Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/0CCA7232E19A11ED82439431C4F9AE02.roa
File: 0CCA7232E19A11ED82439431C4F9AE02.roa (raw, json)
Hash identifier: 0V8rraFilYn3gOoDKsq/IQ0UOEUOQmNPbD2+bHU29kE=
Subject key identifier: 87:AE:89:5C:A8:5C:6D:BC:05:44:DB:EB:17:1C:B9:1C:F0:91:98:A2
Certificate issuer: /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial: 7E
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/0CCA7232E19A11ED82439431C4F9AE02.roa
Signing time: Sun 23 Apr 2023 05:45:28 +0000
ROA not before: Sun 23 Apr 2023 05:45:28 +0000
ROA not after: Sat 30 Dec 2023 00:00:00 +0000
asID: 834
IP address blocks: 103.4.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126 (0x7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Validity
Not Before: Apr 23 05:45:28 2023 GMT
Not After : Dec 30 00:00:00 2023 GMT
Subject: CN=6444c5f7-cfd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d8:70:56:0a:0f:84:a4:6c:32:bd:7a:21:47:
50:1c:fb:9a:86:51:e4:1d:f5:50:90:56:22:61:21:
d1:ca:8a:7a:f8:1b:63:06:a9:65:c2:7c:ab:2d:08:
f7:d5:fa:76:3c:95:3a:a2:f7:2d:ee:98:8c:0d:89:
16:8a:e0:17:e9:12:2f:b0:4d:53:16:74:a2:d9:63:
da:48:93:62:64:88:4b:97:ea:4b:aa:da:5e:0a:21:
4d:6e:e5:09:e0:94:c2:9d:85:a6:40:de:0b:47:bb:
56:c6:c8:57:85:ba:94:83:9f:6c:ef:57:df:04:8e:
7e:57:60:80:41:ad:b8:0e:f3:04:fb:69:ce:36:f4:
c0:f5:e1:91:00:b5:39:9d:28:b2:14:b0:37:db:b2:
cc:62:41:4d:c1:62:3f:d3:0f:48:9c:58:34:98:dc:
10:81:53:e6:5a:bb:c6:53:ed:88:93:f3:5c:d5:b4:
de:27:e6:cf:20:0f:cd:e1:59:cf:8e:7e:48:35:41:
89:ff:17:c1:7b:eb:d1:fa:9d:d9:17:5f:b8:4e:1c:
96:b2:e7:95:91:35:df:a7:97:99:ef:ae:29:07:c6:
fc:57:81:db:16:bc:d5:91:cc:f8:9b:4a:3e:a0:ea:
54:d8:c6:ca:65:18:c1:9f:70:19:92:ed:b4:d3:08:
3e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AE:89:5C:A8:5C:6D:BC:05:44:DB:EB:17:1C:B9:1C:F0:91:98:A2
X509v3 Authority Key Identifier:
keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/0CCA7232E19A11ED82439431C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.4.101.0/24
Signature Algorithm: sha256WithRSAEncryption
12:7a:4e:8d:1b:82:68:cb:1f:a1:40:18:27:93:22:ca:17:1e:
53:e0:e2:3d:cb:e0:70:e2:4c:d4:28:af:d8:b3:8c:32:cc:7b:
f7:b9:6b:4a:18:33:c0:09:f4:f2:e7:f4:d7:a1:3c:01:06:f2:
f1:fa:53:dd:83:be:98:1a:37:09:e8:38:13:8e:5b:c3:fe:bd:
f7:da:d5:c8:1a:bc:f4:b8:57:a9:6b:ff:58:cc:66:55:d9:85:
cd:d4:3d:b3:2a:0f:80:11:9a:fd:49:8d:8c:3c:6b:82:c5:04:
d8:e5:86:5a:26:89:95:e2:9e:81:7d:ca:40:0b:d2:2b:f1:24:
ff:35:22:38:68:05:e1:34:d1:ec:10:f3:56:3b:51:c0:9f:d6:
36:21:b0:67:a5:26:d2:96:73:ff:d7:ca:93:e4:ee:b6:20:18:
0c:7e:1b:c7:6b:7d:41:a8:22:d7:39:ef:c2:58:05:7e:c2:ed:
28:83:16:c2:32:9d:c9:cc:bd:03:03:6a:18:e3:68:ba:9d:43:
b9:bc:00:e9:1b:b7:8a:6e:43:fc:67:9d:32:5e:57:24:45:e1:
95:38:17:1a:82:59:d2:37:83:3d:42:36:29:b9:99:0c:2e:a1:
8a:8b:3b:18:a6:b4:3c:69:63:a9:c1:2a:66:e6:c8:03:1b:83:
f8:ae:cd:f6
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
ODA3QTExMC8GA1UEBRMoNzI5RTJGOUMxRDg3QzIxNDczNTA3OENGRDIxQzYzOEUw
NzE1N0I1RDAeFw0yMzA0MjMwNTQ1MjhaFw0yMzEyMzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY0NDRjNWY3LWNmZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDA2HBWCg+EpGwyvXohR1Ac+5qGUeQd9VCQViJhIdHKinr4G2MGqWXCfKstCPfV
+nY8lTqi9y3umIwNiRaK4BfpEi+wTVMWdKLZY9pIk2JkiEuX6kuq2l4KIU1u5Qng
lMKdhaZA3gtHu1bGyFeFupSDn2zvV98Ejn5XYIBBrbgO8wT7ac429MD14ZEAtTmd
KLIUsDfbssxiQU3BYj/TD0icWDSY3BCBU+Zau8ZT7YiT81zVtN4n5s8gD83hWc+O
fkg1QYn/F8F769H6ndkXX7hOHJay55WRNd+nl5nvrikHxvxXgdsWvNWRzPibSj6g
6lTYxsplGMGfcBmS7bTTCD7dAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUh66JXKhc
bbwFRNvrFxy5HPCRmKIwHwYDVR0jBBgwFoAUcp4vnB2HwhRzUHjP0hxjjgcVe10w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4MDdBLzAyNjNBQjQ4M0U4
ODExRURBNjFBOUIyQUM0RjlBRTAyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUx
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvY3A0dm5CMkh3aFJ6VUhqUDBoeGpqZ2NWZTEwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODA3QS8wMjYzQUI0ODNFODgxMUVEQTYxQTlCMkFDNEY5QUUwMi8wQ0NBNzIzMkUx
OUExMUVEODI0Mzk0MzFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGcEZTANBgkqhkiG9w0BAQsFAAOCAQEAEnpOjRuCaMsfoUAY
J5MiyhceU+DiPcvgcOJM1Civ2LOMMsx797lrShgzwAn08uf016E8AQby8fpT3YO+
mBo3Ceg4E45bw/6999rVyBq89LhXqWv/WMxmVdmFzdQ9syoPgBGa/UmNjDxrgsUE
2OWGWiaJleKegX3KQAvSK/Ek/zUiOGgF4TTR7BDzVjtRwJ/WNiGwZ6Um0pZz/9fK
k+TutiAYDH4bx2t9Qagi1znvwlgFfsLtKIMWwjKdycy9AwNqGONoup1DubwA6Ru3
im5D/GedMl5XJEXhlTgXGoJZ0jeDPUI2KbmZDC6hios7GKa0PGljqcEqZubIAxuD
+K7N9g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:10 2024 by rpki-client on console-fra.rpki-client.org