Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/479D20DE750811ED93993510C4F9AE02.roa
File: 479D20DE750811ED93993510C4F9AE02.roa (raw, json)
Hash identifier: w8HkaRgCHIM4iClhxjQZRS9WisAIJWnwG9NJxp448KY=
Subject key identifier: 34:17:39:56:43:DA:CF:B0:F7:08:D9:F3:99:71:F7:4B:72:B6:83:65
Certificate issuer: /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial: 058D
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/479D20DE750811ED93993510C4F9AE02.roa
Signing time: Tue 06 Dec 2022 10:29:50 +0000
ROA not before: Tue 06 Dec 2022 10:29:49 +0000
ROA not after: Sun 30 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.114.188.0/23 maxlen: 24
45.114.190.0/24 maxlen: 24
103.54.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1421 (0x58d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Validity
Not Before: Dec 6 10:29:49 2022 GMT
Not After : Jul 30 00:00:00 2023 GMT
Subject: CN=638f199d-7469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:7f:32:e2:7a:b1:72:ac:2c:39:6d:34:d8:
cd:3b:2c:b6:7c:b8:18:73:f4:26:cc:5b:d9:5e:64:
20:55:91:69:31:98:32:69:be:01:07:92:64:06:6a:
29:e8:72:5c:1c:b3:6a:46:1b:77:5a:37:eb:8f:cb:
c7:ab:09:ce:47:1c:9c:45:37:94:13:15:51:9d:08:
7d:77:02:87:a2:b4:7b:b0:56:4f:31:d5:44:ea:3d:
37:d2:24:bb:ac:e9:2b:05:70:52:93:cc:03:2f:d6:
59:eb:12:fe:1d:96:96:00:c6:35:43:28:ac:87:db:
fe:a9:2f:1d:eb:ac:86:1a:1c:ed:c6:fd:96:1c:8f:
34:b9:4e:d3:ee:c6:b9:26:82:91:0c:0a:c1:0c:7b:
fa:fe:a4:ef:c5:af:85:65:57:8e:4c:5d:66:d5:60:
00:43:c1:54:a6:8a:35:38:91:4a:13:54:60:3f:d9:
9a:bd:5a:7b:5d:58:c5:d4:ec:aa:1c:50:12:60:27:
80:cc:4a:da:67:2f:c9:3f:c1:25:8d:ce:d0:15:6b:
c0:cb:1c:f9:71:7e:d4:64:e7:13:33:3e:db:63:20:
98:7f:cf:2c:9d:b6:d1:38:71:35:95:ac:35:89:09:
a6:e8:1f:a4:e6:43:c1:4b:31:bc:aa:6d:ff:68:7c:
24:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:17:39:56:43:DA:CF:B0:F7:08:D9:F3:99:71:F7:4B:72:B6:83:65
X509v3 Authority Key Identifier:
keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/479D20DE750811ED93993510C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.114.188.0-45.114.190.255
103.54.154.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:24:2d:40:a5:66:39:60:7f:ac:ed:92:e7:33:53:ea:e8:bc:
af:a9:31:78:0a:1e:8c:53:55:67:45:50:bd:0a:6f:33:20:4d:
54:14:27:f4:90:40:73:08:60:b1:ef:00:e8:6d:d4:6b:92:6b:
66:f5:06:15:38:79:f8:89:ab:ee:a0:f9:52:04:0d:1f:8c:1b:
c9:52:27:b6:90:3c:7f:ea:56:26:ed:96:7e:54:29:0d:8c:80:
c8:95:b0:5a:81:f7:11:3f:25:47:7d:c9:37:93:7c:be:00:81:
d9:8a:5e:70:57:50:52:26:d0:05:48:4f:f4:75:10:ed:c4:75:
88:ae:1b:c2:5b:51:1c:55:08:54:6a:3a:41:37:77:2f:79:54:
8f:78:d5:eb:0c:d3:85:51:83:d0:b7:f3:16:b1:d0:fa:99:ab:
4a:a9:07:53:c2:55:1a:8d:2a:5f:fa:e0:b4:58:fb:dc:00:f4:
78:9f:e4:0c:52:a5:e7:92:e1:6d:b1:4d:d5:2e:29:13:07:66:
aa:bc:fc:5b:b1:f8:ec:fa:27:32:c7:42:cf:6f:18:64:8b:94:
de:6c:ae:00:8c:41:47:57:31:d2:5c:36:3b:bf:55:ed:8b:4d:
f2:43:b1:ef:ec:d7:c6:92:c5:67:c8:40:26:d0:f9:2c:51:33:
f5:66:bd:1c
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgICBY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQwRDIxMTAvBgNVBAUTKEQ1RTUzQUYxMTU5OTdDN0ZBM0I4NjU1MkY5NUY1MTE0
QUYzNDA1RTkwHhcNMjIxMjA2MTAyOTQ5WhcNMjMwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02MzhmMTk5ZC03NDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwCh/MuJ6sXKsLDltNNjNOyy2fLgYc/QmzFvZXmQgVZFpMZgyab4BB5JkBmop
6HJcHLNqRht3Wjfrj8vHqwnORxycRTeUExVRnQh9dwKHorR7sFZPMdVE6j030iS7
rOkrBXBSk8wDL9ZZ6xL+HZaWAMY1Qyish9v+qS8d66yGGhztxv2WHI80uU7T7sa5
JoKRDArBDHv6/qTvxa+FZVeOTF1m1WAAQ8FUpoo1OJFKE1RgP9mavVp7XVjF1Oyq
HFASYCeAzEraZy/JP8Eljc7QFWvAyxz5cX7UZOcTMz7bYyCYf88snbbROHE1law1
iQmm6B+k5kPBSzG8qm3/aHwkgQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFDQXOVZD
2s+w9wjZ85lx90tytoNlMB8GA1UdIwQYMBaAFNXlOvEVmXx/o7hlUvlfURSvNAXp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDBEMi81OTM3RDQzRTM1
QUQxMUVCODFFRUFEMTJDNEY5QUUwMi8xZVU2OFJXWmZILWp1R1ZTLVY5UkZLODBC
ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFlVTY4UldaZkgtanVHVlMtVjlSRks4MEJlay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkQwRDIvNTkzN0Q0M0UzNUFEMTFFQjgxRUVBRDEyQzRGOUFFMDIvNDc5RDIwREU3
NTA4MTFFRDkzOTkzNTEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E
HjAcMBoEAgABMBQwDAMEAi1yvAMEAC1yvgMEAGc2mjANBgkqhkiG9w0BAQsFAAOC
AQEAoyQtQKVmOWB/rO2S5zNT6ui8r6kxeAoejFNVZ0VQvQpvMyBNVBQn9JBAcwhg
se8A6G3Ua5JrZvUGFTh5+Imr7qD5UgQNH4wbyVIntpA8f+pWJu2WflQpDYyAyJWw
WoH3ET8lR33JN5N8vgCB2YpecFdQUibQBUhP9HUQ7cR1iK4bwltRHFUIVGo6QTd3
L3lUj3jV6wzThVGD0LfzFrHQ+pmrSqkHU8JVGo0qX/rgtFj73AD0eJ/kDFKl55Lh
bbFN1S4pEwdmqrz8W7H47PonMsdCz28YZIuU3myuAIxBR1cx0lw2O79V7YtN8kOx
7+zXxpLFZ8hAJtD5LFEz9Wa9HA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:20 2024 by rpki-client on console-ams.rpki-client.org