:42:97:65:62:1f:ca:6b:76:20:a3:c2:6c:be:1a:8e:ed:47:
3f:8b:c3:52
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
OEU4RTExMC8GA1UEBRMoNUYyRTVFNjI5MzJCQjUwQTg1RkYyRjlBNUYzMUIyQkFE
RDVGMzRBQzAeFw0yMjAzMjkwMDMzMzlaFw0yMzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyNDI1M2UzLWFmNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDEBOFay4bbqD0qD6zAkWBMs6d5Kr4Z2RO6r74IdN+v8IFZjKfS900DVUuFu6Fl
O10byaa/CkjSWwAW6Bib/tRFj4DK/kxSs/X/x3nQ6W15yE4M8Qs8xdmMPQLJp6mZ
G8/RAAl2EbHuW5KMt4nVJGSZ60IaJZdU3Z8paXsRqD3BJBfN9IcTQPiIiuzNGgcX
LtIoP1xS34k/J/qXbZVLu8pdbMyZ08Ns7wS6/S/jCQGLn7loV8RCuIduhDCLWW9T
HrECBjTk3P49jGJmmx5HSvzUL7ykfceJz87d53TR7SwDWtaGX510dpKgKtidCKYp
HjFprmLm9QljvPnBzabXUTO1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUI/O8iMrT
ldosVFCTeC1Kky4JNqgwHwYDVR0jBBgwFoAUXy5eYpMrtQqF/y+aXzGyut1fNKww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4RThFLzA0RkJCOEYwQUUw
RjExRUNBMDIwNTY2NkM0RjlBRTAyL1h5NWVZcE1ydFFxRl95LWFYekd5dXQxZk5L
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWHk1ZVlwTXJ0UXFGX3ktYVh6R3l1dDFmTkt3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OEU4RS8wNEZCQjhGMEFFMEYxMUVDQTAyMDU2NjZDNEY5QUUwMi9FMDg2QjUzMEFF
RjcxMUVDOEFCMUI5MTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGefTjANBgkqhkiG9w0BAQsFAAOCAQEAalGTwCO9RGRCU2/2
o6DA84e29dJfiYtd8En0vr3boYMmWZX/xeMLwXlT0f1poV+6db3wm1hVOmUHsqqW
dJ125tra90LO86fGGr2tIJIdYDMutr9GdloLdpknsgZsqSGh+0qVdzr89xD/FA5k
rSvnP01lLU7X9w+qtZLnGvvWRmnW4LhI+52h4oQz87O6M3hp50zbbHmMA94zobq6
k17MrqJIhkQGHrQpnyW5k3PbYDLcLhunPJDSfRYMpOpFqNbnRAXOYQ+Jg5Pa70vV
Bful8v1L8VQ9ktdTKIVINh7gk4xysgTdzVeYovdSckKXZWIfymt2IKPCbL4aju1H
P4vDUg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:42 2023 by rpki-client on console-fra.rpki-client.org