Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/D579718C157311EC8CD4122EC4F9AE02.roa
File: D579718C157311EC8CD4122EC4F9AE02.roa (raw, json)
Hash identifier: ldFbxmuDBBd99bQnGrdKuQfJi94dQY3z1EJTXYaMKWs=
Subject key identifier: 9F:44:72:82:2D:2E:F1:4F:26:2D:5A:62:D7:85:61:9E:59:A5:A2:38
Certificate issuer: /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial: 1F
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/D579718C157311EC8CD4122EC4F9AE02.roa
Signing time: Tue 14 Sep 2021 15:52:59 +0000
ROA not before: Tue 14 Sep 2021 15:52:59 +0000
ROA not after: Thu 01 Dec 2022 00:00:00 +0000
asID: 147002
IP address blocks: 103.172.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31 (0x1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917419E
Validity
Not Before: Sep 14 15:52:59 2021 GMT
Not After : Dec 1 00:00:00 2022 GMT
Subject: CN=6140c55b-13be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:14:1f:b3:5e:b1:33:2f:be:25:c4:24:10:
5c:91:ec:69:ef:bf:7d:03:a4:d1:7b:1c:d7:12:3a:
e4:d8:fd:20:47:69:59:6f:20:6c:23:bd:49:e9:62:
07:bd:ff:50:b4:8f:1f:7d:d0:80:50:79:de:6e:89:
c3:ed:09:1a:a1:f9:4a:7d:42:b5:71:8b:06:39:90:
d0:f7:95:81:83:53:98:3a:56:bd:96:ac:77:08:5d:
ed:cb:21:31:79:86:d2:43:74:dd:a9:78:f4:c1:10:
0e:ab:1d:92:97:2e:6f:f2:58:a4:df:82:90:fd:e2:
5a:4b:ef:05:8d:98:c7:e7:68:a3:0d:e0:78:b0:a6:
56:b3:11:64:78:32:6d:55:28:30:92:65:19:66:ce:
1f:fb:0e:9e:2d:1f:9e:50:82:d9:d8:5f:ef:f8:2c:
19:e3:ae:45:43:c9:ad:4f:1a:17:86:83:e4:61:1a:
9b:a9:91:7b:d4:f6:85:20:05:bc:b8:39:22:d0:5a:
79:07:be:ac:dc:be:4b:da:9e:10:34:62:36:04:d2:
b1:75:0f:6f:61:ab:e1:f3:49:7a:65:b4:a2:1a:e2:
85:04:dd:ab:48:53:67:57:c3:17:80:0b:75:df:94:
ae:93:1c:8b:e3:fd:7a:d7:dd:07:eb:98:3a:5b:b1:
cc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:44:72:82:2D:2E:F1:4F:26:2D:5A:62:D7:85:61:9E:59:A5:A2:38
X509v3 Authority Key Identifier:
keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/D579718C157311EC8CD4122EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.172.134.0/24
Signature Algorithm: sha256WithRSAEncryption
67:6a:48:fe:08:9b:86:4f:66:c4:b7:da:60:39:61:20:80:63:
9c:60:a9:d0:66:6b:94:de:01:88:65:d4:4e:fd:ad:0f:5f:c1:
d4:67:98:50:17:97:0b:65:8a:e7:2a:e5:22:9d:71:f5:1c:62:
3b:b7:58:90:c7:73:58:83:a0:84:fd:0d:32:e6:2c:14:9b:47:
22:1a:43:98:ef:f2:07:54:d7:be:3b:96:24:be:9b:e8:d6:69:
78:7c:1d:3a:ea:83:9f:ba:98:ae:03:f6:d0:4b:9d:03:5d:4a:
4e:2b:3c:e1:12:31:93:33:1f:ca:68:a2:2a:9e:1a:97:92:55:
0d:1c:0c:0c:c1:56:be:41:0a:b1:76:a6:70:65:86:12:cf:e7:
44:de:57:20:45:f7:62:81:7c:69:2e:9b:b6:cb:40:5f:6c:f0:
8a:d6:1b:be:ff:ea:e2:79:05:67:d2:f3:e5:72:64:7a:66:ad:
72:85:48:a7:6c:e2:36:ec:c6:35:0e:aa:e3:9c:dd:02:3f:e8:
69:34:62:2e:a2:ee:93:fb:a1:5d:5d:90:c0:be:8b:68:65:18:
a0:08:57:db:82:21:45:43:fa:24:8a:80:da:92:2a:22:3b:a6:
54:4f:71:31:e9:6a:3f:55:a3:6a:20:3d:af:da:33:f3:ad:f0:
f0:c6:df:53
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
NDE5RTExMC8GA1UEBRMoMTQ0NTQ4OUZERDUwQUE0NEFDMUQyQTNDM0ExNjZFMDZD
NjYyQUZENTAeFw0yMTA5MTQxNTUyNTlaFw0yMjEyMDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTYxNDBjNTViLTEzYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7jxQfs16xMy++JcQkEFyR7Gnvv30DpNF7HNcSOuTY/SBHaVlvIGwjvUnpYge9
/1C0jx990IBQed5uicPtCRqh+Up9QrVxiwY5kND3lYGDU5g6Vr2WrHcIXe3LITF5
htJDdN2pePTBEA6rHZKXLm/yWKTfgpD94lpL7wWNmMfnaKMN4HiwplazEWR4Mm1V
KDCSZRlmzh/7Dp4tH55QgtnYX+/4LBnjrkVDya1PGheGg+RhGpupkXvU9oUgBby4
OSLQWnkHvqzcvkvanhA0YjYE0rF1D29hq+HzSXpltKIa4oUE3atIU2dXwxeAC3Xf
lK6THIvj/XrX3QfrmDpbscx7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUn0Rygi0u
8U8mLVpi14VhnlmlojgwHwYDVR0jBBgwFoAUFEVIn91QqkSsHSo8OhZuBsZir9Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc0MTlFLzk4MUVFOTg2MEIy
MTExRUM4NDIxNDk0REM0RjlBRTAyL0ZFVkluOTFRcWtTc0hTbzhPaFp1QnNaaXI5
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRkVWSW45MVFxa1NzSFNvOE9oWnVCc1ppcjlVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDE5RS85ODFFRTk4NjBCMjExMUVDODQyMTQ5NERDNEY5QUUwMi9ENTc5NzE4QzE1
NzMxMUVDOENENDEyMkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAGeshjANBgkqhkiG9w0BAQsFAAOCAQEAZ2pI/gibhk9mxLfa
YDlhIIBjnGCp0GZrlN4BiGXUTv2tD1/B1GeYUBeXC2WK5yrlIp1x9RxiO7dYkMdz
WIOghP0NMuYsFJtHIhpDmO/yB1TXvjuWJL6b6NZpeHwdOuqDn7qYrgP20EudA11K
Tis84RIxkzMfymiiKp4al5JVDRwMDMFWvkEKsXamcGWGEs/nRN5XIEX3YoF8aS6b
tstAX2zwitYbvv/q4nkFZ9Lz5XJkematcoVIp2ziNuzGNQ6q45zdAj/oaTRiLqLu
k/uhXV2QwL6LaGUYoAhX24IhRUP6JIqA2pIqIjumVE9xMelqP1WjaiA9r9oz863w
8MbfUw==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:38:36 2025 by rpki-client