Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1F8F7D22B41E11ECAFDA1F1AC4F9AE02.roa
File: 1F8F7D22B41E11ECAFDA1F1AC4F9AE02.roa (raw, json)
Hash identifier: WFpe+E5I1AqQpb/yBkaf1O1A3pN4GOK6WwvYp59CG/E=
Subject key identifier: 5F:65:E8:17:E1:D7:2C:14:10:63:30:8E:D4:96:43:C0:3D:9F:4C:65
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 0454
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1F8F7D22B41E11ECAFDA1F1AC4F9AE02.roa
Signing time: Fri 20 May 2022 00:46:29 +0000
ROA not before: Fri 20 May 2022 00:46:29 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 103.54.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1108 (0x454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: May 20 00:46:29 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=6286e4e5-e11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4d:f9:7a:08:f9:7d:24:8b:cc:65:52:c1:fc:
be:af:81:8b:6c:44:ed:41:2b:35:98:ad:50:c3:ec:
5a:2c:b8:43:eb:22:82:d1:77:a5:ea:75:1a:4c:b9:
e5:7e:71:d5:cf:9c:eb:05:0e:f4:d0:c4:e6:b7:71:
29:72:39:62:a9:c4:ff:7d:c3:54:32:94:7a:49:80:
ff:ca:c1:0f:a3:a8:79:07:a6:13:ac:f2:2b:aa:99:
3f:a9:df:0d:1c:57:87:20:04:07:34:d0:75:da:83:
72:88:48:b2:4f:e3:11:aa:a6:24:1d:c1:4f:64:4a:
88:9c:a8:f2:26:94:33:24:b6:13:f0:af:ea:77:6b:
2a:ad:d3:6f:8d:d6:85:d4:fe:45:cd:48:15:5d:b8:
98:e7:91:34:c7:f5:05:f9:08:b5:d2:5a:4d:78:ad:
e7:e5:24:27:18:03:47:b8:5b:49:b6:e9:57:49:c2:
76:6e:10:74:ad:0e:59:f7:2a:37:ec:0a:40:7b:69:
57:ce:5a:86:f2:ef:bd:71:ea:60:d8:94:c0:91:b4:
6b:42:aa:ae:c4:4d:73:2a:16:49:88:16:47:ca:03:
8b:ea:95:f8:bc:14:99:f9:dd:fa:eb:41:64:43:e9:
74:25:83:d7:33:e4:72:68:22:13:51:e6:d4:07:14:
6c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:65:E8:17:E1:D7:2C:14:10:63:30:8E:D4:96:43:C0:3D:9F:4C:65
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1F8F7D22B41E11ECAFDA1F1AC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.54.155.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:04:7b:b4:ea:87:eb:e0:be:ef:35:38:e0:92:5d:5f:79:c2:
31:36:12:2a:0a:d8:42:b9:5c:a1:ae:e5:44:21:2f:51:52:52:
e8:b5:3e:3d:4c:89:38:88:96:97:c5:53:0f:1a:f3:6a:0e:3c:
eb:4a:43:4c:46:1a:6c:78:d5:c7:ea:17:fd:ff:d3:36:be:89:
9a:9a:35:4b:37:b7:ce:39:f2:16:be:02:2f:61:39:a5:10:5b:
19:35:a1:9a:fd:43:d1:7c:7a:54:f2:48:d7:39:b2:86:58:8e:
e3:26:73:0f:f1:2e:89:c6:1c:d8:f6:ae:71:bc:50:20:ca:4e:
3b:4c:82:48:36:9f:05:df:8b:65:c5:61:81:79:13:91:70:b4:
a8:1d:8d:63:81:65:91:9e:86:08:90:d2:09:2a:99:7b:79:cb:
44:17:45:02:92:e3:dc:cb:0c:43:9d:89:ce:a7:a7:2c:f8:ea:
5b:ca:28:22:51:c8:59:3e:07:d7:62:56:de:e6:32:61:4f:9a:
0e:63:45:c2:f4:23:b5:7a:b8:74:41:57:54:58:33:97:46:34:
a2:b0:ca:0f:ad:85:6f:b8:49:0b:fe:d4:55:ac:d8:ac:d8:ec:
37:f5:2c:42:59:12:e4:c4:40:66:3c:26:ec:2d:64:7e:e1:a0:
b2:bd:0f:9b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0
QUYzNDA1RTkwHhcNMjIwNTIwMDA0NjI5WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02Mjg2ZTRlNS1lMTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo035egj5fSSLzGVSwfy+r4GLbETtQSs1mK1Qw+xaLLhD6yKC0Xel6nUaTLnl
fnHVz5zrBQ700MTmt3EpcjliqcT/fcNUMpR6SYD/ysEPo6h5B6YTrPIrqpk/qd8N
HFeHIAQHNNB12oNyiEiyT+MRqqYkHcFPZEqInKjyJpQzJLYT8K/qd2sqrdNvjdaF
1P5FzUgVXbiY55E0x/UF+Qi10lpNeK3n5SQnGANHuFtJtulXScJ2bhB0rQ5Z9yo3
7ApAe2lXzlqG8u+9cepg2JTAkbRrQqquxE1zKhZJiBZHygOL6pX4vBSZ+d3660Fk
Q+l0JYPXM+RyaCITUebUBxRsaQIDAQABo4IClTCCApEwHQYDVR0OBBYEFF9l6Bfh
1ywUEGMwjtSWQ8A9n0xlMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1
QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC
ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQwRDIvNTkzN0Q0M0UzNUFEMTFFQjgxRUVBRDEyQzRGOUFFMDIvMUY4RjdEMjJC
NDFFMTFFQ0FGREExRjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnNpswDQYJKoZIhvcNAQELBQADggEBAJwEe7Tqh+vgvu81
OOCSXV95wjE2EioK2EK5XKGu5UQhL1FSUui1Pj1MiTiIlpfFUw8a82oOPOtKQ0xG
Gmx41cfqF/3/0za+iZqaNUs3t8458ha+Ai9hOaUQWxk1oZr9Q9F8elTySNc5soZY
juMmcw/xLonGHNj2rnG8UCDKTjtMgkg2nwXfi2XFYYF5E5FwtKgdjWOBZZGehgiQ
0gkqmXt5y0QXRQKS49zLDEOdic6npyz46lvKKCJRyFk+B9diVt7mMmFPmg5jRcL0
I7V6uHRBV1RYM5dGNKKwyg+thW+4SQv+1FWs2KzY7Df1LEJZEuTEQGY8JuwtZH7h
oLK9D5s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:11 2024 by rpki-client on console-fra.rpki-client.org