Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/5589F35C857611ECA39FC36DC4F9AE02.roa
File: 5589F35C857611ECA39FC36DC4F9AE02.roa (raw, json)
Hash identifier: +UsGkODFkw3O3hGuCRXmI+f42q5jAIuvz/l3mbRBU8A=
Subject key identifier: AC:75:5F:29:9A:8D:F9:67:96:94:63:6D:5F:64:7C:DB:BF:08:75:CE
Certificate issuer: /CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
Certificate serial: 11
Authority key identifier: D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/5589F35C857611ECA39FC36DC4F9AE02.roa
Signing time: Fri 04 Feb 2022 04:53:03 +0000
ROA not before: Fri 04 Feb 2022 04:53:03 +0000
ROA not after: Fri 31 Mar 2023 00:00:00 +0000
asID: 138623
IP address blocks: 103.180.202.0/24 maxlen: 24
103.180.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9168126/serialNumber=D6A9FCCB36A0271CBC5F112BB7205A57B9F484F7
Validity
Not Before: Feb 4 04:53:03 2022 GMT
Not After : Mar 31 00:00:00 2023 GMT
Subject: CN=61fcb12f-201f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:fe:13:0b:40:a4:2a:88:9a:27:29:4b:a8:
b8:7e:55:3a:e9:96:35:f7:cc:87:85:af:ee:70:ba:
eb:fd:78:6c:d3:96:ab:1c:c2:43:fa:f3:92:e2:9a:
a3:66:2c:d5:04:16:0b:91:ed:9e:b9:aa:e3:89:a8:
df:12:80:fa:30:8d:37:f8:42:ec:df:b8:8d:ba:c7:
d6:33:d9:e5:14:7b:77:6f:b9:63:2d:ac:52:8d:d8:
af:1a:38:a6:6d:7a:f6:48:08:c2:f2:c7:44:a4:6d:
51:93:eb:8f:2f:eb:c6:e0:2a:c7:09:48:3a:06:b5:
c2:81:5b:c4:b3:82:14:e8:38:5b:c1:23:72:aa:81:
2e:00:6f:aa:48:14:d7:36:56:a3:53:9b:bd:7a:a0:
7b:ff:51:4e:64:a4:34:2f:2c:9c:b9:c6:08:da:e4:
41:fe:db:e7:6e:95:ad:29:05:d4:9a:ab:bf:42:12:
66:76:f5:12:7b:95:48:3c:a2:24:39:82:34:5b:47:
ae:d3:06:df:13:8e:6b:8c:9f:df:9a:59:13:b4:40:
61:b2:47:09:63:b3:07:11:eb:a9:01:f7:4f:83:21:
65:81:a6:e9:19:11:2e:ef:c9:b4:d3:74:e2:99:a3:
0f:00:77:15:df:51:3c:51:b5:34:ef:89:2f:5c:c4:
ae:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:75:5F:29:9A:8D:F9:67:96:94:63:6D:5F:64:7C:DB:BF:08:75:CE
X509v3 Authority Key Identifier:
keyid:D6:A9:FC:CB:36:A0:27:1C:BC:5F:11:2B:B7:20:5A:57:B9:F4:84:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/1qn8yzagJxy8XxErtyBaV7n0hPc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qn8yzagJxy8XxErtyBaV7n0hPc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168126/157F66EA800611ECB03A0E61C4F9AE02/5589F35C857611ECA39FC36DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.180.202.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:cf:08:12:06:b8:98:1d:be:97:65:cc:9e:56:f1:f3:9c:8f:
c5:37:b8:79:e8:9b:fb:1f:bb:0f:55:9e:86:b4:e7:88:f3:49:
05:5d:78:14:47:a6:0c:7a:a3:7d:27:cd:76:db:f2:8a:81:79:
ce:c2:e7:de:6e:a1:33:e2:6e:d4:d3:e1:6d:84:a9:da:ae:dc:
9a:1d:f0:54:5b:68:5e:cb:a0:00:8e:e3:f6:9c:61:0b:c9:54:
b0:a9:bb:9b:c6:66:73:6c:b2:38:6b:01:ba:e2:0c:9e:3a:32:
8a:14:2e:dc:01:ad:4e:44:e2:67:d9:21:3e:8e:dc:65:a6:3a:
5b:13:e9:95:ec:be:86:8b:fe:88:4b:72:73:0e:4f:bb:65:36:
0e:2f:a0:fd:ed:4d:a0:0f:07:8d:1d:03:db:b7:5a:e6:72:e8:
cb:09:23:fe:74:51:6f:0a:47:fb:cc:d9:84:76:66:71:c3:b4:
1e:3e:00:0c:a8:25:a4:bf:d5:e9:af:e8:16:60:29:d1:a0:c7:
d2:e3:41:30:15:e5:4f:31:6c:8b:f2:b3:e2:d9:22:74:6a:da:
98:f6:04:b0:97:40:b3:bc:b8:39:af:cc:17:09:d2:cf:3b:1e:
47:61:41:e3:73:6b:fd:5c:eb:91:b7:e2:7a:62:71:21:ba:aa:
00:71:83:5a
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
ODEyNjExMC8GA1UEBRMoRDZBOUZDQ0IzNkEwMjcxQ0JDNUYxMTJCQjcyMDVBNTdC
OUY0ODRGNzAeFw0yMjAyMDQwNDUzMDNaFw0yMzAzMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYxZmNiMTJmLTIwMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVw/4TC0CkKoiaJylLqLh+VTrpljX3zIeFr+5wuuv9eGzTlqscwkP685LimqNm
LNUEFguR7Z65quOJqN8SgPowjTf4QuzfuI26x9Yz2eUUe3dvuWMtrFKN2K8aOKZt
evZICMLyx0SkbVGT648v68bgKscJSDoGtcKBW8SzghToOFvBI3KqgS4Ab6pIFNc2
VqNTm716oHv/UU5kpDQvLJy5xgja5EH+2+dula0pBdSaq79CEmZ29RJ7lUg8oiQ5
gjRbR67TBt8TjmuMn9+aWRO0QGGyRwljswcR66kB90+DIWWBpukZES7vybTTdOKZ
ow8AdxXfUTxRtTTviS9cxK4JAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUrHVfKZqN
+WeWlGNtX2R8278Idc4wHwYDVR0jBBgwFoAU1qn8yzagJxy8XxErtyBaV7n0hPcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4MTI2LzE1N0Y2NkVBODAw
NjExRUNCMDNBMEU2MUM0RjlBRTAyLzFxbjh5emFnSnh5OFh4RXJ0eUJhVjduMGhQ
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMXFuOHl6YWdKeHk4WHhFcnR5QmFWN24waFBjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODEyNi8xNTdGNjZFQTgwMDYxMUVDQjAzQTBFNjFDNEY5QUUwMi81NTg5RjM1Qzg1
NzYxMUVDQTM5RkMzNkRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWe0yjANBgkqhkiG9w0BAQsFAAOCAQEArs8IEga4mB2+l2XM
nlbx85yPxTe4eeib+x+7D1WehrTniPNJBV14FEemDHqjfSfNdtvyioF5zsLn3m6h
M+Ju1NPhbYSp2q7cmh3wVFtoXsugAI7j9pxhC8lUsKm7m8Zmc2yyOGsBuuIMnjoy
ihQu3AGtTkTiZ9khPo7cZaY6WxPpley+hov+iEtycw5Pu2U2Di+g/e1NoA8HjR0D
27da5nLoywkj/nRRbwpH+8zZhHZmccO0Hj4ADKglpL/V6a/oFmAp0aDH0uNBMBXl
TzFsi/Kz4tkidGramPYEsJdAs7y4Oa/MFwnSzzseR2FB43Nr/VzrkbfiemJxIbqq
AHGDWg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:22:45 2023 by rpki-client on console-fra.rpki-client.org