Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/9125A3B89DFC11EC90D19D69C4F9AE02.roa
File: 9125A3B89DFC11EC90D19D69C4F9AE02.roa (raw, json)
Hash identifier: xNuZpTcKBWCLsQy8etxoOaEpxuFnVvoGx+WWPwTefyQ=
Subject key identifier: FD:FF:31:8E:8F:EA:A9:32:A5:16:1A:82:C0:34:32:4B:87:52:09:2D
Certificate issuer: /CN=A9160F2D/serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A
Certificate serial: 02
Authority key identifier: EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/9125A3B89DFC11EC90D19D69C4F9AE02.roa
Signing time: Mon 07 Mar 2022 09:54:23 +0000
ROA not before: Mon 07 Mar 2022 09:54:23 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 136970
IP address blocks: 103.146.50.0/23 maxlen: 23
103.146.50.0/24 maxlen: 24
103.146.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160F2D/serialNumber=EC5740C476D7FFF44BA61F857915A1F179931A4A
Validity
Not Before: Mar 7 09:54:23 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=6225d64f-0749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:48:39:ec:d9:fc:f2:41:10:28:c2:b6:32:
f7:46:0c:2c:e5:be:41:ba:62:b8:99:57:c4:d8:63:
93:40:2f:65:96:2f:1f:ec:95:40:cd:b5:ee:30:fb:
11:48:fe:d3:45:08:2c:e2:c3:92:29:58:44:85:6d:
82:b9:04:bc:d5:0c:e0:61:3f:17:8f:88:27:38:6b:
db:1e:c7:39:5f:7b:e2:1b:ef:88:1f:80:3a:9d:07:
05:ca:f8:02:56:9f:65:d9:ef:59:fb:87:cf:a6:1b:
9d:71:3a:83:7e:5f:72:16:4d:3b:77:d3:19:75:0b:
8c:1d:65:de:86:17:47:84:c7:a9:17:52:8a:72:43:
46:95:e5:7c:74:cd:66:16:d4:e8:85:1c:a4:72:9f:
cc:a7:e7:2d:71:4b:fa:45:7e:30:54:57:02:77:a7:
81:68:9b:c7:82:de:88:a7:bf:9e:02:ce:ff:6c:91:
55:5b:61:01:31:b6:2e:ae:67:6f:26:7c:53:75:7c:
a3:34:b2:bc:cc:7c:ab:a1:dd:03:28:04:53:be:4a:
9a:72:85:ff:59:78:53:64:c6:a6:ff:31:e2:e4:17:
72:db:cb:0f:38:5a:b5:27:87:ec:f5:6c:d6:9c:c8:
38:2e:dd:8e:dd:74:89:1a:ac:c4:b1:96:43:52:19:
98:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FF:31:8E:8F:EA:A9:32:A5:16:1A:82:C0:34:32:4B:87:52:09:2D
X509v3 Authority Key Identifier:
keyid:EC:57:40:C4:76:D7:FF:F4:4B:A6:1F:85:79:15:A1:F1:79:93:1A:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/7FdAxHbX__RLph-FeRWh8XmTGko.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FdAxHbX__RLph-FeRWh8XmTGko.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160F2D/085A70489DF911EC83CCFA65C4F9AE02/9125A3B89DFC11EC90D19D69C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.146.50.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:00:75:30:61:d9:d9:45:cb:5a:87:b2:9b:91:a0:64:7d:79:
18:f8:d3:53:39:05:fa:79:f7:77:c7:31:b8:7f:e7:94:2e:f3:
b1:12:58:a3:7a:b4:44:07:87:5d:87:21:c2:a5:30:45:62:69:
07:22:0e:64:82:13:d0:7c:8a:85:3e:d2:e0:d3:e2:1e:26:a0:
3f:98:96:6f:fc:50:6c:ce:5a:ac:22:96:ae:6c:fb:40:a0:01:
80:40:5a:72:58:8f:6c:51:d1:9f:95:33:27:fc:30:44:ff:aa:
ef:04:04:1f:de:1c:0e:f4:c0:25:91:b4:39:e9:b2:95:58:0d:
f7:45:fa:e8:61:40:5e:e0:8b:f9:8a:64:df:16:20:58:f1:fb:
55:b4:99:59:70:ad:80:46:af:5d:68:b5:3f:e1:10:8e:70:39:
57:5a:19:ea:3b:47:fc:fd:9e:ff:96:b5:bb:09:71:1c:15:f9:
65:70:72:9c:32:96:f5:70:45:70:41:3e:fe:c4:2b:43:07:2a:
60:0c:cb:41:7b:49:2c:d0:53:2f:dc:57:3d:f7:1b:c9:98:26:
cd:df:b9:0e:87:0b:04:50:bf:7e:0f:32:10:39:2b:0e:af:61:
95:7c:ad:98:42:e3:04:59:92:85:4b:94:1c:cc:87:1b:05:e3:
7f:c1:c0:78
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
MEYyRDExMC8GA1UEBRMoRUM1NzQwQzQ3NkQ3RkZGNDRCQTYxRjg1NzkxNUExRjE3
OTkzMUE0QTAeFw0yMjAzMDcwOTU0MjNaFw0yMzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYyMjVkNjRmLTA3NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3JEg57Nn88kEQKMK2MvdGDCzlvkG6YriZV8TYY5NAL2WWLx/slUDNte4w+xFI
/tNFCCziw5IpWESFbYK5BLzVDOBhPxePiCc4a9sexzlfe+Ib74gfgDqdBwXK+AJW
n2XZ71n7h8+mG51xOoN+X3IWTTt30xl1C4wdZd6GF0eEx6kXUopyQ0aV5Xx0zWYW
1OiFHKRyn8yn5y1xS/pFfjBUVwJ3p4Fom8eC3oinv54Czv9skVVbYQExti6uZ28m
fFN1fKM0srzMfKuh3QMoBFO+Sppyhf9ZeFNkxqb/MeLkF3Lbyw84WrUnh+z1bNac
yDgu3Y7ddIkarMSxlkNSGZh/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU/f8xjo/q
qTKlFhqCwDQyS4dSCS0wHwYDVR0jBBgwFoAU7FdAxHbX//RLph+FeRWh8XmTGkow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwRjJELzA4NUE3MDQ4OURG
OTExRUM4M0NDRkE2NUM0RjlBRTAyLzdGZEF4SGJYX19STHBoLUZlUldoOFhtVEdr
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvN0ZkQXhIYlhfX1JMcGgtRmVSV2g4WG1UR2tvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MEYyRC8wODVBNzA0ODlERjkxMUVDODNDQ0ZBNjVDNEY5QUUwMi85MTI1QTNCODlE
RkMxMUVDOTBEMTlENjlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWeSMjANBgkqhkiG9w0BAQsFAAOCAQEAjwB1MGHZ2UXLWoey
m5GgZH15GPjTUzkF+nn3d8cxuH/nlC7zsRJYo3q0RAeHXYchwqUwRWJpByIOZIIT
0HyKhT7S4NPiHiagP5iWb/xQbM5arCKWrmz7QKABgEBacliPbFHRn5UzJ/wwRP+q
7wQEH94cDvTAJZG0OemylVgN90X66GFAXuCL+Ypk3xYgWPH7VbSZWXCtgEavXWi1
P+EQjnA5V1oZ6jtH/P2e/5a1uwlxHBX5ZXBynDKW9XBFcEE+/sQrQwcqYAzLQXtJ
LNBTL9xXPfcbyZgmzd+5DocLBFC/fg8yEDkrDq9hlXytmELjBFmShUuUHMyHGwXj
f8HAeA==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:41 2023 by rpki-client on console-ams.rpki-client.org