Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/37D45962D09B11ED8D78BB6FC4F9AE02.roa
File: 37D45962D09B11ED8D78BB6FC4F9AE02.roa (raw, json)
Hash identifier: kcJGqEmaVBreoSpkomJgSDQ+7J9NcTEFf/hPH95l0Tg=
Subject key identifier: F9:88:4B:DC:15:BF:26:0E:4D:0C:A2:39:36:E7:01:A9:EA:23:76:80
Certificate issuer: /CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Certificate serial: 3332
Authority key identifier: 63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/37D45962D09B11ED8D78BB6FC4F9AE02.roa
Signing time: Fri 19 May 2023 16:31:01 +0000
ROA not before: Fri 19 May 2023 16:31:01 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 834
IP address blocks: 103.21.138.0/24 maxlen: 24
103.21.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13106 (0x3332)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BF76/serialNumber=63EC4E6380FAAEA51107E9C40C2F1058E08F856E
Validity
Not Before: May 19 16:31:01 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6467a444-8583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:69:90:f3:1e:37:28:49:75:22:be:95:cb:
ef:f9:7c:28:10:f2:70:b0:f8:d3:5a:cb:7e:ce:27:
86:37:21:b7:e2:c8:6e:44:b8:4b:65:51:44:4c:03:
e4:5a:bc:8a:b9:3a:60:35:0d:57:74:c8:44:24:b8:
1e:5b:39:ea:7f:ad:50:53:94:2a:dd:7d:ae:e7:de:
ce:24:ee:7b:c7:a7:8c:4f:d5:20:b5:e9:27:2a:d7:
ec:b0:ca:61:35:1c:cc:38:dc:53:08:aa:0f:6a:3a:
d8:04:2e:1e:a7:47:b3:f2:c5:6b:a3:77:b9:4c:4f:
cd:30:84:ad:a7:fe:5d:51:f1:40:20:fa:59:e4:1e:
2e:f7:2c:06:ef:d6:64:fb:49:12:2a:f4:14:91:03:
ae:0a:2c:af:5c:97:69:13:56:de:47:23:1d:04:31:
8d:18:97:71:78:b5:5a:dd:5c:56:fb:bb:a8:e3:bf:
85:07:89:6a:2f:18:7d:22:a5:e5:c0:dc:4f:68:a8:
ac:da:ec:db:33:15:62:f6:26:33:ea:ad:cc:4b:06:
8b:47:b0:8c:e2:6c:db:ff:45:bc:c2:dc:a9:29:05:
13:40:91:0b:76:17:d9:2c:a6:ff:25:92:58:63:2c:
33:4f:83:9a:cb:ee:6f:eb:6d:23:85:78:1d:81:9a:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:88:4B:DC:15:BF:26:0E:4D:0C:A2:39:36:E7:01:A9:EA:23:76:80
X509v3 Authority Key Identifier:
keyid:63:EC:4E:63:80:FA:AE:A5:11:07:E9:C4:0C:2F:10:58:E0:8F:85:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y-xOY4D6rqURB-nEDC8QWOCPhW4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BF76/944E38921DAB11E2BB30CAA908B02CD2/37D45962D09B11ED8D78BB6FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.21.138.0/23
Signature Algorithm: sha256WithRSAEncryption
89:b6:f9:64:d1:65:a6:53:42:b8:41:05:a0:d1:ab:b0:20:cd:
8d:bd:96:34:25:67:61:da:58:3e:47:c9:00:52:39:6d:2b:56:
c6:62:5b:60:03:36:af:36:3c:7c:73:ea:c8:a3:6e:ba:7a:4f:
eb:ca:98:8c:da:96:b4:e8:e6:70:4f:de:1a:13:43:a8:36:1d:
cc:a4:8e:d1:c7:5b:cb:b9:6d:4b:55:bd:76:77:fc:6d:19:89:
56:be:8d:bb:4a:77:fb:39:f2:d0:79:55:5a:ce:7e:c2:3f:f1:
70:77:46:c6:e9:1a:18:95:87:5d:aa:74:c8:86:11:46:ac:20:
69:82:24:51:58:29:b8:21:a3:6e:5c:94:1e:46:fd:1c:c7:76:
fe:17:0f:ba:a7:06:26:97:4e:53:1c:97:3b:6b:55:34:41:ca:
84:35:bc:a5:7d:bf:4f:31:3a:6c:ef:fc:24:d2:f4:54:12:2f:
ab:1c:fe:cb:94:be:a5:c6:85:76:1f:b8:65:f3:1d:f0:3f:05:
5b:46:f6:99:59:5d:71:a1:bc:f3:fa:47:02:94:b5:90:7a:f6:
e7:b9:cb:ff:eb:11:b0:14:08:b5:fd:e9:af:bf:e1:73:e3:1b:
41:83:2a:89:32:62:3b:0f:7f:ca:d1:8c:9a:46:4c:8a:39:09:
7e:8d:27:a9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICMzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUJGNzYxMTAvBgNVBAUTKDYzRUM0RTYzODBGQUFFQTUxMTA3RTlDNDBDMkYxMDU4
RTA4Rjg1NkUwHhcNMjMwNTE5MTYzMTAxWhcNMjMxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02NDY3YTQ0NC04NTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxe5pkPMeNyhJdSK+lcvv+XwoEPJwsPjTWst+zieGNyG34shuRLhLZVFETAPk
WryKuTpgNQ1XdMhEJLgeWznqf61QU5Qq3X2u597OJO57x6eMT9UgteknKtfssMph
NRzMONxTCKoPajrYBC4ep0ez8sVro3e5TE/NMIStp/5dUfFAIPpZ5B4u9ywG79Zk
+0kSKvQUkQOuCiyvXJdpE1beRyMdBDGNGJdxeLVa3VxW+7uo47+FB4lqLxh9IqXl
wNxPaKis2uzbMxVi9iYz6q3MSwaLR7CM4mzb/0W8wtypKQUTQJELdhfZLKb/JZJY
YywzT4Oay+5v620jhXgdgZrtvQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPmIS9wV
vyYOTQyiOTbnAanqI3aAMB8GA1UdIwQYMBaAFGPsTmOA+q6lEQfpxAwvEFjgj4Vu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QkY3Ni85NDRFMzg5MjFE
QUIxMUUyQkIzMENBQTkwOEIwMkNEMi9ZLXhPWTRENnJxVVJCLW5FREM4UVdPQ1Bo
VzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kteE9ZNEQ2cnFVUkItbkVEQzhRV09DUGhXNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUJGNzYvOTQ0RTM4OTIxREFCMTFFMkJCMzBDQUE5MDhCMDJDRDIvMzdENDU5NjJE
MDlCMTFFRDhENzhCQjZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnFYowDQYJKoZIhvcNAQELBQADggEBAIm2+WTRZaZTQrhB
BaDRq7AgzY29ljQlZ2HaWD5HyQBSOW0rVsZiW2ADNq82PHxz6sijbrp6T+vKmIza
lrTo5nBP3hoTQ6g2HcykjtHHW8u5bUtVvXZ3/G0ZiVa+jbtKd/s58tB5VVrOfsI/
8XB3RsbpGhiVh12qdMiGEUasIGmCJFFYKbgho25clB5G/RzHdv4XD7qnBiaXTlMc
lztrVTRByoQ1vKV9v08xOmzv/CTS9FQSL6sc/suUvqXGhXYfuGXzHfA/BVtG9plZ
XXGhvPP6RwKUtZB69ue5y//rEbAUCLX96a+/4XPjG0GDKokyYjsPf8rRjJpGTIo5
CX6NJ6k=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:08 2024 by rpki-client on console-fra.rpki-client.org