Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/64E925C6EC8611ECB73DFC2AC4F9AE02.roa
File: 64E925C6EC8611ECB73DFC2AC4F9AE02.roa (raw, json)
Hash identifier: mCZ7Aabwaf7VxxvDbwwRkFSQ8jzxaXV7B08ziol5f8M=
Subject key identifier: 37:FF:ED:50:9F:F2:01:A0:8B:D3:1B:08:DE:99:5E:93:52:90:3D:53
Certificate issuer: /CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Certificate serial: 04DE
Authority key identifier: 24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/64E925C6EC8611ECB73DFC2AC4F9AE02.roa
Signing time: Wed 15 Jun 2022 08:37:30 +0000
ROA not before: Wed 15 Jun 2022 08:37:30 +0000
ROA not after: Fri 30 Dec 2022 00:00:00 +0000
asID: 59316
IP address blocks: 103.243.80.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1246 (0x4de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915D35E/serialNumber=2406208121EBA3FC74361C89E63560B4986DDF08
Validity
Not Before: Jun 15 08:37:30 2022 GMT
Not After : Dec 30 00:00:00 2022 GMT
Subject: CN=62a99a4a-4ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:9d:75:3c:07:05:ea:ca:46:23:87:51:e9:
97:b3:c6:01:5f:fa:86:1e:97:b6:70:48:4a:d3:c3:
05:ca:06:99:42:3b:ee:79:38:dc:72:5c:6c:60:ce:
0f:c1:78:06:b1:2d:75:b0:58:18:52:ca:d0:81:67:
8a:b0:0a:42:ef:03:d1:b8:c9:79:2c:40:90:49:7d:
a2:cc:85:ea:f7:0f:da:50:00:ad:fb:d3:38:3b:1f:
84:78:30:94:e6:2e:3d:5c:4c:4c:8e:51:1a:b6:8f:
e8:94:b0:cb:fb:be:c3:ea:01:e6:b3:74:8f:86:2a:
e5:a9:18:48:9e:e2:ec:35:01:0f:4a:71:e4:5a:0e:
0a:31:bd:5d:1a:cc:0d:98:e2:00:84:b1:2d:33:a0:
f9:0e:ac:7b:4b:09:45:ae:15:db:2a:1d:14:69:40:
6b:03:93:b3:f1:74:d9:e7:65:68:b5:b5:12:46:69:
f5:22:9e:3b:c0:bd:49:3f:30:2a:c3:91:d7:f9:27:
3f:ce:23:62:69:20:12:96:9a:b7:b4:98:45:54:e2:
a9:b6:5e:93:8e:5b:68:59:a9:43:3c:12:3d:c8:46:
13:ee:21:2d:fb:3f:57:54:9d:f8:be:43:16:39:81:
37:d4:b6:d8:d3:32:ab:19:c3:fb:b4:8c:77:43:7a:
3e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:FF:ED:50:9F:F2:01:A0:8B:D3:1B:08:DE:99:5E:93:52:90:3D:53
X509v3 Authority Key Identifier:
keyid:24:06:20:81:21:EB:A3:FC:74:36:1C:89:E6:35:60:B4:98:6D:DF:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/JAYggSHro_x0NhyJ5jVgtJht3wg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JAYggSHro_x0NhyJ5jVgtJht3wg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D35E/7D394C6A016D11EB8DD2C259C4F9AE02/64E925C6EC8611ECB73DFC2AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.243.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:93:99:e3:62:43:29:4c:42:0e:11:00:2b:f4:20:24:79:79:
5a:07:83:9b:d1:60:51:86:98:46:40:bd:85:5d:66:60:d1:1b:
ae:51:e3:46:01:86:ef:93:89:f5:33:d5:cf:c5:30:73:3b:bc:
60:cb:4d:9e:23:ea:cd:79:3d:2b:76:be:15:1f:3c:03:41:db:
59:3f:1c:85:06:30:be:e6:2e:64:79:ce:07:00:55:08:bb:27:
62:1d:15:a6:3c:02:b5:98:b8:db:2d:8c:69:e5:2e:7b:b3:cb:
b5:df:67:9f:a0:1c:a9:c9:5a:0f:a2:ea:2f:ed:4c:20:26:c2:
66:e6:e1:e8:ba:53:42:a8:c5:ec:47:e4:b8:64:3d:0e:61:2f:
5d:4f:38:b4:33:66:da:d4:99:31:be:c4:15:54:2c:05:64:d3:
a1:54:6d:a2:6b:c5:c8:0a:f9:ac:06:a0:1b:66:5f:7e:6c:f2:
4a:d6:d6:67:12:72:fb:d2:c2:c7:bc:06:fe:fb:aa:da:ad:cb:
ae:fc:e4:6d:d5:40:7c:db:0b:2e:a3:3d:c6:25:05:e2:70:a7:
fb:a9:73:ee:33:09:78:3d:21:a9:11:75:e8:cc:d1:5f:3b:dc:
b3:ab:1a:e0:70:21:bf:ee:13:2c:c0:d5:13:c8:f2:f0:c0:17:
86:c2:8f:96
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQzNUUxMTAvBgNVBAUTKDI0MDYyMDgxMjFFQkEzRkM3NDM2MUM4OUU2MzU2MEI0
OTg2RERGMDgwHhcNMjIwNjE1MDgzNzMwWhcNMjIxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MmE5OWE0YS00ZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxcWddTwHBerKRiOHUemXs8YBX/qGHpe2cEhK08MFygaZQjvueTjcclxsYM4P
wXgGsS11sFgYUsrQgWeKsApC7wPRuMl5LECQSX2izIXq9w/aUACt+9M4Ox+EeDCU
5i49XExMjlEato/olLDL+77D6gHms3SPhirlqRhInuLsNQEPSnHkWg4KMb1dGswN
mOIAhLEtM6D5Dqx7SwlFrhXbKh0UaUBrA5Oz8XTZ52VotbUSRmn1Ip47wL1JPzAq
w5HX+Sc/ziNiaSASlpq3tJhFVOKptl6TjltoWalDPBI9yEYT7iEt+z9XVJ34vkMW
OYE31LbY0zKrGcP7tIx3Q3o+EQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDf/7VCf
8gGgi9MbCN6ZXpNSkD1TMB8GA1UdIwQYMBaAFCQGIIEh66P8dDYcieY1YLSYbd8I
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDM1RS83RDM5NEM2QTAx
NkQxMUVCOEREMkMyNTlDNEY5QUUwMi9KQVlnZ1NIcm9feDBOaHlKNWpWZ3RKaHQz
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pBWWdnU0hyb194ME5oeUo1alZndEpodDN3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQzNUUvN0QzOTRDNkEwMTZEMTFFQjhERDJDMjU5QzRGOUFFMDIvNjRFOTI1QzZF
Qzg2MTFFQ0I3M0RGQzJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJn81AwDQYJKoZIhvcNAQELBQADggEBAEuTmeNiQylMQg4R
ACv0ICR5eVoHg5vRYFGGmEZAvYVdZmDRG65R40YBhu+TifUz1c/FMHM7vGDLTZ4j
6s15PSt2vhUfPANB21k/HIUGML7mLmR5zgcAVQi7J2IdFaY8ArWYuNstjGnlLnuz
y7XfZ5+gHKnJWg+i6i/tTCAmwmbm4ei6U0KoxexH5LhkPQ5hL11POLQzZtrUmTG+
xBVULAVk06FUbaJrxcgK+awGoBtmX35s8krW1mcScvvSwse8Bv77qtqty6785G3V
QHzbCy6jPcYlBeJwp/upc+4zCXg9IakRdejM0V873LOrGuBwIb/uEyzA1RPI8vDA
F4bCj5Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:08 2024 by rpki-client on console-ams.rpki-client.org