Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/81E3D904E15611EC9E14513DC4F9AE02.roa
File: 81E3D904E15611EC9E14513DC4F9AE02.roa (raw, json)
Hash identifier: LakHTONk1slLITbLeongTlbMrlNIbnMGsSKztJCvXxw=
Subject key identifier: 7D:37:75:D2:14:08:A1:CB:E5:31:B9:C1:A6:55:45:B2:51:1A:37:DA
Certificate issuer: /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Certificate serial: 0305
Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/81E3D904E15611EC9E14513DC4F9AE02.roa
Signing time: Wed 01 Jun 2022 14:58:03 +0000
ROA not before: Wed 01 Jun 2022 14:58:03 +0000
ROA not after: Sat 01 Oct 2022 00:00:00 +0000
asID: 139300
IP address blocks: 103.167.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 773 (0x305)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Validity
Not Before: Jun 1 14:58:03 2022 GMT
Not After : Oct 1 00:00:00 2022 GMT
Subject: CN=62977e7a-38d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:19:f5:b3:f0:6f:01:da:64:22:3a:df:63:
68:26:25:c3:48:52:f6:e4:14:c6:74:5e:47:7a:59:
51:59:3f:ee:e3:67:a7:74:52:17:50:38:f4:d8:ae:
eb:64:a2:72:a5:68:7c:a7:18:cc:ee:e3:a8:45:af:
be:83:95:96:69:05:40:53:ac:1c:03:6d:f3:81:14:
34:10:89:21:f8:de:05:24:29:8d:21:78:dd:5d:73:
3a:07:6a:eb:29:22:d4:5e:4e:0b:76:f3:3e:07:b1:
9e:dd:cb:ca:d4:3d:f1:72:8e:0d:45:27:bc:a3:3f:
fa:0b:83:40:6e:bb:72:46:bc:1c:18:86:d6:c1:4d:
31:13:13:5d:a0:97:14:61:72:9c:c2:52:5e:dd:f6:
f9:74:c5:98:5d:1e:72:9f:1b:87:8d:01:b2:37:13:
8d:74:6d:f4:e1:e0:a6:30:90:dd:f0:4d:a5:e6:ff:
95:97:2e:f9:46:c8:91:52:1b:88:bf:c7:a0:4a:35:
68:e7:74:d1:6d:00:dc:9c:e6:45:b4:7e:b1:5b:f5:
cc:e1:92:b7:be:5f:6b:ef:ce:32:04:3b:30:da:60:
cd:e5:c7:d6:04:80:26:3a:35:38:c0:f7:97:b4:ff:
72:42:50:70:f5:c3:79:50:f1:27:32:99:f9:3f:85:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:37:75:D2:14:08:A1:CB:E5:31:B9:C1:A6:55:45:B2:51:1A:37:DA
X509v3 Authority Key Identifier:
keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/81E3D904E15611EC9E14513DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.167.41.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ed:df:93:a6:fc:22:54:4a:75:12:cc:d9:61:1c:c8:02:5f:
71:bd:88:e3:d6:03:2d:79:cc:df:65:7f:12:33:53:01:fe:e7:
e7:00:17:7d:ad:3f:7b:1b:e6:39:44:d7:e0:13:37:eb:b0:a2:
aa:f0:25:f0:cf:bb:01:72:0a:cc:f3:ca:00:3f:2c:ba:92:58:
d5:0e:8c:94:f0:d7:34:31:87:12:a0:f4:96:fd:d7:74:19:c2:
fb:e1:5c:e3:e0:84:52:77:90:2b:34:2a:a5:ec:a3:d7:d9:0d:
51:88:3f:1c:2f:71:04:91:72:cd:e7:c6:36:2d:7b:bb:5c:b8:
dc:12:3a:4c:76:f4:42:b0:d5:30:f4:27:3d:99:47:bc:f3:11:
dd:10:d3:cb:f6:5d:e8:03:97:0c:c1:e8:ce:2b:69:5d:5f:82:
68:03:75:ce:ea:20:32:41:33:98:d7:54:1f:58:f6:15:46:58:
55:16:83:b3:d2:80:5b:e5:94:98:13:1b:dc:83:9a:a6:b3:62:
22:37:8c:5b:ee:5f:e3:a3:89:74:e0:59:0c:ad:1a:62:2f:25:
cd:3d:b9:78:ca:a6:0c:89:c1:c2:62:de:50:3b:6b:59:90:81:
bc:7a:d7:90:81:a9:eb:c7:1b:ab:43:c4:08:99:e9:49:bc:bf:
96:1b:8a:de
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUFGN0ExMTAvBgNVBAUTKDY4ODBEMzIzQUEzRjJENTE0NjA1MDY0MEYzMjFBNjEy
OTAwMERGMDMwHhcNMjIwNjAxMTQ1ODAzWhcNMjIxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mjk3N2U3YS0zOGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApP0Z9bPwbwHaZCI632NoJiXDSFL25BTGdF5HellRWT/u42endFIXUDj02K7r
ZKJypWh8pxjM7uOoRa++g5WWaQVAU6wcA23zgRQ0EIkh+N4FJCmNIXjdXXM6B2rr
KSLUXk4LdvM+B7Ge3cvK1D3xco4NRSe8oz/6C4NAbrtyRrwcGIbWwU0xExNdoJcU
YXKcwlJe3fb5dMWYXR5ynxuHjQGyNxONdG304eCmMJDd8E2l5v+Vly75RsiRUhuI
v8egSjVo53TRbQDcnOZFtH6xW/XM4ZK3vl9r784yBDsw2mDN5cfWBIAmOjU4wPeX
tP9yQlBw9cN5UPEnMpn5P4UWKwIDAQABo4IClTCCApEwHQYDVR0OBBYEFH03ddIU
CKHL5TG5waZVRbJRGjfaMB8GA1UdIwQYMBaAFGiA0yOqPy1RRgUGQPMhphKQAN8D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QUY3QS9FMDUzMzMzNkJB
QzkxMUVCQjgwN0Q1MUNDNEY5QUUwMi9hSURUSTZvX0xWRkdCUVpBOHlHbUVwQUEz
d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FJRFRJNm9fTFZGR0JRWkE4eUdtRXBBQTN3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUFGN0EvRTA1MzMzMzZCQUM5MTFFQkI4MDdENTFDQzRGOUFFMDIvODFFM0Q5MDRF
MTU2MTFFQzlFMTQ1MTNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnpykwDQYJKoZIhvcNAQELBQADggEBABjt35Om/CJUSnUS
zNlhHMgCX3G9iOPWAy15zN9lfxIzUwH+5+cAF32tP3sb5jlE1+ATN+uwoqrwJfDP
uwFyCszzygA/LLqSWNUOjJTw1zQxhxKg9Jb913QZwvvhXOPghFJ3kCs0KqXso9fZ
DVGIPxwvcQSRcs3nxjYte7tcuNwSOkx29EKw1TD0Jz2ZR7zzEd0Q08v2XegDlwzB
6M4raV1fgmgDdc7qIDJBM5jXVB9Y9hVGWFUWg7PSgFvllJgTG9yDmqazYiI3jFvu
X+OjiXTgWQytGmIvJc09uXjKpgyJwcJi3lA7a1mQgbx615CBqevHG6tDxAiZ6Um8
v5Ybit4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:43 2023 by rpki-client on console-fra.rpki-client.org